Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2234
  • Last Modified:

Allow Write Permissions to a C: drive folder in Group Policy on win2k

Is there a way to set up in group policy for users to be able to write to a folder on their C: drive?  I don't have users set up as local admins and would like to keep it that way and I didn't want to have to go into every machine and change the permissions on each folder.
0
cbish21577
Asked:
cbish21577
  • 3
  • 2
1 Solution
 
oBdACommented:
Yes, that's possible. Just apply a GPO to the machines in question, and add the folder in Computer Configuration\Windows Settings\Security Settings\File System. Note that you don't need to be able to browse to the folder, you can just enter the full local path (in case the folder doesn't exist on the machine you're running the GPMC on).
Apply or modify permission entries for objects using Group Policy
http://technet.microsoft.com/en-us/library/cc756952(WS.10).aspx
0
 
cbish21577Author Commented:
So I would just add C:\program files\blah in Computer Configuration\Windows Settings\Security Settings\File System?
0
 
oBdACommented:
And add the necessary permissions in the dialog afterwards, yes. I'd create a domain local group "NTFS_Blah_C" or whatever and assign this group Change permissions, then add the required users or groups to this group.
You might want to try it with a test folder on a test client first before you go into production.
0
 
cbish21577Author Commented:
I'm confused as to adding C:\program files\blah in Computer Configuration\Windows Settings\Security Settings\File System.  I'm on my win2k server and in Group Policy and I'm under  Computer Configuration\Windows Settings\Security Settings\File System but I'm adding C: drive.  Isn't that referring to the servers c: drive and not the local machines I want to grant some access too?  I've added this all and selected everything I can imagine that is associated with the test computer and test user to give permission and nothing is working.
0
 
oBdACommented:
No; the client side extensions of the group policy will see the C: reference and set the permissions on this local path.
The test user is of no importance; the GPO has to be applied to a *computer* object.
Assuming you have XP clients: apply the GPO, logon with an admin account to the XP machine, open a command prompt, enter
gpupdate /target:computer /force
The permissions on the folder should change to the ones defined in the GPO.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now