Solved

Allow Write Permissions to a C: drive folder in Group Policy on win2k

Posted on 2009-06-30
5
2,108 Views
Last Modified: 2012-08-13
Is there a way to set up in group policy for users to be able to write to a folder on their C: drive?  I don't have users set up as local admins and would like to keep it that way and I didn't want to have to go into every machine and change the permissions on each folder.
0
Comment
Question by:cbish21577
  • 3
  • 2
5 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 24748747
Yes, that's possible. Just apply a GPO to the machines in question, and add the folder in Computer Configuration\Windows Settings\Security Settings\File System. Note that you don't need to be able to browse to the folder, you can just enter the full local path (in case the folder doesn't exist on the machine you're running the GPMC on).
Apply or modify permission entries for objects using Group Policy
http://technet.microsoft.com/en-us/library/cc756952(WS.10).aspx
0
 

Author Comment

by:cbish21577
ID: 24748821
So I would just add C:\program files\blah in Computer Configuration\Windows Settings\Security Settings\File System?
0
 
LVL 83

Expert Comment

by:oBdA
ID: 24748852
And add the necessary permissions in the dialog afterwards, yes. I'd create a domain local group "NTFS_Blah_C" or whatever and assign this group Change permissions, then add the required users or groups to this group.
You might want to try it with a test folder on a test client first before you go into production.
0
 

Author Comment

by:cbish21577
ID: 24749120
I'm confused as to adding C:\program files\blah in Computer Configuration\Windows Settings\Security Settings\File System.  I'm on my win2k server and in Group Policy and I'm under  Computer Configuration\Windows Settings\Security Settings\File System but I'm adding C: drive.  Isn't that referring to the servers c: drive and not the local machines I want to grant some access too?  I've added this all and selected everything I can imagine that is associated with the test computer and test user to give permission and nothing is working.
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 24749219
No; the client side extensions of the group policy will see the C: reference and set the permissions on this local path.
The test user is of no importance; the GPO has to be applied to a *computer* object.
Assuming you have XP clients: apply the GPO, logon with an admin account to the XP machine, open a command prompt, enter
gpupdate /target:computer /force
The permissions on the folder should change to the ones defined in the GPO.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Owning a franchise can be the dream of a lifetime. It provides a chance for economic growth. You can be as successful as you want.  To make your franchise successful, you need to market it successfully. Here are six of the best marketing strategies …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now