Solved

'Application data' folder

Posted on 2010-09-16
2
492 Views
Last Modified: 2012-05-10
Hi

I have a third-party HR application which needs to write information to the 'Application Data' folder under a users profile. We currently run under a Terminal services environment and access to this folder is denied to all end-users under our group policies.

Is there a way I could allow a small number of users access to this folder without having to grant the permission to everybody.
0
Comment
Question by:bronafon_ict
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 20

Expert Comment

by:wolfcamel
ID: 33691906
you should still be able to use group security - make the selected users members of the security group, and then give full permission to those users.
Alternatyively you may be able to run the program as administrator?
0
 
LVL 8

Accepted Solution

by:
kcoect earned 500 total points
ID: 33692817
I find it interesting that you have users that are restricted to their own "Application Data" directory in their own profile.  I understand the restriction via GPO, but this is unusual since most applications that run and require temporary file storage will use the Application Data directory in a users profile.

That being said, you can do several things.
1) You can do what Wolfcamel stated above

2) You can exclude the users in question from the GPO that is preventing the access to the Application Data directory (by changing the scope of the GPO)

3) You can possibly script something in the login script that will use CALCS and change the security of those folcers for those individuals (making sure they run the correct login script)

Good luck!
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Let's recap what we learned from yesterday's Skyport Systems webinar.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question