Solved

'Application data' folder

Posted on 2010-09-16
2
485 Views
Last Modified: 2012-05-10
Hi

I have a third-party HR application which needs to write information to the 'Application Data' folder under a users profile. We currently run under a Terminal services environment and access to this folder is denied to all end-users under our group policies.

Is there a way I could allow a small number of users access to this folder without having to grant the permission to everybody.
0
Comment
Question by:bronafon_ict
2 Comments
 
LVL 20

Expert Comment

by:wolfcamel
Comment Utility
you should still be able to use group security - make the selected users members of the security group, and then give full permission to those users.
Alternatyively you may be able to run the program as administrator?
0
 
LVL 8

Accepted Solution

by:
kcoect earned 500 total points
Comment Utility
I find it interesting that you have users that are restricted to their own "Application Data" directory in their own profile.  I understand the restriction via GPO, but this is unusual since most applications that run and require temporary file storage will use the Application Data directory in a users profile.

That being said, you can do several things.
1) You can do what Wolfcamel stated above

2) You can exclude the users in question from the GPO that is preventing the access to the Application Data directory (by changing the scope of the GPO)

3) You can possibly script something in the login script that will use CALCS and change the security of those folcers for those individuals (making sure they run the correct login script)

Good luck!
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Read about achieving the basic levels of HRIS security in the workplace.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now