How to give user permission to browse remote computers using GPO

Posted on 2011-02-17
Medium Priority
Last Modified: 2012-05-11
We have got a domain 2008 based with windows 7 desktops, I would like to give one of the regular users a permission to read/write files to other computers (using \\computername\c$) without adding him to domain admins or local admin.

How this can be done using GPO ?

Thanks !
Question by:ness-tsg-cto
  • 2
LVL 27

Expert Comment

ID: 34915172
The best way would be to create a new share. The c$ is an admin share and you can not set permissions on it.

Accepted Solution

dhcpdiscover earned 2000 total points
ID: 34915258
As mentioned earlier you should create a new share. And if you want the shares to be hidden, place a dollar sign ($) at the end of the share name (like myshare$) Give the necessary permissions for that specific user. In your case you may not use the root share name C$, so try to use a different share name.

Author Comment

ID: 34915274

Thanks for you answer, in case the folder does not exist on that workstation, will the group policy create it ?

Expert Comment

ID: 35112350
I don't think that the folder will be created automatically but for you are in a 2008 domain environment, you can create a group policy and edit it with group policy management editor to create a folder in clients. In the editor go to Computer Configuration>Preferences>Windows Settings>Folders. Create a folder and set it appropriately. I think that should work for you.

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question