Avatar of IT_Group1
IT_Group1
Flag for Israel asked on

Group policy win 2008 w/ XP SP3 workstations - how to prevent users from deleting files from Drive C:?

Group policy win 2008 w/ XP SP3 workstations - how to prevent users from deleting files from Drive C:?

It's a bit urgent, thx in advance.
Windows Server 2008Active DirectoryIT Administration

Avatar of undefined
Last Comment
MarkieS

8/22/2022 - Mon
JAN PAKULA

dont give them local admin rights or power user rights - just domain user rights- they shouldnt be able to delete it then

Jan MA CCNA
IT_Group1

ASKER
Thx for the swift reply.
I need those users to be local admin for other reasons, is there a more elegant way?

I thought of using NTFS permissions.
namanov

Hi, you can use two way to achive this what you want.
1. You can use by Group policy, simple described here http://mcpmag.com/articles/2008/10/13/file-permissions-thru-group-policy.aspx
2. You can use startup script (which I prefer) with cacls or icacls command described here http://ss64.com/nt/cacls.html
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
MarkieS

You could try hiding the C: drive through Group policy

http://support.microsoft.com/kb/231289

but that's the problem with making users Local Admin.
SyedJan

NTFS permission is the best option for this scenario.
Ryan McCauley

As a different angle, can you explicitly grant the users the permissions for which they currently need local admin rights? You say they need it "for other reasons", but what other reasons are those? It may be cleaner to make the users regular domain users, and then explicitly give them the rights they need so you don't have to grant them local admin, which has any number of other implications.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
IT_Group1

ASKER
Hi experts

Any other ideas ?
ASKER CERTIFIED SOLUTION
MarkieS

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question