• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 310
  • Last Modified:

Group Policy File permission change

I have a windows 2003 AD with XP Desktops, all my users have dedicated desktop with individual user account. Due to a 3rd party software requirement i need at allow full control permission only for the user belongs to this machine.
can this be achived by using group policy?
  • 2
1 Solution
Joseph MoodyBlogger and wearer of all hats.Commented:

Computer config\windows settings\security settings\file system security
PeterMatthewsAuthor Commented:

Just to clarify, I want username "bob" to have full control permission on "folder1" on computer name "Bjones"
is this possible via group policy?
please instruct step by step?
Joseph MoodyBlogger and wearer of all hats.Commented:

1. Open a group policy object
2. Scope the policy down to the computer you want it to apply to. Make sure it it linked to the correct OU
3. Edit the policy and work down to Computer Config\Policies\Windows Settings\Security Settings\File System Security
4. Right click on file system security and click add file
5. In the folder box, type in the exact path that you need to set permissions to. If you need a folder with all sub files, do something like: C:\windows\temp\*
6. Hit ok. Now set permissions how you want them

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now