Program needs access to c:\windows dir

Posted on 2012-09-09
Last Modified: 2012-10-06
I have a program that will not run unless I give the users admin access of the local pc. I dont want to do this for obvious reasons. What is the best way to make this program run. Is there anyway (policy) to set that the program can run using admin access only for this program. I deny access to the c drive through policies and all users are set as domain users. This is a school environment and the issues is with student login as a domain user. If I add the students group to the local admin account the program runs but will not run under power users group. I just need to give them access to a couple directories there.  I have the desktop disabled and I puch all app shortcuts out through policies.
Question by:pgator
    1 Comment
    LVL 1

    Accepted Solution

    Open Group Policy Object Editor

    Drill down to Computer Configuration/Windows Settings/Security Settings/File System
    Right-click on "File System" in the left-hand pane and choose "Add File" from the drop-down.
    Choose "C:" as the target and click "Ok".

    On the permissions screen, click the "Advanced" button.

    Add a permissions entry to give Domain Users read and write permission.

    Make sure you change the "Apply Onto" drop-down to "This Folder Only" at the top of that window.
    Have your users reboot so the computer GPO settings can apply, or do a GPUPDATE /FORCE on individual computers

    As always, please apply this GPO setting to a test OU or test group before you apply to your domain.

    Please let me know if this worked out for you.


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now