How to set File System permissions in Local Policy

On the domain level you can set folder permissions in Group Policy here - Computer Configuration\Windows Settings\Security Settings\File System. However, I need to be able to do this from Local Policy as the machines I am working with cannot receive Computer Group policies since they do not have connectivity until logon. Is there a way to accomplish this in Local Policy or with another method?
MCSFAsked:
Who is Participating?
 
Joseph MoodyBlogger and wearer of all hats.Commented:
0
 
MCSFAuthor Commented:
I did a lot of testing with different options and what finally worked for me was a combination of two built-in Windows command line tools that were available for Windows 7. I used takeown to set ownership on the files/folders and then used icacls to set the permissions. I first did some testing with them from the command line and then once I had them perfected I incorporated the commands into a batch file. I plan to put that batch file into the local policy as a Startup Script.

Here is an example of the commands I used. The first command takes ownership for the local Administrators group. The second gives full control to the local Users group for the folder and all sub-directories and files.

takeown /F c:\test /R /A /D Y
icacls c:\test\ /grant Users:(OI)(CI)(F)
0
 
MCSFAuthor Commented:
This comment got me on the right track.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.