• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 579
  • Last Modified:

icacls permissions suddenly seems to change for certain workstations in domain

AD-domain on 2003-servers
Windows 7 workstations defined in AD
Users is logging on domain, and local non-admin rights

The last weeks I have stuggled with user-permissions on desktop and taskbar links (and other files too).
Issue havn't been reported at all before ca 4 weeks ago.

The user/workstation can run fine for a couple of days, the suddenly for only some users/workstations it seems  that the user-rights to desktop-links aso is changed.
The users are prompted for:

"Open File - Security Warning"

Seems to be related to the workstation, when the user logs on to an other the workstation, the Issue is not there.

Have read a lot of topics how to partly solve the Issue on relevant folders by t.ex:


which solve the Issue for actual shorcuts, but when users create a new shortcut, the Issue persists for this new shortcut.

I'll really like to find the Cause to this Issue, hope someone can guide me where to search.
  • 3
  • 3
2 Solutions
Santosh GuptaCommented:

Please try below...

Close internet explorer
Open up a cmd prompt
cd "\Program Files\Internet Explorer"

olefiskAuthor Commented:
Hi Santosh

Thanks for the reply.
Sorry doesn't seem to help (done it on both iexplore-64 and iexplore-32).

t.ex. when copying the link "Windows media player" from start-menu to desktop, and when clicking the desktop-shortcut the warning still comes up.

By the way, have You any Idea what can cause the changes to some workstations ?
Santosh GuptaCommented:

Not sure why this happens. pls try below and revert.

The Lifecycle Approach to Managing Security Policy

Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.

olefiskAuthor Commented:
Hi again Santosh.

Thank You, seems to solve the Issue.

Have investigated on the differences on users/workstations, which do or do not have the Issue.

A clue seems to be users/workstations, which have the Issue, can be users who have their "my documents" folder moved to a mapped network-share.
Does that seem reasonable ?
Santosh GuptaCommented:
Ohh is this the case. yes it may.

try this solution.
•Go to Control Panel -> Internet Options -> Security -> Local Intranet -> Sites -> Advanced
•Add the mapped drive or UNC path (\\machine or network loccation)
olefiskAuthor Commented:
Hi Santosh

Sorry for the late reply, have tested a lot, stopped by the Eastern hollidays, and tested further the last days.
Your last reply seems to solve the Issue for the users with Documents folder placed on a mapped network-share.
Had still a few users which havn't mapped their Documents-folder, but they are solved via changing the security-Policy.

So Issue seems to be solved, but still annoying that I don't know what causes the Issue.

Thank You very much for Your help
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now