Link to home
Start Free TrialLog in
Avatar of John Water
John WaterFlag for United States of America

asked on

Is there a way to use GPO to update the default access of a folder on company PCs?

I would like to set up a GPO to update the access level of a particular folder on company PCs so that the owner of the folder is the only one that can access that folder.
I am running Win 2012 r2 DC and Win 7 PCs.

Can this be done with GPOs?

Thank you,
Avatar of Muhammad Burhan
Muhammad Burhan
Flag of Pakistan image

we have to set NTFS/SMB permissions on the folders manually, because how the file system come to know about the owners.

enable enumeration on shares and set NTFS permissions so other users not even see unwanted folders
swfwmd2,
Log in to the 2012 server where the folder is.  Go to Server Manager>Roles(expand roles)>File Services(expand)>highlight Share and Storage Management.  Highlight your share then click properties on the right side. Click the permissions tab, then share permissions button.  For the groups or users you don't want access to the share-clear their allowed rights and you can actually deny their rights, allow rights to only the user or owner you want.
ASKER CERTIFIED SOLUTION
Avatar of John Water
John Water
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of John Water

ASKER

This was the best, most complete solution for our issue