permission to local directory via GP?

[funkytunaa]

I have a program that writes to a couple of files in it's own directory off C:\, let's call it programx.

So I have a folder on all machines with programx installed called c:\programx\

I need to give each user under a specific OU modify access to that folder. Rather than go to each machine specifically and login as admin, assign local rights to that user and log out then login, (tedious to say the least) I would like to assign the rights in GP or even a login script, I believe it's possible throught the "File System" option in the GPO?

I have set up c:\programx in there, which automatically changes the link to %SystemDrive%\programx and I give the users permission and ask it replaces current permissions etc but it doesn't seem to be working.

Is this the best/only way to give local right automatically? If so, hints on where I could be going wrong would be benifitial.

Cheers!

 

[IllogicallyLogical]

You could set up a Logon Script using cacls.exe to modify the permissions on the folder. Have a look at the example below.

cacls.exe C:\programx /E /T /G "Domain Users":C

Save the following as a batch file and deploy as a Logon Script using Group Policy. In this example, Domain Users would be given 'Modify' permissions to this directory as well as the files and subdirectories that fall beneath this directory while keeping existing permissions inherited from the root directory. You may fool with the parameters to your liking, but this would definitely accomplish what you are trying to do without having to visit each machine individually and modify the settings.

Here is a link that provides further information about cacls.exe.

- Cacls

http://technet.microsoft.com/en-us/library/bb490872.aspx

Joey
CCNA, MCSA 2003, MCP, A+, Network+, Wireless#