file system security

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

We just got a win 2000 server and are upgrading some of our computers to XP. The problem is some old software we use writes to a .ini file in the windows directory and the domain users accounts do not have write access to this directory.

Anyone know the best way to give all the users write access to just this file without going into each system and changing the file security?or giving them admin or poweruser rights.

There has to be a way to do it through group policy or something but I have not found it.
 
We just got a win 2000 server and are upgrading some of our computers to XP. The problem is some old software we use writes to a .ini file in the windows directory and the domain users accounts do not have write access to this directory.

Anyone know the best way to give all the users write access to just this file without going into each system and changing the file security?or giving them admin or poweruser rights.

There has to be a way to do it through group policy or something but I have not found it.
Click to expand...


Turn off inheritance from the parent folder on the ini file and set permissions.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
You can do this, by setting the GPO on the OU that holds those computer
accounts. Look into the following GPO setting. Computer
Configuration/Windows Settings/Security Settings/File System. Add a file
there and set its permissions.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

KN said:
We just got a win 2000 server and are upgrading some of our computers to
Click to expand...
XP. The problem is some old software we use writes to a .ini file in the
windows directory and the domain users accounts do not have write access to
this directory.
Anyone know the best way to give all the users write access to just this
Click to expand...
file without going into each system and changing the file security?or giving
them admin or poweruser rights.
 
Most 'old' software is not NT user-aware. Software that
is written for NT/2000/XP uses the Application Data hidden
folder for this type of write, as opposed to the system
folder. If you're not willing to upgrade your software to
compatible software, then you're forcing your own hand.
You named both ways to fix it.
-----Original Message-----
We just got a win 2000 server and are upgrading some of
Click to expand...
our computers to XP. The problem is some old software we
use writes to a .ini file in the windows directory and the
domain users accounts do not have write access to this
directory.
Anyone know the best way to give all the users write
Click to expand...
access to just this file without going into each system
and changing the file security?or giving them admin or
poweruser rights.
There has to be a way to do it through group policy or
Click to expand...
something but I have not found it.
 
Back
Top