GPO for set file system ACL

  • Thread starter Thread starter Giuseppe Cibrario
  • Start date Start date
G

Giuseppe Cibrario

Hi,

whit GPO i can set file system ACL, all works fine if the 'SYSTEM' account
has 'full control' otherwise the GPO doens't work.
It's possible have a setting tha force this GPO to set file system ACL even
if 'SYSTEM' account has not access on it?

Thanks, Giuseppe
 
Giuseppe Cibrario said:
Hi,

whit GPO i can set file system ACL, all works fine if the
'SYSTEM' account
has 'full control' otherwise the GPO doens't work.
It's possible have a setting tha force this GPO to set file
system ACL even
if 'SYSTEM' account has not access on it?

Thanks, Giuseppe
Click to expand...

Hi,

Why don’t you leave SYSTEM=Full Control? I wouldn’t remove that
permission as it is the Computer account and can cause you all sorts
of grief.


Cheers,

Lara
 
lforbes said:
Hi,

Why don't you leave SYSTEM=Full Control? I wouldn't remove that
permission as it is the Computer account and can cause you all sorts
of grief.


Cheers,

Lara
Click to expand...

It was a mistake :-)
 
You will probably need to visit that filesystem area
as an admin and readd the grant to System.
Since machine policy is executed in the System context,
if System does not have permission to alter the security
on that area it will be denied and fail.
 
Back
Top