permissions locate map with help from security template

  • Thread starter Thread starter B van Daalen
  • Start date Start date
B

B van Daalen

Best reader,

On us desktops I must give permissions on an special map. I don't like
to travel to all desktop to give permissions to all users!

I now that it is possible to push it with GPO with help from security
template!

Who me can help om course!

Thank in advance,

Kinds regard,

Barry van Daalen
 
Barry,

If you have built a security configuration editor template using the mmc
snap-in "security templates" that carries the filesystem permissions you
want everywhere, then you can import this into a GPO that has the
machine to be imprinted within its GPO scope of application.

To build such a template, use also the mmc snap-in "security analysis
and configuration" and import the template and then analyze on a
reference machine until the template matches the desired filesystem
settings. Each time you adjust the template values, save the template
and then (re)import into the analyzer, choosing to clear the database
each time, and (re)analyze.

A couple things are pre-requisite to this working are
1. you want permissions set the same on all machines using the
same groups
2. the filesystem part you want controlled is the same on all the
machines (same drive letter and path)
 
Hello Rogeror orther reader,

Thanks for your answer! I have done it, en it work! There is only one
think that can give problems by us! Whene you remove the map, en
recreate the map again, the policy don't overwrite the permissions!
also not when you restart the computer or give the command gpupdate.

Is there an workaround for this, that whene the map is recreated the
permissions are set again to the setting you have filled in, in the
GPO!

Thanks in advance,

Kinds regard,

Barry
 
Hi Barry,

At this point I do not know for certain whether you deal with
multiple stand-alone machines, or if these are domain joined.
You can use the secedit command to apply a template directly
to a machine, just as if you had used Security Configuration and
Analysis snap-in to analyze and then apply. This can be done
if the template is on a network share access to the machine
accounts with a startup script - but importing to a domain GPO
can deliver most settings. Outside of a domain, importing will
only import the security settings - not filesystem, registry, etc..
 
Hi Roger,

We have have an domain, I have give the permissions for the filesystem
in an existing GPO! this Policy is bound to us Workstation on us
Netwerk! We have an application, when it is installed, who set the
permissions so that the users have't rights to access te folder of the
application and can't run the application.

when I adapt the policy it will be work fine! but when the programma
will be uninstalled en installed again, de permissions don't overwrite
the permissions of the folder again.

I hope it is clear for you now!

Kinds regard,

Barry van Daalen
 
Back
Top