Security Permissions

  • Thread starter Thread starter Mary
  • Start date Start date
M

Mary

Hi ,
In the ThinClient which iam using ,there are two modes Administrator and
User Mode.I want User to be a member of Administrator but at the same time i
want to restrict Full Access to the User.So what i did is goto C
Drive -->Properties-->Security-->Users-->and checked only few checkboxes
like Read ,Modify etc.
My Problem is i couldnot find the registry entries for these checkboxes to
make changes in the registry .I tried using regedit but it shows locations
like HKLM\SAM\SAM\DOMAINS\Builtin\Groups\Names\User which are not found in
the regedit.
Please Help.

Thanks,
Mary
 
Hi Mary,
Those permissions are present in the file system, registry is not
related to that. If you want to do that automatically means you have to write
a program for doing those tasks.
One tip is you can use cacls.exe to set permissions for any file or folders.
follow the link for more info http://www.ss64.com/nt/cacls.html

Thanks,
 
Mary,

You can't easy play with any type of security permissions through the registry (for pretty much any object - file, reg.branch,
etc.). Otherwise it would be *much* easier to hack.

But as Nyquist pointed out you can set it with tools like CACLS.EXE. Or use API calls.
Hi ,
In the ThinClient which iam using ,there are two modes Administrator and User Mode.I want User to be a member of Administrator but
at the same time i want to restrict Full Access to the User.So what i did is goto C Drive -->Properties-->Security-->Users-->and
checked only few checkboxes like Read ,Modify etc.
Click to expand...

Do you want to change the entire drive C permission access settings?
Don't do that! You may end up with an dead account which you can't even log in to.

There are another ways to restrict user access to files on storage mediaum. Look at the Shell Policies. (NoDrive, NoViewOnDrive,
etc.)
 
Hi,
Actually iam a starter in Vb Script.Can any one help me out on How to write
a script such that it adds a user by the Name "User" and denies the "Read &
Execute","List Folder Contents","Read" Permisions for this User.
Please help.
Thanks,
Mary.
 
Hi ,
I could write a script to create a newuser but unable to deny the
permissions like "Read &
Execute","List Folder Contents","Read" Permisions for this User.Please Help.
Thanks,
Mary
 
Mary,

Since you are dealing with some "custom" permissions (not only R, W, C, F) you should be using *xcalcs* instead of calcs.
The xcalcs is Extended Change Access Control List tool.

Even better, you should use an updated version of the xcalcs which is a VBS script. Read and download the files from this KM
article: http://support.microsoft.com/?id=825751
There you will find a bunch of examples of how to use the script.
 
Back
Top