Re: Setting up GPO to assign file system permissions

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 04/02/04 

Date: Fri, 2 Apr 2004 15:42:09 -0700

Are your servers 2k or 2k3? 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"arameth" <anonymous@discussions.microsoft.com> wrote in message
news:130f101c418ff$69fc3540$a001280a@phx.gbl...
> I am trying to set up a policy that will assign file
> permissions on a specific file (explorer.exe), in order
> to restrict access to it across all of our Citrix
> Metaframe servers.
>
> To do this, I opened the default domain policy in the
> Group Policy editor. I went to 'computer
> configuration', 'security settings', and 'File System'. I
> added the file 'c:\winnt\explorer.exe', configure deny
> execute permissions for the user group I wanted to
> restrict, deselected the option for the file to allow
> inheritable permissions to propagate.
>
> However, whenever I log in to the servers, no matter
> which user I log in with (domain admin, regular user),
> the permissions remain unchanged (everyone,fullcontrol).
>
> Anyone out there have experience pushing NFTS permssions
> via GPO's before, that can give me some direction?
>
>
>

Relevant Pages

  • Re: Automated logoff using Winexit.scr
    ... Actually, I've been trying to use RegDACL, but can't figure out how I ... You can use RegDACL to set these permissions in batch. ... are not servers in our domain. ... I have tried creating a group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Automated logoff using Winexit.scr
    ... If a non-administrative user attemps to use the WinExit screen saver, ... You can use RegDACL to set these permissions in batch. ... are not servers in our domain. ... I have tried creating a group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Setting up GPO to assign file system permissions
    ... All servers running Windows 2000. ... >> permissions on a specific file, ... I opened the default domain policy in the ... >> Group Policy editor. ...
    (microsoft.public.win2000.group_policy)
  • Setting up GPO to assign file system permissions
    ... permissions on a specific file, ... to restrict access to it across all of our Citrix ... I opened the default domain policy in the ... Group Policy editor. ...
    (microsoft.public.win2000.group_policy)
  • Re: [RFC][PATCH] Privilege dropping security module
    ... dpriv.c contains the struct security_operations hooks for dpriv. ... You're masking file permissions. ... And stick with your namespace, ... * Parse policy lines one at a time. ...
    (Linux-Kernel)
Loading