Re: Setting up GPO to assign file system permissions

From: arameth (anonymous_at_discussions.microsoft.com)
Date: 04/05/04 

Date: Mon, 5 Apr 2004 10:50:36 -0700

All servers running Windows 2000.
>-----Original Message-----
>Are your servers 2k or 2k3?
>
>--
>Derek Melber
>BrainCore.Net
>derekm@braincore.net
>"arameth" <anonymous@discussions.microsoft.com> wrote in
message
>news:130f101c418ff$69fc3540$a001280a@phx.gbl...
>> I am trying to set up a policy that will assign file
>> permissions on a specific file (explorer.exe), in order
>> to restrict access to it across all of our Citrix
>> Metaframe servers.
>>
>> To do this, I opened the default domain policy in the
>> Group Policy editor. I went to 'computer
>> configuration', 'security settings', and 'File
System'. I
>> added the file 'c:\winnt\explorer.exe', configure deny
>> execute permissions for the user group I wanted to
>> restrict, deselected the option for the file to allow
>> inheritable permissions to propagate.
>>
>> However, whenever I log in to the servers, no matter
>> which user I log in with (domain admin, regular user),
>> the permissions remain unchanged
(everyone,fullcontrol).
>>
>> Anyone out there have experience pushing NFTS
permssions
>> via GPO's before, that can give me some direction?
>>
>>
>>
>
>
>.
>

Relevant Pages

  • Re: Automated logoff using Winexit.scr
    ... Actually, I've been trying to use RegDACL, but can't figure out how I ... You can use RegDACL to set these permissions in batch. ... are not servers in our domain. ... I have tried creating a group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Automated logoff using Winexit.scr
    ... If a non-administrative user attemps to use the WinExit screen saver, ... You can use RegDACL to set these permissions in batch. ... are not servers in our domain. ... I have tried creating a group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Setting up GPO to assign file system permissions
    ... Are your servers 2k or 2k3? ... > permissions on a specific file, ... I opened the default domain policy in the ... > Group Policy editor. ...
    (microsoft.public.win2000.group_policy)
  • Setting up GPO to assign file system permissions
    ... permissions on a specific file, ... to restrict access to it across all of our Citrix ... I opened the default domain policy in the ... Group Policy editor. ...
    (microsoft.public.win2000.group_policy)
  • Re: [RFC][PATCH] Privilege dropping security module
    ... dpriv.c contains the struct security_operations hooks for dpriv. ... You're masking file permissions. ... And stick with your namespace, ... * Parse policy lines one at a time. ...
    (Linux-Kernel)
Loading