Automatically updating File Permission through GP's on a stand alone

From: Michael Devlin (Michael.Devlin@figleaves.com)
Date: 07/05/02 

Date: Fri, 5 Jul 2002 17:53:20 +0100
From: "Michael Devlin" <Michael.Devlin@figleaves.com>
To: <focus-ms@securityfocus.com>

On a stand alone 2000 machine you can import a section of a template
into gpedit.msc and the machine will happily apply those settings (eg
Password policy, IPSec policy la la la) as regular as you want....
HOWEVER..... There is no section for filesystem permissions in
Gpedit.msc (the same as there are for the equiv in AD), so.... My
question.....

Is it possible to modify/add/hack a template file, with FilePermission
(and Reg permissions) into the GroupPolicy folder in system32 so that
they are applied at regular intervals with no user interaction.

Incidentally, I have already set it up using a script, task manager and
secedit.... But that is a little messy.

Many thanks

Michael Devlin

Relevant Pages

  • You do not have permission to change your password
    ... It is quite possible that when you applied the template ... changed the password policy to have a password age limit ... the User must logon to change password option is also ... may be able to go in remotely and change the security ...
    (microsoft.public.win2000.security)
  • Re: secedit rollback switch
    ... The security template you supply as the /cfg parameter is used to describe ... what settings to generate a rollback template for. ... if you only wanted to snapshot your password policy settings, ... > Let say I run the following command on my server locally using the above ...
    (microsoft.public.win2000.security)
  • Entering Hex into Custom ADM Templates
    ... I'm trying to write my own custom .adm template. ... great is if the template had the password policy and you could enter the ... password as 'password' and it would then convert it to hex for you. ...
    (microsoft.public.win2000.group_policy)