Re: Can Group Policy configure for NTFS permission

From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 12/26/02 

From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com>
Date: Thu, 26 Dec 2002 12:50:18 -0500

Yes, you can use Group Policy to roll out NTFS policy permissions. Doing
too many of this can probably slow down your computer, and this might be
especially noticable in a long delay after the login screen. If performance
becomes affected, it may make sense to apply the settings, make sure they
have taken effect everywhere, and then remove the group policy setting,
which still leaves the NTFS permissions in place.

I don't think every Group Policy MMC will make these options available to
you... however, where this option is not available to you, you should still
be able to use an .INF template or Group Policy database of your own
creation to roll out settings.

You can open up the sample templates in windowsroot\security\templates to
see what the NTFS permissions look like.

As you probably already know, this only affects Windows 2000 and XP clients.

"Chew" <cychew@sedaya.edu.my> wrote in message
news:009201c2aca9$97be8050$89f82ecf@TK2MSFTNGXA01...
> Good day,
>
> I have a question. Is it possible to use the group policy
> object to configure the NTFS permission of a client PC in
> a 2000 domain?
>
> The reason is because I find that although we can
> configure using the GPO for all the PCs in a domain,
> however it does not have a setting to secure the local FS
> permission which can lead to some disaster such as file
> deletion because default ntfs permission is everyone has
> full control.
>
> Thank you for reading and thanks for giving your
> suggestion also.
>
> Chew 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.423 / Virus Database: 238 - Release Date: 11/25/2002

Relevant Pages

  • Re: Corporate File control
    ... How often are you finding you need to change permissions? ... do this - I set up the permissions on the folders when I set up the server, ... > minutia of NTFS permissions would be challenging. ... > find good documentation on NTFS settings? ...
    (microsoft.public.win2000.file_system)
  • Re: Corporate File control
    ... How often are you finding you need to change permissions? ... do this - I set up the permissions on the folders when I set up the server, ... > minutia of NTFS permissions would be challenging. ... > find good documentation on NTFS settings? ...
    (microsoft.public.security)
  • Re: Removing "File and Folder tasks"
    ... create a Group Policy to enforce the NTFS ... permissions, and then link it to that OU. ... Do NOT attempt to apply NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Would like to lockdown public computer
    ... not have access to any shares for share permissions or ntfs permissions. ... Learn to use Group Policy. ... protect the cmos settings as it is easy to reboot a computer from a floppy ... the mandatory profile on the local computer and then have the users account ...
    (microsoft.public.win2000.security)
  • Re: Removing "File and Folder tasks"
    ... You can put the computers you want to enforce the NTFS permissions on into ... create a Group Policy to enforce the NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
    (microsoft.public.windowsxp.security_admin)