Re: folder permission

From: HenRy (ask_at_me.com)
Date: 12/06/04 

Date: Mon, 6 Dec 2004 10:02:05 -0300

What I want is that a folder in each user computer be accesible only by the
local admin group of each computer (we added the user to the local admins
group in our company)
Thanks

You have not been fully clear on what it is that you
do want. You have stated
> I want to set permissions for the documents folder
> in all computers in the domain
> I want that only the user can access to this folder.
and now
> but i can't setup that only the local admin of each
> computer can access to it
First, are you speaking of each individual account's
My Documents, or are you speaking of the Shared
Documents available to all accounts?
Are you meaning that some area, on a per account
basis should be accessible by only that user account,
or by that user account and the machine local admins,
or ?
By saying "local admins" are you meaning only the
machine local accounts that are admins, thus excluding
any domain accounts such as Domain Admins ?

I believe it is true to say that the above can be done,
but I cannot tell which you are after. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Hernan Seijas" <ask@me.com> wrote in message
news:%23ZdaG1X2EHA.3132@TK2MSFTNGP14.phx.gbl...
> but i can't setup that only the local admin of each computer can access to
> it
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:9yord.129656$5K2.105293@attbi_s03...
> > You can use Group Policy/computer configuration/security settings/file
> > system to apply permissions to "computers" within the scope of influence
> > of the policy. This should be tested first and in my opinion never
applied
> > to the domain container but an OU possibly and be careful NOT to
configure
> > root folder permissions with the "replace" permissions or you can mess
up
> > your permissions for user profile folders and others. In general try to
> > avoid configuring permissions at the root level. Another possibility is
to
> > use a Group Policy startup [runs in system context] or logon script
> > [depending on exactly what you want to configure] using cacls or xcacls
to
> > configure permissions for a folder. Again be sure to test out first to
> > make sure you get the expected results.  --- Steve
> >
> > http://support.microsoft.com/kb/322241/EN-US/  -- Group Policy startup
and
> > logn scripts.
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;135268  -- cacls
> > in a batch file.
> > http://www.ss64.com/nt/cacls.html  -- cacls syntax
> >
> > "Hernan Seijas" <ask@me.com> wrote in message
> > news:uFCjR271EHA.2600@TK2MSFTNGP09.phx.gbl...
> >>I want to set permissions for the documents  folder in all computers in
> >>the domain
> >> I want that only the user can access to this folder.
> >> Is there a way to do it with GPO??
> >> thanks

Relevant Pages

  • Re: File Sharing (again - sorry, Pd)
    ... InTerminal, type umask. ... Back in the good old days, Mac OS X user accounts ... The reason that the file permissions are "resetting" each time the ... that folder inherit the ACLs from the folder. ...
    (uk.comp.sys.mac)
  • Re: is it necessary for new users to be local admins?
    ... HOW TO Create and Configure User Accounts in Windows XP ... HOW TO Set, View, Change, or Remove File and Folder Permissions ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Limited users and Internet access
    ... It's not sharing, it's permissions. ... Set, View, Change, or Remove File and Folder Permissions in Windows ... The problem lies in how they've written their supporting software. ... >>> Administrative accounts! ...
    (microsoft.public.windowsxp.general)
  • Re: Now no access to two folders
    ... access to two of the user accounts on the laptop. ... My (admin) My Documents ... I've shared the My Documents folder in these two ... You can try playing with permissions, ...
    (microsoft.public.windowsxp.network_web)
  • Re: WebDAV security on IIS problems
    ... folder to two accounts - one with read access and the other with full. ... This Virtual Directory point to a a share on FILE1. ... Directory Browsing, Read, Write and Excute permissions on the folder. ...
    (microsoft.public.inetserver.iis.security)