Hi we have a problem in so much, as we have a group of users who need to
access a file domain wide, on each PC they use, and a group who are to be
denied access, we don't want to set this at each machine, there are 250 +,
the file is an executable, is there a way of doing this.

"Dave Cooper" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi we have a problem in so much, as we have a group of users who need to
> access a file domain wide, on each PC they use, and a group who are to be
> denied access, we don't want to set this at each machine, there are 250 +,
> the file is an executable, is there a way of doing this.
>
>

You need to create a group at the domain level and grant the
appropriate access to that group. You then make the chosen
users members of this group.

The file .exe is on various machines, what I was after is is there a way
through group policy, to control access to thes files on all the various
machines it's installed on.



"Pegasus (MVP)" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>
> "Dave Cooper" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> > Hi we have a problem in so much, as we have a group of users who need to
> > access a file domain wide, on each PC they use, and a group who are to
be
> > denied access, we don't want to set this at each machine, there are 250
+,
> > the file is an executable, is there a way of doing this.
> >
> >
>
> You need to create a group at the domain level and grant the
> appropriate access to that group. You then make the chosen
> users members of this group.
>
>

Having this file on various machines may not be the most
effective way to run things.

You can grant access to this file/folder by using psexec.exe
(www.sysinternals.com) to run this command remotely on
each PC:

cacls d:\SomeFolder /e /t /g YourDomainName\SomeGroupname


"Dave Cooper" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> The file .exe is on various machines, what I was after is is there a way
> through group policy, to control access to thes files on all the various
> machines it's installed on.
>
>
>
> "Pegasus (MVP)" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> >
> > "Dave Cooper" <(E-Mail Removed)> wrote in message
> > news:%(E-Mail Removed)...
> > > Hi we have a problem in so much, as we have a group of users who need
to
> > > access a file domain wide, on each PC they use, and a group who are to
> be
> > > denied access, we don't want to set this at each machine, there are
250
> +,
> > > the file is an executable, is there a way of doing this.
> > >
> > >
> >
> > You need to create a group at the domain level and grant the
> > appropriate access to that group. You then make the chosen
> > users members of this group.
> >
> >
>
>

The file is on various machines as it needs to run as a local exe for the
development environment. On these machines, however have taken part of your
suggestion, to create a vbscript file, to run at login. Using cacls.
"Pegasus (MVP)" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Having this file on various machines may not be the most
> effective way to run things.
>
> You can grant access to this file/folder by using psexec.exe
> (www.sysinternals.com) to run this command remotely on
> each PC:
>
> cacls d:\SomeFolder /e /t /g YourDomainName\SomeGroupname
>
>
> "Dave Cooper" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > The file .exe is on various machines, what I was after is is there a way
> > through group policy, to control access to thes files on all the various
> > machines it's installed on.
> >
> >
> >
> > "Pegasus (MVP)" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> > >
> > > "Dave Cooper" <(E-Mail Removed)> wrote in message
> > > news:%(E-Mail Removed)...
> > > > Hi we have a problem in so much, as we have a group of users who
need
> to
> > > > access a file domain wide, on each PC they use, and a group who are
to
> > be
> > > > denied access, we don't want to set this at each machine, there are
> 250
> > +,
> > > > the file is an executable, is there a way of doing this.
> > > >
> > > >
> > >
> > > You need to create a group at the domain level and grant the
> > > appropriate access to that group. You then make the chosen
> > > users members of this group.
> > >
> > >
> >
> >
>
>