Denying Access

[Dave Cooper]

Hi we have a problem in so much, as we have a group of users who need to
access a file domain wide, on each PC they use, and a group who are to be
denied access, we don't want to set this at each machine, there are 250 +,
the file is an executable, is there a way of doing this.

 

[Pegasus \(MVP\)]

Hi we have a problem in so much, as we have a group of users who need to
access a file domain wide, on each PC they use, and a group who are to be
denied access, we don't want to set this at each machine, there are 250 +,
the file is an executable, is there a way of doing this.

You need to create a group at the domain level and grant the
appropriate access to that group. You then make the chosen
users members of this group.

 

[Dave Cooper]

The file .exe is on various machines, what I was after is is there a way
through group policy, to control access to thes files on all the various
machines it's installed on.

 

[Pegasus \(MVP\)]

Having this file on various machines may not be the most
effective way to run things.

You can grant access to this file/folder by using psexec.exe
(www.sysinternals.com) to run this command remotely on
each PC:

cacls d:\SomeFolder /e /t /g YourDomainName\SomeGroupname

 

[Dave Cooper]

The file is on various machines as it needs to run as a local exe for the
development environment. On these machines, however have taken part of your
suggestion, to create a vbscript file, to run at login. Using cacls.