file system security

G

Guest

We just got a win 2000 server and are upgrading some of our computers to XP. The problem is some old software we use writes to a .ini file in the windows directory and the domain users accounts do not have write access to this directory.

Anyone know the best way to give all the users write access to just this file without going into each system and changing the file security?or giving them admin or poweruser rights.

There has to be a way to do it through group policy or something but I have not found it.
 
J

Jerold Schulman

We just got a win 2000 server and are upgrading some of our computers to XP. The problem is some old software we use writes to a .ini file in the windows directory and the domain users accounts do not have write access to this directory.

Anyone know the best way to give all the users write access to just this file without going into each system and changing the file security?or giving them admin or poweruser rights.

There has to be a way to do it through group policy or something but I have not found it.


Turn off inheritance from the parent folder on the ini file and set permissions.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
M

Matjaz Ladava [MVP]

You can do this, by setting the GPO on the OU that holds those computer
accounts. Look into the following GPO setting. Computer
Configuration/Windows Settings/Security Settings/File System. Add a file
there and set its permissions.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

KN said:
We just got a win 2000 server and are upgrading some of our computers to
XP. The problem is some old software we use writes to a .ini file in the
windows directory and the domain users accounts do not have write access to
this directory.
Anyone know the best way to give all the users write access to just this
file without going into each system and changing the file security?or giving
them admin or poweruser rights.
 
E

Eric Miller

Most 'old' software is not NT user-aware. Software that
is written for NT/2000/XP uses the Application Data hidden
folder for this type of write, as opposed to the system
folder. If you're not willing to upgrade your software to
compatible software, then you're forcing your own hand.
You named both ways to fix it.
-----Original Message-----
We just got a win 2000 server and are upgrading some of
our computers to XP. The problem is some old software we
use writes to a .ini file in the windows directory and the
domain users accounts do not have write access to this
directory.
Anyone know the best way to give all the users write
access to just this file without going into each system
and changing the file security?or giving them admin or
poweruser rights.
There has to be a way to do it through group policy or
something but I have not found it.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top