file system security

[Guest]

We just got a win 2000 server and are upgrading some of our computers to XP. The problem is some old software we use writes to a .ini file in the windows directory and the domain users accounts do not have write access to this directory.

Anyone know the best way to give all the users write access to just this file without going into each system and changing the file security?or giving them admin or poweruser rights.

There has to be a way to do it through group policy or something but I have not found it.

 

[Jerold Schulman]

We just got a win 2000 server and are upgrading some of our computers to XP. The problem is some old software we use writes to a .ini file in the windows directory and the domain users accounts do not have write access to this directory.

Anyone know the best way to give all the users write access to just this file without going into each system and changing the file security?or giving them admin or poweruser rights.

There has to be a way to do it through group policy or something but I have not found it.

Turn off inheritance from the parent folder on the ini file and set permissions.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Matjaz Ladava [MVP]]

You can do this, by setting the GPO on the OU that holds those computer
accounts. Look into the following GPO setting. Computer
Configuration/Windows Settings/Security Settings/File System. Add a file
there and set its permissions.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

We just got a win 2000 server and are upgrading some of our computers to

XP. The problem is some old software we use writes to a .ini file in the
windows directory and the domain users accounts do not have write access to
this directory.

Anyone know the best way to give all the users write access to just this

file without going into each system and changing the file security?or giving
them admin or poweruser rights.

 

[Eric Miller]

Most 'old' software is not NT user-aware. Software that
is written for NT/2000/XP uses the Application Data hidden
folder for this type of write, as opposed to the system
folder. If you're not willing to upgrade your software to
compatible software, then you're forcing your own hand.
You named both ways to fix it.

-----Original Message-----
We just got a win 2000 server and are upgrading some of

our computers to XP. The problem is some old software we
use writes to a .ini file in the windows directory and the
domain users accounts do not have write access to this
directory.

Anyone know the best way to give all the users write

access to just this file without going into each system
and changing the file security?or giving them admin or
poweruser rights.

There has to be a way to do it through group policy or

something but I have not found it.