Use GPO to set client folder permissions

[Bruce Fox]

Hi,

I have a Win 2003 server, and a bunch of XP Pro client PCs.

On each client PC, I need to set a particular sub-folders permissions for a 'group' that the clients belong to. I know I can use CALCS in a script, but I want to try to do it using Group Policy (on the server - at logon/in).

I have been unsuccessful trying to set higher permissions (and NOT inheriting the parent) whilst using: Computer configuration\Windows settings\Security settings\File system (path of the folder).

Ideas?

[drivenbywhat]

I've never tried setting security settings on client PCs only on the server itself and doing it manually. However, since you state that you're having problems with inheritance, have you already set the property of the GPO to "block inheritance"? Also, you know that you can set your login script in a GPO.

[Bruce Fox]

Hi drivenbywhat,

I have, on the policy itself. I am also using a login script to run the app that needs permission. The problem is setting permissions on a client PC from a GP. (additionaly, when I login to the client PC I can't even see the added group that I set in my first post).

[drivenbywhat]

Have you tried unchecking the "enforce inheritance" on the parent gp? Also, you may want to look into security & configuration analysis tool. I forget it's exact name. It will compare your policies and tell you what is over-riding what and perhaps you can see where you need to make the change.