|
Posted by Steven L Umbach on September 7, 2005, 3:04 pm
Please log in for more thread options
A local administrator would by default have full control permissions to
every folder with the possible exception of other users profile folders. You
may have a Group Policy restriction of some sort under user
configuration/administrative templates that is causing the problem. On the
Windows 2003 domain controller for the XP Pro domain computers you can use
the Resultant Set of Policy mmc snapin to see what Group Policy settings are
applied to a user and what Group Policy is applying the setting to see if
that is causing the problem. To answer your question you can use a Group
Policy "startup" script using the cacls command to change permissions on a
folder and the SysInternals has free tools such as filemon and regmon that
can help determine access problems by logging real time access to files and
registry keys. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;323276 --- Windows
2003 RSOP info.
http://www.sysinternals.com/Utilities/Filemon.html --- filemon link
>I have a Windows 2003 Ent Server With Windows 2000 and XP workstations
>logging on.
> I have a program called BGInfo that sets the background to a standard
> background that contains the PC name, IP and some other information that
> is handy to know easily. But even though the user is part of the
> Administrator group (not domain admin) they can not run the program
> because they do not have access to create the BMP in the windows
> directory.
> Is anyone aware of a script that can set the permissions on a local folder
> so users logging on can make changes to a folder they normally would not
> be able to?
| 
XML Sitemap