none
Setting user permission with group policy

    Question

  • Setting user permission with group policy

    Our company has a server where people can save/share their file. The structure is as follow:

    \\FileServer\Users\

                  User1\

                           Private

                           Public

                  User2\

                           Private

                           Public

    (…)

    User1, User2 are the logon names of each user

    User1 has RW to User1\Private and User1\Public

    User1 has RO to every UserX\Public

    User1 has no access to any UserX\Private

    (…)

    Is there a way to set this kind of security permission through GP?

    Thanks

    Christophe



    Thursday, June 09, 2016 10:22 PM

Answers

  • Hi Christophe,

    Thanks for your post.

    Is there a way to set this kind of security permission through GP?

    >>>Yes, you could right-click File system and select Add file, then you could set permission on the file or folder like below.

    The setting of File system under Computer Configuration/Windows Settings/Security Settings/File System.

    For more information, you could refer to the article below.

    Apply or modify permission entries for objects using Group Policy

    https://technet.microsoft.com/en-us/library/cc756952%28v=ws.10%29.aspx

    Best Regards.

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by MAS Services Sunday, June 12, 2016 10:25 PM
    Friday, June 10, 2016 6:29 AM
    Moderator
  • > I knew about this but my case is a bit more complicated
     
    Not really :) File system permissions in a GPO are stored in a file
    called GptTmpl.inf in the GPO Sysvol folder. The content of this file is
    ASCII and easy to understand - for each Folder you confiure in GPO, you
    have a line that lists the folder and its ACL in SDDL syntax.
     
    You can programmatically manipulate this file to your needs.
     
    • Marked as answer by MAS Services Sunday, June 12, 2016 10:25 PM
    Friday, June 10, 2016 2:44 PM

All replies

  • Hi Christophe,

    Thanks for your post.

    Is there a way to set this kind of security permission through GP?

    >>>Yes, you could right-click File system and select Add file, then you could set permission on the file or folder like below.

    The setting of File system under Computer Configuration/Windows Settings/Security Settings/File System.

    For more information, you could refer to the article below.

    Apply or modify permission entries for objects using Group Policy

    https://technet.microsoft.com/en-us/library/cc756952%28v=ws.10%29.aspx

    Best Regards.

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by MAS Services Sunday, June 12, 2016 10:25 PM
    Friday, June 10, 2016 6:29 AM
    Moderator
  • Thanks

    I knew about this but my case is a bit more complicated 

    I don't have 1000 users but I would love to automate setting these permissions through GP

    Friday, June 10, 2016 12:16 PM
  • > I knew about this but my case is a bit more complicated
     
    Not really :) File system permissions in a GPO are stored in a file
    called GptTmpl.inf in the GPO Sysvol folder. The content of this file is
    ASCII and easy to understand - for each Folder you confiure in GPO, you
    have a line that lists the folder and its ACL in SDDL syntax.
     
    You can programmatically manipulate this file to your needs.
     
    • Marked as answer by MAS Services Sunday, June 12, 2016 10:25 PM
    Friday, June 10, 2016 2:44 PM
  • Thanks for the help

    I encountered an error 13 when trying to apply the GP but that's another issue.

    Christophe

    Sunday, June 12, 2016 10:24 PM