How to give users access to only specific folders in of C: drive in windows server 2012?


  • i need to give users access to only 1 folder (out of 19) inside of C: drive and then within this folder give them access to 3 (out of 4) other specific folders
    I have found how to deny access to the whole C: drive by using GPO; but one of my co-workers pointed out users need access to this one folder and 3 of the folders inside of it. I tried using shortcuts to these folders but access is still denied, shortcuts to start the programs do work. 

    This folder has 4 programs installed, which is why these are located in the C: drive. 

    I have found the following:

    Files or folders

    • In the console tree, right-click File System.


      • Computer Configuration/Windows Settings/Security Settings/File System
    • Click Add File, in Add a file or folder, click the file or folder that you want to change, and then click OK.

    However this doesn't seem to work for me because i cant find "File System" inside of the security settings. The server is in a different language, which could be a problem but there is no option that can match this one; this article was for server 2003 and 2008, so I'm guessing its different in 2012. 

    Registry editing is out of the question. Also i only have remote desktop access to this server, no physical access as these 6 servers are in a different country (reason for different language).

    Please help me.
    Thank you for your time.

    Friday, April 19, 2013 3:23 PM

All replies

  • Hello,

    open GPMC and there choose/create the required Group policy, then edit this GPO and browse to the specified path.

    Details about GPOs better ask in

    Best regards

    Meinolf Weber
    Microsoft MVP - Directory Services
    My Blog:

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Friday, April 19, 2013 5:31 PM
  • Thank you for your reply; sorry I didn't know there was a forum just for GPO. I hope you don't mind continuing this post.

    I am not able to find/run "GPMC.MSC"

    i have been using MMC, then loading the snap in necessary. 

    I loaded Local Computer Policy then opened: Computer Configuration / Windows Settings / Security Settings but don't have File System. 

    The choices are (in their apearance order): Account Policies; Local Policies, Windows FireWall with Advance Security; Policy Managing of Network Lists; Public Keys Policy; Software Restrictions Policy; Policies of Application Control (Applocker); Policies of IP Security in Local Computer; Advanced Configuration of Auditing Policy.

    The names might not have been translated into the English versions that you might be used to.
    I am new with servers and GPO.

    Friday, April 19, 2013 6:01 PM