Dave Nickason [SBS MVP]
Guest
|
 Posted:
Sat Nov 12, 2005 1:50 am Post subject:
Re: Restricting C drive folders on 6 public computers in a l |
|
|
You don't give too much information about your situation, so sorry if any of
this is irrelevant.
Here's a way to do what you describe. I think if you read this article
you'll see that it's not a trivial thing to do what you're after (at least
in my opinion). You'll have to compare the learning curve for this to the
time it would take to apply the permissions manually.
"How to use Xcacls.vbs to modify NTFS permissions"
http://support.microsoft.com/default.aspx?scid=kb;en-us;825751
Another option would be to use inheritance - set the permissions you want on
a top-level directory and allow them to propagate to the subdirectories and
files below. Use security groups instead of applying permissions for
individual accounts. Doing it this way might save you enough time to be
worth considering. BTW, if you can avoid it, I'm not crazy about giving
users any rights to the system partition. If you don't have a partition
available other than C, hopefully you're talking about a server OS, so at
least you can use disk quotas to keep someone's MP3 collection from bringing
down the system by filling all the free space.
MS offers a really cool, free tool for setting up shared or public
computers. If you dig into the documentation a little, I think you'll find
that you can fully protect the system from changes you don't want to allow.
You can restrict users from saving data to specific locations - for example,
you can prevent some users from saving anything, while allowing others to
save files, but only to a specific partition. There's a little setup to
this, but it's wizard driven and very simple. This isn't for computers that
are members of a domain, but I recommend it to anyone who has guest users,
information kiosks, etc. - anything where you want the system protected from
a user's possible bad acts.
Microsoft Shared Computer Toolkit for Windows XP
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
"andromeda" <andromeda@discussions.microsoft.com> wrote in message
news:DF9FB27F-B36E-40F1-AC62-234BFC91B13B@microsoft.com...
| Quote: | Could someone please assist me in sharing some information on how to
restrict
rights to read only to most folders on a user computer for say the Users
group and having full access to my documents only. This needs to take
place
on 6 machines and I do not want to set permissions individually. I am
told
it will work through a login script. Your help is appreciated.
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in