+ Post New Thread
Results 1 to 9 of 9
Windows Thread, Updating Permissions on local machines in Technical; Hi All, I have just discovered a quirk with both M'soft Word and Power Point in office 2000 to do ...
  1. #1
    Hedghog's Avatar
    Join Date
    Jul 2006
    Location
    North Wales
    Posts
    194
    Thank Post
    35
    Thanked 17 Times in 16 Posts
    Rep Power
    36

    Updating Permissions on local machines

    Hi All,

    I have just discovered a quirk with both M'soft Word and Power Point in office 2000 to do with the use of organisational charts.
    After lots of false starts etc I have found the problem. M'Soft organisation Charts needs to write to the C: drive and create two files in the windows folder (MSOPREFS.232 and MSOCLIP.232) on initial use and then access them each time it starts.
    I am loath to give users write access to the c: drive so it means modifying the permissions on these two files manually.
    The question is can I redirect these files or can I change these permisions by script or GPO.

    Cheers

    Peter

  2. #2
    Bestbett's Avatar
    Join Date
    Apr 2007
    Location
    Hiding
    Posts
    46
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I had a similar issue with a 3rd party software. I ended up solving it by copying the 2 files out to a share, then sticking them back in the windows dir and changing permissions so that System had read only. Then I made my WDS image off of that.

    Or if you were looking for more of a solution to get the files out, you could stick the files in netlogon and make a login script to copy tem to the %win% dir.

  3. Thanks to Bestbett from:

    Hedghog (25th April 2008)

  4. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,705
    Thank Post
    829
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    The other thing that you can do is use a snapshot tool like Winstall LE to make an MSI package with the two files that can be pushed out with Active Directory group policy software deployment. Myself and others have done this with some older macromedia directory built apps which require a couple of files in the windows directory.

  5. Thanks to SYNACK from:

    Hedghog (25th April 2008)

  6. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,942
    Thank Post
    115
    Thanked 272 Times in 250 Posts
    Rep Power
    104
    There are plenty of awkward programs like this. I have a start up script that runs cacls and adjusts the permissions. In your case maybe a if not exists then copy x and y blah blah as well to make suure the files are in place.

  7. Thanks to ChrisH from:

    Hedghog (25th April 2008)

  8. #5

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,144
    Thank Post
    113
    Thanked 518 Times in 447 Posts
    Blog Entries
    2
    Rep Power
    121
    Is this an active directory based network? if so, you can use the security bit of machine group policy to just give write permissions to those 2 files.

  9. Thanks to srochford from:

    Hedghog (25th April 2008)

  10. #6
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    You can also add the files you want to control permissions on to a domain controller in exactly the same folder hierarchy as they appear on the workstation. Then go to the machine policy for those workstations and open Windows Settings_Security Settings_File System and add the files or folders required and then apply whatever permissions you require.

  11. Thanks to jsnetman from:

    Hedghog (25th April 2008)

  12. #7
    jmcdermott's Avatar
    Join Date
    Feb 2008
    Location
    Cornwall
    Posts
    164
    Thank Post
    16
    Thanked 41 Times in 33 Posts
    Rep Power
    20
    I would deploy these 2 files using an MSI, and then set the file security in a gpo under Computer Config - Security Settings - File System.

  13. Thanks to jmcdermott from:

    Hedghog (25th April 2008)

  14. #8

    SYSMAN_MK's Avatar
    Join Date
    Sep 2005
    Posts
    3,979
    Thank Post
    484
    Thanked 1,330 Times in 721 Posts
    Rep Power
    425
    Another option would be to use calcs in a script to change the permissions remotly. Have used this in the past on problem apps.

    Code:
    cacls \\"%MACHINE_NAME%\C$\%LOCATION OF FILE OR FOLDER%" /t /c /e /p USERS:f
    Just make a new line for each PC.

  15. Thanks to SYSMAN_MK from:

    Hedghog (25th April 2008)

  16. #9

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223
    You can also set the permissions for these files via GPOs (whether they exist on the machine your applying the GPO to or not).

    Computer Configuration -> Security Settings -> File System

  17. Thanks to Geoff from:

    Hedghog (25th April 2008)

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 26th February 2010, 10:00 AM
  2. Set Default Printer to Machines with Local Printers
    By Heebeejeebee in forum Windows
    Replies: 15
    Last Post: 5th February 2007, 03:00 PM
  3. Auto Updating Help
    By j17sparky in forum MIS Systems
    Replies: 9
    Last Post: 11th December 2006, 07:46 PM
  4. Replies: 7
    Last Post: 19th May 2006, 11:53 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •