Updating Permissions on local machines

[Hedghog]

Hi All,

 

I have just discovered a quirk with both M'soft Word and Power Point in office 2000 to do with the use of organisational charts.

After lots of false starts etc I have found the problem. M'Soft organisation Charts needs to write to the C: drive and create two files in the windows folder (MSOPREFS.232 and MSOCLIP.232) on initial use and then access them each time it starts.

I am loath to give users write access to the c: drive so it means modifying the permissions on these two files manually.

The question is can I redirect these files or can I change these permisions by script or GPO.

 

Cheers

 

Peter

[Bestbett]

I had a similar issue with a 3rd party software. I ended up solving it by copying the 2 files out to a share, then sticking them back in the windows dir and changing permissions so that System had read only. Then I made my WDS image off of that.

 

Or if you were looking for more of a solution to get the files out, you could stick the files in netlogon and make a login script to copy tem to the %win% dir.

[SYNACK]

The other thing that you can do is use a snapshot tool like Winstall LE to make an MSI package with the two files that can be pushed out with Active Directory group policy software deployment. Myself and others have done this with some older macromedia directory built apps which require a couple of files in the windows directory.

[ChrisH]

There are plenty of awkward programs like this. I have a start up script that runs cacls and adjusts the permissions. In your case maybe a if not exists then copy x and y blah blah as well to make suure the files are in place.

[srochford]

Is this an active directory based network? if so, you can use the security bit of machine group policy to just give write permissions to those 2 files.

[jsnetman]

You can also add the files you want to control permissions on to a domain controller in exactly the same folder hierarchy as they appear on the workstation. Then go to the machine policy for those workstations and open Windows Settings_Security Settings_File System and add the files or folders required and then apply whatever permissions you require.

[jmcdermott]

I would deploy these 2 files using an MSI, and then set the file security in a gpo under Computer Config - Security Settings - File System.

[Geoff]

You can also set the permissions for these files via GPOs (whether they exist on the machine your applying the GPO to or not).

 

Computer Configuration -> Security Settings -> File System