Using GPO to enable write/modify rights to folder within program files

[IT_Man_Dan]

Good Afternoon all,

 

I'm trying to give staff users write/modify access to two folders plus dependants within program files.

I'm assuming the easiest method is via GPO's but I'm having difficulties.

 

I've gone to:

Computer config > Windows Settings > Security Settings > file system and then added a directory '%programfiles%\sims and set it to replace permissions with write/modify for domain/staff users.

I've then run a gpupdate /force and tried it and it doesn' work

 

Currently staff users have access to write/modify most folders on C drive but are not able to write/modify within program files.

 

Is there something I've missed?

 

Many thanks

Dan

[IT_Man_Dan]

I'm still having no luck with this.

[ajs]

How is the policy linked? Is it in its own one or part of a greater laptop policy?

 

May be worth looking at using RSOP to see if the setting is getting applied and if it is, what policy is actually the last one to apply it.