Provide Read Permission to a folder in C:\ for all domain users, using Group Policy

In Windows, granting a domain user read permission to the C drive involves adjusting the permissions on the root of the C drive. Please note that modifying permissions on critical system directories like the root of the C drive can have significant security implications, and it's essential to be cautious when making such changes.

Steps:-


1.  Click on Start -> Go to Administrative Tools -> Click on Group Policy Management


2.       Group Policy Console Opens, Create a new Group Policy Object.
Right Click on Domain Name & Select on “Create a GPO in the domain...”


3.       Name the GPO.



4.       Right click on the newly created GPO and select Edit.


5.       Group Policy Management Editor opens & Go to File System (path Computer Configuration\Policies\Windows Settings\Security Settings\File System)


6.       Right Click on File System & Click on Add File.


7.       Browse to C:\TEMP(Before this Create a folder in C drive naming TEMP)


8.       Click on Add


9.       Enter Domain Users name in the object name & click OK



10.   Provide Read only access for Domain Users.


11.   Click OK.


12.   Update the Group Policy.


Now, Every Deployed machine will have read access to C:\TEMP for Domain Users.

After following these steps, the specified domain user should have read access to the C drive. Keep in mind that this will apply to the root of the C drive and to any subfolders or files. If you don't need to provide read access to specific folders or files within the C drive, you'll need to select the option "Do not allow permissions on this file or folder to be replaced". 

Note - Granting read access to the entire C drive might not be recommended for security reasons, and it's typically better to grant access to specific folders or use more advanced security configurations based on your organization's needs.

No comments:

Post a Comment