Setting FileSystem & Service Permissions on logon

[Guest Rahul]

I have prepared .NET 2.0 Desktop App for my college library.

My college System Admin set-up the library network with Windows 2003 server

& XP clients, and has handed over its responsibilities to me.

I have some experience with Active Directory & Group Policies, but I'm not

an Admin.

 

I have set-up OUs & appropriate Group Policies for various clients. I am

looking for help in 2 specific areas:

1) First, each client has a varying number of hard-disk partitions. Active

Directory Group Policy allows me to restrict access to either A,B,C,D or all

drives. Some of these clients have up-to 6-7 partitions & I need to restrict

access to some of them depending upon the Login.

I did not see a direct way to do it. The only solution I see are Login

scripts. Is there any other way to deny access to a partition depending upon

who is logging in (for drive letters such as E & F).

If I need to use scripts, can someone provide me a sample script to deny

access to say F: for users in OPAC organizational unit.

 

2) The second thing is Service. Some clients have Sql Express installed for

local use. Again, I need to start-up Sql Service only if OPAC user is logging

in.

Is there any way other than scripts, and if no, again I would request a

sample script???

[Guest lforbes]

RE: Setting FileSystem & Service Permissions on logon

 

Hi,

 

I can help with the drives. This can be done in Group Policy if you modify

the system.adm file for the different drives.

 

Now mine is for Hide Drives in My computer but you can also do it for the

restrict drives.

 

My instructions are here.

http://www.sd61.bc.ca/windows2000/HideDrives.htm

 

"Rahul" wrote:

> I have prepared .NET 2.0 Desktop App for my college library.

> My college System Admin set-up the library network with Windows 2003 server

> & XP clients, and has handed over its responsibilities to me.

> I have some experience with Active Directory & Group Policies, but I'm not

> an Admin.

>

> I have set-up OUs & appropriate Group Policies for various clients. I am

> looking for help in 2 specific areas:

> 1) First, each client has a varying number of hard-disk partitions. Active

> Directory Group Policy allows me to restrict access to either A,B,C,D or all

> drives. Some of these clients have up-to 6-7 partitions & I need to restrict

> access to some of them depending upon the Login.

> I did not see a direct way to do it. The only solution I see are Login

> scripts. Is there any other way to deny access to a partition depending upon

> who is logging in (for drive letters such as E & F).

> If I need to use scripts, can someone provide me a sample script to deny

> access to say F: for users in OPAC organizational unit.

>

> 2) The second thing is Service. Some clients have Sql Express installed for

> local use. Again, I need to start-up Sql Service only if OPAC user is logging

> in.

> Is there any way other than scripts, and if no, again I would request a

> sample script???

[Guest Rahul]

RE: Setting FileSystem & Service Permissions on logon

 

Although I haven't tried your solution yet, I feel like it would do my task!!!!

 

Thanx a lot!!! You saved me setting up permissions for each individual drive

on each individual client!!!