User permission suggestions.

[Killa Kiwi]

My company uses applications that require specific read / write access to certain files that install themselves in the root of the C drive, not a biggie there, got that figured out.

 

What I do need though is a way to give a user the rights to write to the registry per machine (In other words only Sally's ID can make changes on Sally's machine)

 

I was thinking a GP Edit on the machine?

 

info:

 

- Office has less than 100 people in it, so setting it up per computer wouldn't be too much of a headache.

 

- I'm trying to do this to strip power user permissions to the EU, they keep installing crap (see: IE toolbars, weatherbug, animated wallpapers) that cause issues with their apps / come w/ addware.

 

Any ideas are appriciated. BTW I didn't set it up this way, was the previous IT Admin.

Edited May 8, 2009 by Killa Kiwi

[Nerm]

Is there a domain controller in place running Active Directory? If so I would use GPO's for regulation user access permissions.

[Killa Kiwi]

Is there a domain controller in place running Active Directory? If so I would use GPO's for regulation user access permissions.

 

There is a 2003 Server acting as a domain controler yes, so make a group, then modify that particular group so that they can write to the folders on C and the reg?

[Nerm]

Go into GPMC and create OU's for each department if needed (eg. accounting, sales, service, etc) and then you can set access permissions for each individual OU from within the GPMC.

 

GPMC = Group Policy Management Console