Permissions on Packages folder 1

[cjpmcglinchey]

Hi All

What permissions should I have on the packages$ folder on my w2003 server, I thought they were ok but people can save to this location.

Also is it possible to force applications to default to the my documents folder all the time.

Thanks

 

[RobBentley]

When you say "packages", do i presume you mean the folder you use to distribute your software packages??

In which case are they installed by users, hence they need read-only access, or by machine group policy so only client PC's themselves need access during startup?

Robert Bentley

SynergyworksHosting.co.uk
"reliable services at realistic prices

 

[cjpmcglinchey]

Hi Rob

Sorry for the confusion it is only the computers that need access as software is allocated by gpo.

Thanks

 

[RobBentley]

The NTFS Disk permissions we use are:

DOMAIN\Administrators (Full Control)
DOMAIN\Domain Computers (Read & Execute, List Folder Contents, Read)


The Windows Share permissions are:
DOMAIN\Administrators (Full Control, Read, Write)
DOMAIN\Domain Computers (Read)


* A quick point, if you use it to install microsoft office, you may want to add the share permission:

DOMAIN\Domain Users (Read)

Your disk permissions will prevent any users actually viewing the files. Then add to the Microsoft Office folders NTFS permissions:

DOMAIN\Domain Users (Read & Execute, List Folder Contents, Read)

Reason for doing this is, some office products have the "install when first used" thing going on. If they cannot find the package location they throw up, insert CD errors everywhere. As long as you keep the NTFS permissions so they can only READ they won't be able to write to the office folder. Also they won't be able to even list the shares contents by double clicking on the server as your root \\server\packages folder doesn't have read permissions for users!

Robert Bentley

SynergyworksHosting.co.uk
"reliable services at realistic prices