Modifying permissions via Group Policy

A customer of ours had problems with an installation. We started troubleshooting and noticed that the installation did not run in Elevated Mode, but wanted to put files in c:\Windows\Temp. By default it does not grant regular users the ability to add or modify files.

We could either elevate the program or simply edit the folder so users could add files to it.
We chose to edit the folder permissions, and this is how to do it…

How to apply or modify permission entries for objects using Group Policy

1. Open Group Policy console.
2. Edit or create a group policy object.
3. Depending on what kind of object you would like to change the permissions for:

   System services
   In the console tree, click System Services:
   Computer Configuration/Windows Settings/Security Settings/System Services
   In the details pane, right-click the service you want to change, click Properties, select the Define this policy setting check box, and then click Edit Security.

   Registry keys
   In the console tree, right-click Registry.
   Computer Configuration/Windows Settings/Security Settings/Registry
   Click Add Key, in Select Registry Key, click the key that you want to change, and then click OK.

   Files or folders
   In the console tree, right-click File System.
   Computer Configuration/Windows Settings/Security Settings/File System
   Click Add File, in Add a file or folder, click the file or folder that you want to change, and then click OK.

4. Do one of the following:
   • To set permissions for a group or user that does not appear in the Group or user names box, click Add. Type the name of the group or user you want to set permissions for, and then click OK.

   • To change or remove permissions from an existing group or user, click the name of the group or user.

5. Do one of the following:
   • To allow a permission, in the Permissions for User or Group box, select the Allow check box.

   • To deny a permission, in the Permissions for User or Group box, select the Deny check box.

   • To remove the group or user from Group or user names, click Remove.

You can read more about this at technet.