[gptalk] Re: Setting permissions to folders and registry keys

  • From: <tools@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 3 Jun 2008 18:52:29 -0700

One thing to keep in mind. Registry & File permissioning through GP can be
pretty expensive (performance-wise) if you try to re-permission a large tree
of files/folders or reg keys. And keep in mind that security policy runs
every 16 hours by default regardless of whether anything has changed. So, I
would not go overboard while doing this. Keep it to smaller numbers of file
and folders or keys.

Darren


-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sunshine Baines
Sent: Tuesday, June 03, 2008 6:26 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Setting permissions to folders and registry keys

Thanks.

On Tue, Jun 3, 2008 at 9:23 PM, Delaney, Doug <doug.delaney@xxxxxxx> wrote:
> I have, in the past, gone to great lengths to implement registry and
> NTFS permissions for apps.  It does work using the built-in File and
> Registry security settings options, but it can quickly become an
> administrative nightmare.  So, my main advice is to plan carefully, and
> go for it - if you can deal with the ongoing changes easily (such as
> task pad views)
>
>
> Doug Delaney
> Infrastructure Specialist - Integration Engineering-GM
>
> EDS
> GM Desktop Engineering
> 985 W. Entrance Dr. 2150
> Auburn Hills, MI 48326
>
> Lab: +1 248-365-9187
> Tel: +1 248 764-7917
> Pg: +1 248 870-0306
> Mobile: +1 248 210-4973
> E-mail: Doug.Delaney@xxxxxxx
>
> We deliver on our commitments
> so you can deliver on yours.
>
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> On Behalf Of Sunshine Baines
> Sent: Tuesday, June 03, 2008 6:30 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Setting permissions to folders and registry keys
>
> I need some advice on the best way to set permissions on folders and
> registry keys.  I have in house apps that I've determined the required
> permissions for registry keys and folder permissions to run without
> admin rights.  Not everyone is running the same apps, so I'm trying to
> see how I can use Group policy to set these permissions or if I should
> use it at all.
>
> Thanks,
> Sunshine
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
> by logging into the freelists.org Web interface. Archives for the list
> are available at http://www.freelists.org/archives/gptalk/
> ************************
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/

> ************************
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: