Enable permissions on folders of some programs from DC

Regards
Well we have a windows server 2008 domain with the same users with certain
levels of administrative and other users of the domain user. All of them are
running Microsoft Dynamics GP but which are domain users leaves me with no
permissions to run Dynamics GP. I made some procedures to try to correct
this problem
1. Create a GPO from the server computer configuration> directives> Windows
Settings> Security Settings> File System, where you add the routes of the
programs that I want the domain user has execute permissions and writing,
then do a gpupdate / force from the server and the client, but has no
effect, because when you run Dynamics GP sent me the same error.
2. This option is the one I found is to come from users with domain
administrator account and change the permissions on the folder where the
executable of Dynamics GP and then to enter the user account to invoke the
application.

Is there any way that this task can be done from a GPO is applied correctly

Hello Erick,

If i understand you correct you have Dynamics installed on a DC and problems
with access from domain users. Applications should never be installed on
domain controllers, because of security and access problems as you see. Install
it on a member server instead and use DCs only for the basic tasks as AD/DNS/GC
andmaybe DHCP, that's it.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Regards
> Well we have a windows server 2008 domain with the same users with
> certain
> levels of administrative and other users of the domain user. All of
> them are
> running Microsoft Dynamics GP but which are domain users leaves me
> with no
> permissions to run Dynamics GP. I made some procedures to try to
> correct
> this problem
> 1. Create a GPO from the server computer configuration> directives>
> Windows
Settings>> Security Settings> File System, where you add the routes of
Settings>> the
Settings>>
> programs that I want the domain user has execute permissions and
> writing,
> then do a gpupdate / force from the server and the client, but has no
> effect, because when you run Dynamics GP sent me the same error.
> 2. This option is the one I found is to come from users with domain
> administrator account and change the permissions on the folder where
> the
> executable of Dynamics GP and then to enter the user account to invoke
> the
> application.
> Is there any way that this task can be done from a GPO is applied
> correctly
>

Well on my server do not have these applications installed clients only the
server is dedicated to the DC and DNS but my question is if I can create a
user with minimal levels (domain user), but he can smoothly run your
applications and save your files without complications or says it is read
only because it has no permissions for your domain user condition
"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news: .com...
> Hello Erick,
>
> If i understand you correct you have Dynamics installed on a DC and
> problems with access from domain users. Applications should never be
> installed on domain controllers, because of security and access problems
> as you see. Install it on a member server instead and use DCs only for the
> basic tasks as AD/DNS/GC andmaybe DHCP, that's it.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Regards
>> Well we have a windows server 2008 domain with the same users with
>> certain
>> levels of administrative and other users of the domain user. All of
>> them are
>> running Microsoft Dynamics GP but which are domain users leaves me
>> with no
>> permissions to run Dynamics GP. I made some procedures to try to
>> correct
>> this problem
>> 1. Create a GPO from the server computer configuration> directives>
>> Windows
> Settings>> Security Settings> File System, where you add the routes of
> Settings>> the
> Settings>>
>> programs that I want the domain user has execute permissions and
>> writing,
>> then do a gpupdate / force from the server and the client, but has no
>> effect, because when you run Dynamics GP sent me the same error.
>> 2. This option is the one I found is to come from users with domain
>> administrator account and change the permissions on the folder where
>> the
>> executable of Dynamics GP and then to enter the user account to invoke
>> the
>> application.
>> Is there any way that this task can be done from a GPO is applied
>> correctly
>>
>
>

Well on my server do not have these applications installed clients only the
server is dedicated to the DC and DNS but my question is if I can create a
user with minimal levels (domain user), but he can smoothly run your
applications and save your files without complications or says it is read
only because it has no permissions for your domain user condition


"Meinolf Weber [MVP-DS]" wrote:

> Hello Erick,
>
> If i understand you correct you have Dynamics installed on a DC and problems
> with access from domain users. Applications should never be installed on
> domain controllers, because of security and access problems as you see. Install
> it on a member server instead and use DCs only for the basic tasks as AD/DNS/GC
> andmaybe DHCP, that's it.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Regards
> > Well we have a windows server 2008 domain with the same users with
> > certain
> > levels of administrative and other users of the domain user. All of
> > them are
> > running Microsoft Dynamics GP but which are domain users leaves me
> > with no
> > permissions to run Dynamics GP. I made some procedures to try to
> > correct
> > this problem
> > 1. Create a GPO from the server computer configuration> directives>
> > Windows
> Settings>> Security Settings> File System, where you add the routes of
> Settings>> the
> Settings>>
> > programs that I want the domain user has execute permissions and
> > writing,
> > then do a gpupdate / force from the server and the client, but has no
> > effect, because when you run Dynamics GP sent me the same error.
> > 2. This option is the one I found is to come from users with domain
> > administrator account and change the permissions on the folder where
> > the
> > executable of Dynamics GP and then to enter the user account to invoke
> > the
> > application.
> > Is there any way that this task can be done from a GPO is applied
> > correctly
> >
>
>
> .
>

On this basis I attempt to pass the permissions to give users without
administrator permissions

http://technet.microsoft.com/en-us/l...52(WS.10).aspx


"erick" wrote:

> Well on my server do not have these applications installed clients only the
> server is dedicated to the DC and DNS but my question is if I can create a
> user with minimal levels (domain user), but he can smoothly run your
> applications and save your files without complications or says it is read
> only because it has no permissions for your domain user condition
>
>
> "Meinolf Weber [MVP-DS]" wrote:
>
> > Hello Erick,
> >
> > If i understand you correct you have Dynamics installed on a DC and problems
> > with access from domain users. Applications should never be installed on
> > domain controllers, because of security and access problems as you see. Install
> > it on a member server instead and use DCs only for the basic tasks as AD/DNS/GC
> > andmaybe DHCP, that's it.
> >
> > Best regards
> >
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >
> >
> > > Regards
> > > Well we have a windows server 2008 domain with the same users with
> > > certain
> > > levels of administrative and other users of the domain user. All of
> > > them are
> > > running Microsoft Dynamics GP but which are domain users leaves me
> > > with no
> > > permissions to run Dynamics GP. I made some procedures to try to
> > > correct
> > > this problem
> > > 1. Create a GPO from the server computer configuration> directives>
> > > Windows
> > Settings>> Security Settings> File System, where you add the routes of
> > Settings>> the
> > Settings>>
> > > programs that I want the domain user has execute permissions and
> > > writing,
> > > then do a gpupdate / force from the server and the client, but has no
> > > effect, because when you run Dynamics GP sent me the same error.
> > > 2. This option is the one I found is to come from users with domain
> > > administrator account and change the permissions on the folder where
> > > the
> > > executable of Dynamics GP and then to enter the user account to invoke
> > > the
> > > application.
> > > Is there any way that this task can be done from a GPO is applied
> > > correctly
> > >
> >
> >
> > .
> >

Hello erick,

If you use GPEDIT you work locally on a machine, in a domain you have to
use GPMC and link the GPO to the OU where the machine has to be located.
Or did i understand you wrong?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> On this basis I attempt to pass the permissions to give users without
> administrator permissions
>
> http://technet.microsoft.com/en-us/l...52(WS.10).aspx
>
> "erick" wrote:
>
>> Well on my server do not have these applications installed clients
>> only the server is dedicated to the DC and DNS but my question is if
>> I can create a user with minimal levels (domain user), but he can
>> smoothly run your applications and save your files without
>> complications or says it is read only because it has no permissions
>> for your domain user condition
>>
>> "Meinolf Weber [MVP-DS]" wrote:
>>
>>> Hello Erick,
>>>
>>> If i understand you correct you have Dynamics installed on a DC and
>>> problems with access from domain users. Applications should never be
>>> installed on domain controllers, because of security and access
>>> problems as you see. Install it on a member server instead and use
>>> DCs only for the basic tasks as AD/DNS/GC andmaybe DHCP, that's it.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers
>>> no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Regards
>>>> Well we have a windows server 2008 domain with the same users with
>>>> certain
>>>> levels of administrative and other users of the domain user. All of
>>>> them are
>>>> running Microsoft Dynamics GP but which are domain users leaves me
>>>> with no
>>>> permissions to run Dynamics GP. I made some procedures to try to
>>>> correct
>>>> this problem
>>>> 1. Create a GPO from the server computer configuration> directives>
>>>> Windows
>>> Settings>> Security Settings> File System, where you add the routes
>>> of
>>> Settings>> the
>>> Settings>>
>>>> programs that I want the domain user has execute permissions and
>>>> writing,
>>>> then do a gpupdate / force from the server and the client, but has
>>>> no
>>>> effect, because when you run Dynamics GP sent me the same error.
>>>> 2. This option is the one I found is to come from users with domain
>>>> administrator account and change the permissions on the folder
>>>> where
>>>> the
>>>> executable of Dynamics GP and then to enter the user account to
>>>> invoke
>>>> the
>>>> application.
>>>> Is there any way that this task can be done from a GPO is applied
>>>> correctly
>>> .
>>>