I am attempting to restrict access to the All Users folder via GP. Currently I have the setting under:

Computer/Policies/Windows Settings/Security Settings/File System configured for the %AllUsersProfile% folder, which works great on XP. However it doesn't work on 7 since that points to C:\ProgramData.

Is there any other way to go about this to make it work with XP and 7?

link|improve this question

feedback

1 Answer

up vote 1 down vote accepted

I believe doing what you're doing will accomplish your goal. In Win 7, All Users is just a shortcut to C:\ProgramData so if you set permissions on %AllUsersProfile% there you should be good to go in both OS's.

link|improve this answer
To me it looked like C:\ProgramData contained more than just documents and desktop, so is it a good idea to restrict that folder like that? – Shawn Jan 6 at 20:04
There is nothing left but to configure it and test. – Paul Ackerman Jan 6 at 20:40
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.