Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am attempting to restrict access to the All Users folder via GP. Currently I have the setting under:

Computer/Policies/Windows Settings/Security Settings/File System configured for the %AllUsersProfile% folder, which works great on XP. However it doesn't work on 7 since that points to C:\ProgramData.

Is there any other way to go about this to make it work with XP and 7?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

I believe doing what you're doing will accomplish your goal. In Win 7, All Users is just a shortcut to C:\ProgramData so if you set permissions on %AllUsersProfile% there you should be good to go in both OS's.

share|improve this answer
    
To me it looked like C:\ProgramData contained more than just documents and desktop, so is it a good idea to restrict that folder like that? –  Shawn Jan 6 '12 at 20:04
    
There is nothing left but to configure it and test. –  Paul Ackerman Jan 6 '12 at 20:40
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.