Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am attempting to restrict access to the All Users folder via GP. Currently I have the setting under:

Computer/Policies/Windows Settings/Security Settings/File System configured for the %AllUsersProfile% folder, which works great on XP. However it doesn't work on 7 since that points to C:\ProgramData.

Is there any other way to go about this to make it work with XP and 7?

share|improve this question
up vote 1 down vote accepted

I believe doing what you're doing will accomplish your goal. In Win 7, All Users is just a shortcut to C:\ProgramData so if you set permissions on %AllUsersProfile% there you should be good to go in both OS's.

share|improve this answer
To me it looked like C:\ProgramData contained more than just documents and desktop, so is it a good idea to restrict that folder like that? – Shawn Jan 6 '12 at 20:04
There is nothing left but to configure it and test. – Paul Ackerman Jan 6 '12 at 20:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.