Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So, I have a couple of batch files that install some executables and they work, but when the executables setup shortcuts on the desktop only SYSTEM has access to them. Is there a way I can prevent that or make it so it adds Domain Users access or something like that. I realize that the batch files are ran under the SYSTEM context, but I'd like to find a way to clean up after them.

Thanks in advance!

share|improve this question
It's not clear what you mean by "only SYSTEM has access to them". Define "access". Are the shortcuts getting put into the SYSTEM profile's desktop instead of the "Public" desktop? It might just be a matter of changing the batch file to reference the machine's "Public" desktop folder, since files created there will inherit that folder's ACL. – Evan Anderson Oct 26 '12 at 22:30

You cold have the batch file change the permissions on the file to add the Domain Users group to the file by using the ICACLS command.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.