Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a security group called SourceCode which allows certain users access to the SVN / GIT repository. This allows them to get the latest repo and store it in C:\Source. This works fine but the problem is that if a user who isn't in the SourceCode group logs onto a machine where the repo exists, they can see the C:\Source folder.

Is there a way I can stop users outside of SourceCode accessing C:\Source on ANY computer they log into?

We are using Windows SBS 2011 and everyone logs in via the domain.

share|improve this question
    
1. Is the Source folder on the server or on every computer? 2. Set the NTFS permissions on the Source folder so that only members of the SourceCode security group have access. –  joeqwerty Feb 5 '13 at 16:25
    
1. C:\SourceCode will be on every computer that SourceCode users use but it will always be called C:\SourceCode. 2. I understand I can do this but can I do it via a group policy or something so it automatically applies to ALL machines without me having to go around each one? –  webnoob Feb 5 '13 at 16:37
    
Why would it be on every computer? What for do you expect to happen if the user simply boots off a livecd? –  Zoredache Feb 5 '13 at 17:36

1 Answer 1

up vote 1 down vote accepted

You can set the appropriate NTFS permissions on the folder for all computers by using Group Policy. You'll do this by configuring the folder in your GPO at:

Computer Configuration | Windows Settings | Security Settings | File System

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.