Deploying NTFS permissions


I have a group of PCs that I want to apply NTFS security via secedit. I know the group name and individuals that I want to giver permissions to.

During testing I noticed that my INF file has the local SID of the user I was giving permission to. This SID will be different on other boxes so I can't see this working on them.

How do I get the INF file to give permissions to a user name or group on different local machines (no AD or workgroup)?

[Registry Values]
[File Security]

thanks for reading.


0 Comments   [ + ] Show comments

Answers (2)

Posted by: riversidekid 13 years ago
Senior Yellow Belt
Not really an answer, but an alternative concept... have you thought of using SetACL rather than secedit? I have used SetACL with success when deploying software where the current user needs access to a folder within %ProgramFiles%.

Just another thought.
Posted by: Stuntman 13 years ago
Senior Yellow Belt
Thanks for the suggestion.

Still looking for method to do this with standard windows technologies.
I could write a script or program to do this but want to do it like others would.

Other ideas?

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ