GPO to disable write to local disk?

[BBS]

Hi all,

I need to install av program for my users on Windows XP SP2 in my Novell network. Problem is that only administrators can start the program after installation.

I noticed a logfile c:\logfile.log that needs to be accessed, power users can't write to that file but administrators can. Must be some GPO to make that happend...

How can I find it?

By the way sorry for my bad english!

Cheers,

[BBS]

CMD -> cacls

And I'm done!

[Martin Zugec]

One small advice, cacls isnt sometimes working as expected, that is why I switched to subinacl.

If you want to create GPO, it is also possible - you can specify ACL settings. Most simple way is through importing template file.