How can give group in active directory folder access by group policy

Question

I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have French dictionary without admin right the program will not work properly. I don't want go to each PC and login with admin account then go to program folder located in programs files to give full permission to the group. Is there a way to add them folder in group policy so I can force all the PCs to have full access on the folder? Thanks you in advance.

Solution

Group Policy should handle this without problems. Example I have for locking down the C: root folder on Windows 7:

Computer Configuration > Windows Settings > Security Settings > File System > %SystemDrive%\

• Permissions
  • Type: Allow, Name: BUILTIN\Administrators, Permission: Full Control, Apply to: This folder, subfolders and files
  • Type: Allow, Name: CREATOR OWNER, Permission: Full Control, Apply to: Subfolders and files only
  • Type: Allow, Name: NT AUTHORITY\SYSTEM, Permission: Full Control, Apply to: This folder, subfolders and files
  • Type: Allow, Name: BUILTIN\Users, Permission: Read and Execute, Apply to: This folder, subfolders and files
• Allow inheritable permissions from the parent to propagate to this object and all child objects: Disabled

Comments

[AAA-Super]

what I have done is first I installed the program on active directory then I created new policy by editing: - Computer setting à Computer setting à Security setting à file system Added new file and specify where I installed the program (c:\program files\program name) then selected the group (who want to have full access) and I gave him full permission after another menu for configure this files or folder I selected the option say replace existing permissions on all subfolders and files with inheritable permissions. I forced the clients and I have restarted PCs but nothing work.Thanks alot

[AAA-Super]

Thanks for quick reply could you please read what I have wrote in previous comment.Sorry for bad explanation

[GMitch]

O shoot sorry about that. Guess you were one step ahead of me already. Well I thought that would work but I'll look more into it.

[Daniel B.]

That covers NTFS permissions ... does the group also have rights to access the network share?

[AAA-Super]

Should be yes because I have added registry keys and it's working! so what should I check more?