Hello, I have a Windows 2003 machine that is being used as a Citrix server in an Active directory domain. Every time I change permission to a folder on C: - ie: grant a domain user FULL CONTROL over a folder.... approx 3 hours later all permissions revert back to previous settings? Has anyone experienced similar or have a solution? Thanks, Keith

This behavior is because of some domain Group Policy which overrides your setting. Check Group Policy Management tool for that policy. (Frankly, this is a good practice to only assign permissions through GP).MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA

Thanks for your reply. Discovered this later and was able to change the permissions accordingly via GP. You can configure file permissions on a folder for a user by configuring a Group Policy setting in Windows Server 2003/2008. The setting is located under Computer Configuration, Windows Settings, Security Settings, File System. Here's the procedure: Go to the location in the Group Policy listed above. Right-click File System. Click Add File. In the "Add a file or folder" window, select the folder (or file) for which you want the permissions to be set, and click OK. In the security box that pops up, you can add a user or a group that needs permission to the folder. You can also configure permission inheritance if you want. If you decide later to modify the permissions or inheritance, simply right-click the object in the right-hand pane and select Properties. There's one thing that you must keep in mind: Although the path to the file or folder is, by default, pointing to the folders on the server, the path is relative to the client to whom this Group Policy will be applied. Simply type the path to the folder in the text box if you don't see the folder you need listed there.