I'm looking for a way to centrally grant access to the c$ share of all our PCs to our IT active directory security group. They often use this to check desktop shortcuts, etc. Right now they have to use a domain admin credential each time they access a c drive.
Can I do this on a Windows 2003 Server domain controller running AD? How?
Best Answer
Havenard is right in that you probably shouldn't modify the NTFS permissions on the C: drive. What you can do is to use Restricted Groups in Group Policy to add the security group in question to the local Administrators group. That will give them the access they need to the C: drive.