Good afternoon, and thanks in advance,
At some point over the past couple of weeks, an issue has occurred for my users who are using software that writes temporary cache files within the software's own file path. Now they are getting errors within the software that the access is denied to write files to that folder. Nothing appears to be stopping the user from navigating to it and writing files. The problem is intermittent so it doesn't seem to severely impact their work.
The ACL on that folder allows local users to modify, but all users are logging into the workstation as domain users.
While this doesn't appear to have been a problem in the past, the software's support staff are telling me that I need to add explicit permissions for the "Domain Users" object to write into that directory. I am not sure that is the correct call, but their continued support is predicated on my following their instructions.
Since we have 300+ workstations in the company, and many stations coming and going every month, I am looking for a way to automate this change through Group Policy. Unfortunately all documentation I can find seems to give me instructions on how to apply permissions to a single file on a single endpoint, such as this tutorial:
https://mcpmag.com/articles/2008/10/13/file-permissions-thru-group-policy.aspx
Is there a way to accomplish this through Group Policy settings? Or should I look into using a GPO to run a batch file on the stations?