Follow

User-defined scripts are running regardless of the group membership

Product: ProfileUnity

Product Version: All Versions

Expires on: 365 days from publish date

Updated: February 26, 2014

 

Problem:

 User-defined scripts are running regardless of the group membership

 

Symptoms:

I am having issues with the ProfileUnity. 

 

Possible Resolution(s):

The workaround is to set appropriate ACL permissions on INI files. This way it is possible to restrict/allow file access for certain groups. 

For example, an administrator created two configuration files (.ini) and saved them in Profile Unity a netlogon folder.

Default1.ini

Default2.ini

 

In Default1.ini there is a user-defined script configured called test1.bat

In Default2.ini there is a user-defined script configured called test2.bat

 

The administrator wants to run test1.bat for Accounting only.

Therefore, it will be necessary to allow access to Default1.ini for the Accounting group (at least read rights) and restrict permissions to read for the sales group. 

In below example, the accounting group has read rights to the INI file. The sales group does not have any rights to read/execute the file therefore it will not execute the script that is a part of the configuration. Example of restricting access to the file is shown below:

 Accounting group can read the Default1.ini file

 Sales group does not have permissions to read the Default1.ini file

 

 

NOTE: Replacing a configuration file (.ini) does not overwrite the ACL settings. Therefore, the maintenance is much easier, because it is not necessary to manually edit the configuration permissions.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.