Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
JSI Tip 6550. How do I manually edit the Gpttmpl.inf file to stop inheritance?
Jerold Schulman
April 7, 2003
2 Min Read
NOTE: The text in the following Microsoft Knowledge Base article is provided so that the site search can find this page. Please click the Knowledge Base link to insure that you are reading the most current information.
Microsoft Knowledge Base article Q278436 contains:
SUMMARY
This article describes how to manually edit the Gpttmpl.inf file to stop inheritance. Inheritance occurs when the security policies and assigned permissions are passed down from one object (the parent object) to the objects that are below it in the folder hierarchy (child objects).
MORE INFORMATION
You can edit the Gpttmpl.inf file so the ACL configuration that is set on the parent folder is not passed down to folders below it. To edit the Gpttmpl.inf file to stop inheritance:
Note For folders where this procedure has been applied, the folder must be protected again before the line is applied again. Before you apply the following procedure, locate the folder or file where you want to stop inheritance, and then make sure that the correct security settings are implemented. The "0" switch resets all permissions on child objects, and causes the children to completely inherit from the parent without resetting explicit (non-inherited) permissions on child objects. This resets explicit permissions on child objects and inherited permissions. The "2" switch resets all permissions on child objects, and causes the child objects to completely inherit from the parent object.
Warning Before you follow these steps, back up the Gpttmpl.inf file.
Part 1: Edit the Gpttmpl.inf File
Click Start, point toSearch, and then click For Files orFolders.
In the Search for files or folders namedbox, type Gpttmpl.inf.
When the search process is complete, double-click theGpttmpl.inf file.
Locate the line of code that corresponds to the file orfolder that you want to edit. For example, the following code corresponds tothe "Documents and Settings" folder on drive C:
"C:Documents and Settings",2,"D:PAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;CINP;0x00100001;;;BU"To avoid resetting explicit permissions in a subfolder,change the "2" to a "0" (zero).
On the File menu, clickSave.
On the File menu, clickClose.
Part 2: Implement the Policy Change
Click Start, and then clickRun.
In the Open box, type secedit/refreshpolicy machine_policy /enforce, and then clickOK.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
