Set permissions for administrators who manage client installation images for RIS
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To set permissions for administrators who manage client installation images for RIS
Create a list of people who will manage user access to client installation images for Remote Installation Services (RIS). The list might include the same people who will manage accounts for prestaging for RIS.
Create a group account (or determine the name of the group account if it already exists), and make the people on the list members of the group.
On a computer from which you can set folder permissions for the RIS server containing the installation images that will be managed by the group, open Windows Explorer.
Right-click the folder that contains the RIS folders and files (the default name for the folder is RemoteInstall).
Click the Setup folder.
Click the folder for the language of the installation image that you want to set permissions for.
Click the Images folder.
Do one of the following:
If you want the group that you created to manage all images in the Images folder, right-click the Images folder and then click Properties.
If you want the group that you created to manage only certain images in the Images folder, right-click a folder that contains an image that you want the group to manage, and then click Properties.
Click the Security tab.
Do one of the following:
If the group you created for those who manage client installation images does not appear in the Group or user names box, click Add. Type the name of the group, and then click OK.
If the group you created for those who manage client installation images appears in the Group or user names box, click the name of the group.
In the Permissions for User or Group box, under Allow, make sure the Full Control check box is selected.
When the list of group and user names and their permissions match the access you want to allow or prevent, click Advanced.
Select the check box marked Replace permission entries on all child objects with entries shown here that apply to child objects.
If you have another folder for which you want to set permissions, navigate to the folder and repeat the process for setting the permissions.
Notes
To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.
To open Windows Explorer, click Start, point to All programs, point to Accessories, and then click Windows Explorer.
This topic does not apply to Windows Server 2003, Web Edition.
Consider using this procedure if there are people in your organization who manage accounts and permissions but do not configure other aspects of RIS. You can use this procedure to place those who manage accounts and permissions in a group such as Account Operators instead of putting them in a group such as Domain Admins or Enterprise Admins. For more information setting appropriate permissions for RIS administrators, see Related Topics.
Managing user access to client installation images includes the following:
Associating an unattended setup answer file with an installation image
Allowing or preventing the installing of a RIS image by a user or group
Allowing or preventing the viewing and installing of a RIS image by a user or group
For security reasons, set these permissions on the folder, as described in this procedure, not on the shared folder. Permissions on a folder are controlled by the NTFS file system, which provides greater security than permissions set on a shared folder.
For information about creating a group or adding a member to a group, see Related Topics.
Information about functional differences
- Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.
See Also
Concepts
Allow or prevent the viewing and installing of a RIS image by a user or group
Allow or prevent the installing of a RIS image by a user or group
Create a new group
Add a member to a group
Choosing appropriate group memberships for RIS administrators