Microsoft KB Archive/278436

= How to Edit the Gpttmpl.inf File to Stop Inheritance =

PSS ID Number: 278436

Article Last Modified on 4/22/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server

-



This article was previously published under Q278436



SUMMARY
This article describes how to manually edit the Gpttmpl.inf file to stop inheritance. Inheritance occurs when the security policies and assigned permissions are passed down from one object (the parent object) to the objects that are below it in the folder hierarchy (child objects).



MORE INFORMATION
You can edit the Gpttmpl.inf file so the ACL configuration that is set on the parent folder is not passed down to folders below it. To edit the Gpttmpl.inf file to stop inheritance:

Note For folders where this procedure has been applied, the folder must be protected again before the line is applied again. Before you apply the following procedure, locate the folder or file where you want to stop inheritance, and then make sure that the correct security settings are implemented. The &quot;0&quot; switch resets all permissions on child objects, and causes the children to completely inherit from the parent without resetting explicit (non-inherited) permissions on child objects. This resets explicit permissions on child objects and inherited permissions. The &quot;2&quot; switch resets all permissions on child objects, and causes the child objects to completely inherit from the parent object.

Warning Before you follow these steps, back up the Gpttmpl.inf file.

Part 1: Edit the Gpttmpl.inf File
 Click Start, point to Search, and then click For Files or Folders. In the Search for files or folders named box, type Gpttmpl.inf . When the search process is complete, double-click the Gpttmpl.inf file.  Locate the line of code that corresponds to the file or folder that you want to edit. For example, the following code corresponds to the &quot;Documents and Settings&quot; folder on drive C: &quot;C:\Documents and Settings&quot;,2,&quot;D:PAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;CINP;0x00100001;;;BU&quot;  To avoid resetting explicit permissions in a subfolder, change the &quot;2&quot; to a &quot;0&quot; (zero). On the File menu, click Save. On the File menu, click Close.</li></ol>

Part 2: Implement the Policy Change

 * 1) Click Start, and then click Run.
 * 2) In the Open box, type secedit /refreshpolicy machine_policy /enforce, and then click OK.

Keywords: kbhowto KB278436

Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.