I have a problem – I have win2k3 server and using Win Xp / 2k machines. Some of the applications the users use require write access to the c drive of their machines, however it is different locations such as c: root and program files. I have used GP for this before but have had to allow access basically to the whole disk however problems I have had where the GP would take ages to apply as it was resetting permissions on the machine each time they booted. The other option is to give them local admin rights although now they can do anything they want. I am just wondering if anybody has a solution to this or knows of a way to control app level access via gp.