Novell is now a part of Micro Focus

My Favorites


Please to see your favorites.

Assigning File Rights via DLU can delay user logon

This document (7004171) is provided subject to the disclaimer at the end of this document.


Novell ZENworks 10 Configuration Management
Novell ZENworks 11 Configuration Management


 Assigning File Rights to large directory structures significantly slows down DLU logons.


A "Local File Rights Policy" should be the preferred method for assigning file rights on devices for large directory structures.
These rights are not applied each time a user logs into the device and will not result the long delays that can be associated by using DLU assigned file rights, which are reapplied on each logon. 
The "Local File Rights Policy" can be configured to create custom local groups to which rights can be assigned.  The DLU policy can then be configured to place users into these groups.
This will allow for the fine level control of rights to different users without performance degradation.

Additional Information

Another solution besides the use of a "Local File Rights Policy would be the following:
Create a device assigned bundle that automatically created a custom local group using the "net localgroup" command and then call CACLS.EXE or XCALCS.exe to assign the desired permission to the group created.

Use the DLU policy to place the created users in the custom local group.


This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7004171
  • Creation Date:11-AUG-09
  • Modified Date:30-APR-12
    • NovellZENworks Configuration Management

Did this document solve your problem? Provide Feedback