Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Admin can't change permissions? 3
- Thread starter Tony414
- Start date
- Thread starter
- #2
-
2
- #3
Is there any Deny permission set for the Everyone Group of the file or folder in question?
What folder or file, is it a personal data folder or a Vista folder/file?
When I queried a problem with access to some Vista folders (things like Application Data folders or shortcuts) I was told this -
"Here is the reason behind it. "The junctions are there to only provide appcompat for legacy apps and aren’t meant for a user to traverse through. The junctions have been explicitly set to block read through them by setting Everyone Deny Read. The main reason here is because these are just links to the actual location, so you dont want backup tools and other tools operating on your data twice, once from the original path and once via the junctions. There are scenarios where some of these junctions actually form a loop to support the appcompat for the old namespace in comparison to the new and in those cases allowing read through them is disastrous, for e.g. setup was broken for a week when the file system wasnt honoring the deny read.
Also as far as a user goes, you will never see these as they are system hidden, and you will need to take explicit action to see them by default."
I learned early on to leave those permissions set as they were, which is why I ask what folder/files you are talking about?
What folder or file, is it a personal data folder or a Vista folder/file?
When I queried a problem with access to some Vista folders (things like Application Data folders or shortcuts) I was told this -
"Here is the reason behind it. "The junctions are there to only provide appcompat for legacy apps and aren’t meant for a user to traverse through. The junctions have been explicitly set to block read through them by setting Everyone Deny Read. The main reason here is because these are just links to the actual location, so you dont want backup tools and other tools operating on your data twice, once from the original path and once via the junctions. There are scenarios where some of these junctions actually form a loop to support the appcompat for the old namespace in comparison to the new and in those cases allowing read through them is disastrous, for e.g. setup was broken for a week when the file system wasnt honoring the deny read.
Also as far as a user goes, you will never see these as they are system hidden, and you will need to take explicit action to see them by default."
I learned early on to leave those permissions set as they were, which is why I ask what folder/files you are talking about?
- Thread starter
- #4
Hi linney,
Thanks for the help. Lets just say any folder. I was trying to change the \Program Files folder because when I was trying to install a Microsft Codec pack I got some sort of 1303 error that said not enough permissions. I hope this helps.
Thanks,
Tony
Thanks for the help. Lets just say any folder. I was trying to change the \Program Files folder because when I was trying to install a Microsft Codec pack I got some sort of 1303 error that said not enough permissions. I hope this helps.
Thanks,
Tony
See if these help at all?
You receive an "Error 1303. The installer has insufficient privileges to access this directory" error message when you run Office 2000 Setup
You receive an "Error 1303. The installer has insufficient privileges to access this directory" error message when you run Office 2000 Setup
- Thread starter
- #6
Did you try installing this Microsoft Codec pack by right-clicking on it and selecting the "Run as Administrator" option? Even though your current user may be an Administrator, by design, it is not running with elevated permissions in Vista.
- Thread starter
- #8
How do I elevate my admin permissions in Vista?We are all learning that's the fun part of a new operating system, read frustrating for "fun".
I don't think you can permanently? Some people turn off UAC, I haven't myself. All I know (which isn't that much) is that which I mentioned about right-clicking to run with elevated permissions.
If you type "run elevated" in the Help and Support program it will show you some articles about UAC etc. which might be of assistance?
I don't think you can permanently? Some people turn off UAC, I haven't myself. All I know (which isn't that much) is that which I mentioned about right-clicking to run with elevated permissions.
If you type "run elevated" in the Help and Support program it will show you some articles about UAC etc. which might be of assistance?
TonyJollans
Programmer
I'm no expert at all but I have found the permissions in Vista to be "fun" too.
On occasion I have found that the only way I could change them is by first taking ownership. Right click, select Properties, on the Security tab, click Advanced, then select the Owner tab, click on Edit, give yourself permission, select yourself (maybe "Administrators" will work as well) and Apply. Maybe then you can change the permissions.
linney,
I read your quoted reply about the junctions and the possibility of loops with interest. I'm sure it is advice I will pass on; thank you.
Enjoy,
Tony
--------------------------------------------------------------------------------------------
We want to help you; help us to do it by reading this: Before you ask a question.
Professional Office Developers Association
On occasion I have found that the only way I could change them is by first taking ownership. Right click, select Properties, on the Security tab, click Advanced, then select the Owner tab, click on Edit, give yourself permission, select yourself (maybe "Administrators" will work as well) and Apply. Maybe then you can change the permissions.
linney,
I read your quoted reply about the junctions and the possibility of loops with interest. I'm sure it is advice I will pass on; thank you.
Enjoy,
Tony
--------------------------------------------------------------------------------------------
We want to help you; help us to do it by reading this: Before you ask a question.
Professional Office Developers Association
ArizonaGeek
IS-IT--Management
That is the one thing that is annoying me on Vista, is that I am logged in as myself and added to the Admin group but I still need to run something as an Administrator. If I am in and admin group, one would think I was an administrator.
Is there anyway to turn that off? I understand for most "users" this would probably be a good thing but I consider myself quite advanced in computers, having worked on and with them for the last 12 years. There are some of us who don't need our hands held every time we want to install or run something. I've had it installed for the last couple of days and so far am enjoying it, trying to figure out all the security stuff is the challenge but it isn't too terrible once you figure out where to look.
Cheers
Rob
Is there anyway to turn that off? I understand for most "users" this would probably be a good thing but I consider myself quite advanced in computers, having worked on and with them for the last 12 years. There are some of us who don't need our hands held every time we want to install or run something. I've had it installed for the last couple of days and so far am enjoying it, trying to figure out all the security stuff is the challenge but it isn't too terrible once you figure out where to look.
Cheers
Rob
This is the "Bible" for Vista at this early stage.
Windows Vista Product Guide
As time goes by and more people explore Vista then the tweaks and hacks will become evident, at the moment it may be a case of the blind leading the blind.
Windows Vista Product Guide
As time goes by and more people explore Vista then the tweaks and hacks will become evident, at the moment it may be a case of the blind leading the blind.
ArizonaGeek
IS-IT--Management
Thanks for the Bible linney ... a star for you!
Cheers
Rob
Cheers
Rob
ArizonaGeek
IS-IT--Management
I found a great piece of information from this blog:
Cheers
Rob
Cheers
Rob
anthonymeluso
IS-IT--Management
Well I have been using Vista for a few days and being a system admin at work and having to come home and be prompted for authorization to copy a file from one hard drive to another just killed me.
So I disabled UAC and slowly I'm starting to feel at home again. This feature is gonna drive admins batty! Regular users might get used to it if they don't need to do anything somewhat difficult.
Oh and getting current programs to install correctly, good luck. Most work but the key ones don't quite work so well. Case in point, Visual Studio 2005. Two patchs just to get this thing to work in Vista and still get prompted for admin access before I turned off UAC.
So for anyone that never had a problem with viruses or spyware or any other stupid error save yourself some hair on ya head and turn off UAC.
By the way still can't delete my Nero folder off my PC that contains some dlls. I don't have the permissions too.
Oh and sleep mode 50% of the time doesn't work.
Have fun!
So I disabled UAC and slowly I'm starting to feel at home again. This feature is gonna drive admins batty! Regular users might get used to it if they don't need to do anything somewhat difficult.
Oh and getting current programs to install correctly, good luck. Most work but the key ones don't quite work so well. Case in point, Visual Studio 2005. Two patchs just to get this thing to work in Vista and still get prompted for admin access before I turned off UAC.
So for anyone that never had a problem with viruses or spyware or any other stupid error save yourself some hair on ya head and turn off UAC.
By the way still can't delete my Nero folder off my PC that contains some dlls. I don't have the permissions too.
Oh and sleep mode 50% of the time doesn't work.
Have fun!
You can turn of UAC through SecPol.msc, and bring back the good ole days where a good infected website or bogus setup.exe, could install whatever it likes on the machine.
For normal operations there are absolutely no reason to run as the full administrator. Normal users should only be users, the more advanced can be members of the administrator group and using the split token to run their everyday programs in user mode. When priviligees are needed to install a program run it as administrator either by right clicking the shortcut, or in case you need to always run a program as administrator, right click the .exe and select compatibility tab and set "Run as administrator".
The built-in administrator is per default disabled and should only be used for extreme recovery situations.
The original post is trying to change permissions to the program files folder. I believe Windows will try to protect itself against things like this even if you are logged on as the administrator.
For normal operations there are absolutely no reason to run as the full administrator. Normal users should only be users, the more advanced can be members of the administrator group and using the split token to run their everyday programs in user mode. When priviligees are needed to install a program run it as administrator either by right clicking the shortcut, or in case you need to always run a program as administrator, right click the .exe and select compatibility tab and set "Run as administrator".
The built-in administrator is per default disabled and should only be used for extreme recovery situations.
The original post is trying to change permissions to the program files folder. I believe Windows will try to protect itself against things like this even if you are logged on as the administrator.
AlbertP321
Programmer
Hi,
I'm a new comer here. I got a problem on permission of file copy.
I have logged into real admin (enabled from User Group), not filtered admin (built-in admin during Vista install). Under the admin, I'm trying to copy out files from C:\Windows folder then copy them back. This is a system recovery tool I'm currently working on.
Copy-out worked fine but not copy-back. I have tried changed owner but it's always only 'Read' and 'Read & Execute' allowed. Is there an easier way to change these read/write permission for \Windows folder?
Any reply will be very appreciate.
I'm a new comer here. I got a problem on permission of file copy.
I have logged into real admin (enabled from User Group), not filtered admin (built-in admin during Vista install). Under the admin, I'm trying to copy out files from C:\Windows folder then copy them back. This is a system recovery tool I'm currently working on.
Copy-out worked fine but not copy-back. I have tried changed owner but it's always only 'Read' and 'Read & Execute' allowed. Is there an easier way to change these read/write permission for \Windows folder?
Any reply will be very appreciate.
-
1
- #18
Here is a sample of how to take owner:
To take ownership of Spoolsv.exe.:
1. Start/Run and type cmd
2. Type cd\
3. Type cd windows\system32
4. As a user, Run this command,
takeown /f Spoolsv.exe
This has given you ownership of the file. Enter the System32 directory via Windows Explorer and right click the file.
Go to the Properties/Security Tab and edit/add an entry for everyone and give them all full access. (tick all the squares).
You will find you can now delete the file.
--------------------------------------------------------
another way to take owner: harder to do but gives exclusive permission/Full Control. Now remember if you do not reset anybody with admin rights has Full Control..
browse to "exactly what you want control of,"
right-click 'what you want'
open property,
click Security>Advanced>Owner>Edit>Administrators?Click OK and close property. Now you must then
reopen property,Click Security>Advanced>Edit>Double-clickAdministrators>Click “Full Control”,Click OK then close Property.
Frank Smith irc.dhcnetwork.com
SomeWhere in Kansas Near Dodge City
To take ownership of Spoolsv.exe.:
1. Start/Run and type cmd
2. Type cd\
3. Type cd windows\system32
4. As a user, Run this command,
takeown /f Spoolsv.exe
This has given you ownership of the file. Enter the System32 directory via Windows Explorer and right click the file.
Go to the Properties/Security Tab and edit/add an entry for everyone and give them all full access. (tick all the squares).
You will find you can now delete the file.
--------------------------------------------------------
another way to take owner: harder to do but gives exclusive permission/Full Control. Now remember if you do not reset anybody with admin rights has Full Control..
browse to "exactly what you want control of,"
right-click 'what you want'
open property,
click Security>Advanced>Owner>Edit>Administrators?Click OK and close property. Now you must then
reopen property,Click Security>Advanced>Edit>Double-clickAdministrators>Click “Full Control”,Click OK then close Property.
Frank Smith irc.dhcnetwork.com
SomeWhere in Kansas Near Dodge City
AlbertP321
Programmer
Thank you for the info, s0121.
In addition to TAKEOWN, ICACLS command modifies read/write permission. So a batch file containing TAKEOWN and ICACLS will do the job on a whole hard disk automatically.
I got another question. After I changed owner on some files and did copy/rename/delete..., how do I change owner back to original? The original owner is TrustedInstaller?
Appreciate for any reply.
Thanks,
AlbertP
In addition to TAKEOWN, ICACLS command modifies read/write permission. So a batch file containing TAKEOWN and ICACLS will do the job on a whole hard disk automatically.
I got another question. After I changed owner on some files and did copy/rename/delete..., how do I change owner back to original? The original owner is TrustedInstaller?
Appreciate for any reply.
Thanks,
AlbertP
It is basically the same as XP and is done via the Security Tab of the file or folder.
HOW TO: Take Ownership of a File or Folder in Windows XP (Q308421)
When you have reached the Owner Tab used the Edit button to see a list of possible Owners. If the user you want is not on that list proceed to the "Other users and groups" button and add the user or group. Return to the Owner Tab page highlight your selection and Apply.
Usernames are case sensitive. Groups or Users must also exist in the Computer Management list of Users or Groups.
TrustedInstallers is a bit special (I think but I'm not sure?) so good luck with that particular user.
Do all the above as an Administrator.
HOW TO: Take Ownership of a File or Folder in Windows XP (Q308421)
When you have reached the Owner Tab used the Edit button to see a list of possible Owners. If the user you want is not on that list proceed to the "Other users and groups" button and add the user or group. Return to the Owner Tab page highlight your selection and Apply.
Usernames are case sensitive. Groups or Users must also exist in the Computer Management list of Users or Groups.
TrustedInstallers is a bit special (I think but I'm not sure?) so good luck with that particular user.
Do all the above as an Administrator.
- Status
