Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Access denied editing text files to root C drive

21 Apr 2013   #11
morpheus305

windows 7 64bit professional
 
 

Quote   Quote: Originally Posted by NoelDP View Post
I find it easier to read ICACLS output for permissions.

ICACLS <pathname>\<filename>

(e.g. ICACLS C:\Windows\System32\slui.exe )

You can try running it locally by remote, and running it remotely, and see if there's a difference.

Post the results, and I'll try and interpret them
C:\Users\Me>ICACLS C:\links.txt
C:\links.txt Everyone: (F)
Andrew\Me: (F)
BUILTIN\Administrators: (F)
NT AUTHORITY\SYSTEM: (F)
BUILTIN\Users: (F)
Mandatory Label\High Mandatory Level: (I)(NW)

Successfully processed 1 files; Failed processing 0 files


My System SpecsSystem Spec
.
21 Apr 2013   #12
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

There's one default permission entry missing there - which may be because it's missing from the parent folder...

Run the following command and let's see what we get...

ICACLS C:\
My System SpecsSystem Spec
21 Apr 2013   #13
morpheus305

windows 7 64bit professional
 
 

Quote   Quote: Originally Posted by NoelDP View Post
There's one default permission entry missing there - which may be because it's missing from the parent folder...

Run the following command and let's see what we get...

ICACLS C:\
C:\Users\Me>ICACLS C:\
C:\ Everyone: (OI)(CI)(F)
NT AUTHORITY\Authenticated Users: (OI)(CI)(F)
Andrew\Me: (OI)(CI)(F)
BUILTIN\Administrators: (OI)(CI)(F)
NT AUTHORITY\SYSTEM: (OI)(CI)(F)
BUILTIN\Users: (OI)(CI)(F)
Mandatory Label\High Mandatory Level: (OI)(NP)(IO)(NW)

Successfully processed 1 files; Failed processing 0 files
My System SpecsSystem Spec
.

21 Apr 2013   #14
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

OK - maybe if we change that permission then, it'll correct things. (there's a minor inheritance error)

run the following commands from an Elevated Command prompt...

ICACLS C:\links.txt /remove "Mandatory Label\High Mandatory Level"
ICACLS C:\ /grant "NT AUTHORITY\Authenticated Users":(IO)(OI)(CI)(F)
ICACLS C:\ /grant "NT AUTHORITY\Authenticated Users":(AD)
ICACLS C:\ /grant "NT AUTHORITY\SYSTEM":(F)

ICACLS C:\
ICACLS C:\links.txt

post the results, and test the open/amend/save routine again.
My System SpecsSystem Spec
21 Apr 2013   #15
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Thank you Noel for coming to help.
My System SpecsSystem Spec
21 Apr 2013   #16
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

Interesting problem
My System SpecsSystem Spec
21 Apr 2013   #17
morpheus305

windows 7 64bit professional
 
 

Quote   Quote: Originally Posted by NoelDP View Post
OK - maybe if we change that permission then, it'll correct things. (there's a minor inheritance error)

run the following commands from an Elevated Command prompt...

ICACLS C:\links.txt /remove "Mandatory Label\High Mandatory Level"
ICACLS C:\ /grant "NT AUTHORITY\Authenticated Users": (IO)(OI)(CI)(F)
ICACLS C:\ /grant "NT AUTHORITY\Authenticated Users": (AD)
ICACLS C:\ /grant "NT AUTHORITY\SYSTEM": (F)

ICACLS C:\
ICACLS C:\links.txt

post the results, and test the open/amend/save routine again.
Ok just did everything you asked. Everything responded with successful messages but afterwards I tested it and the problem is still there :(

C:\Users\Me>ICACLS C:\
C:\ NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\Authenticated Users:(AD)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(F)
Everyone:(OI)(CI)(F)
NT AUTHORITY\Authenticated Users:(OI)(CI)(F)
Andrew\Me:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Users:(OI)(CI)(F)
Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Me>ICACLS C:\links.txt
C:\links.txt Everyone:(F)
Andrew\Me:(F)
BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)
BUILTIN\Users:(F)
Mandatory Label\High Mandatory Level:(I)(NW)

Successfully processed 1 files; Failed processing 0 files
My System SpecsSystem Spec
21 Apr 2013   #18
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

If you open Notepad as Administrator, does this give you sufficient rights?
Who is the Owner of the file?

By default, Standard users don't have access to the root folder - I think this is caused by the "Mandatory Label\High Mandatory Level" permission setting, which is inherited - and I can't find an easy way to switch it off....

This is actually a 'good thing' under most circumstances, as it prevents a lot of potential malware threats.

You can change this default using the procedures here...

http://en.wikipedia.org/wiki/Administrative_share
My System SpecsSystem Spec
21 Apr 2013   #19
morpheus305

windows 7 64bit professional
 
 

Well I said this in my OP "-I have notepad set to "Run as Administrator" on both windows 7 machines" maybe I don't understand exactly what you want me to do. I have switched ownership of the file multiple times testing it out to see if it would fix the problem. I have tried Everyone, Me (Andrew\Me), Administrators(Andrew\Administrators), Authenticated Users, Users(Andrew\Users), SYSTEM. Right now it's set to Me (Andrew\Me).

How to enable in Windows Vista, Windows 7, and Windows 8

By default, Windows Vista and newer versions of Windows prevent local accounts from accessing administrative shares through the network.
To enable administrative shares you have to make a registry change. Click on Start Menu and in the search box type ‘regedit’ and press ENTER. Add this registry item:
Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: LocalAccountTokenFilterPolicy
Data Type: REG_DWORD
Value: 1
After rebooting, the hidden share is accessible from other computers. Note that this change removes Windows' restrictions on remote User Account Control.
You may be able to use 'net stop server' and then 'net start server' from an administrative command prompt instead of rebooting.


When I was researching on how to fix this problem i saw a post with someone saying to do that. Problem is, I don't have LocalAccountTokenFilterPolicy in that folder. Not sure why or what I should do.
My System SpecsSystem Spec
22 Apr 2013   #20
morpheus305

windows 7 64bit professional
 
 

NoelDP you still around? You were responding back pretty fast. Just wondering if you stopped posting cause you were stumped or something else? I thought we might of been close to figuring this out.
My System SpecsSystem Spec
Reply

 Access denied editing text files to root C drive




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Changing Setting Security on root folder returns 'access is denied'
Hi, Changing setting Security on root folder returns access is denied for some sub-folders. I have an external HHD assigned with 'G' driver letter under my Computer. I have removed 'everyone' from the 'Groups and user names' on the root folder by choosing 'security tab' from the property...
Backup and Restore
The root drive (C:\) is shared, nevertheless there is no access to sub
The root drive (C:\) is shared, nevertheless there is no access to subfolders, How come that the root drive (C:\) is shared but no access is permitted to a particular subfolder (attached)? How to force the sharing for the root and ALL the subfolders Thank you Best
Network & Sharing
Access denied when editing .ini files
All of a sudden when I'm trying to save an edited .ini file in a program folder (in C:\Program Files) I get blocked by an Access Denied message. First, on making the changes in the .ini using Notepad and then clicking File > Save, I get the "Save As" dialog instead. But even then when I click Save...
General Discussion
all my files are access denied
can anyone help me... all my files are access denied even im the admin. tnx!
General Discussion
.Log text files on root of "C" drive
After installing Nvidia drivers, Realtek drivers, and JMicron E-sata drivers, I now have .log text files on the root of my "C" drive. Are these accessed next time I update the driver or can I get rid of them? I can't seem to find anything about these. I know they are there for a reason but I like...
Installation & Setup
cant access root drive - lost admin rights
Hi; I installed Windows7 recently. I was changing permissions and accidently denied authenticated users to C drive. I was logged in as admin which is the only account. Now I cant access anythig in C Drive and cant execute any thing. I tried through safe mode as well but of no use. How can I...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:30.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App