Access denied editing text files to root C drive

NoelDP said:

I find it easier to read ICACLS output for permissions.

ICACLS <pathname>\<filename>

(e.g. ICACLS C:\Windows\System32\slui.exe )

You can try running it locally by remote, and running it remotely, and see if there's a difference.

Post the results, and I'll try and interpret them

C:\Users\Me>ICACLS C:\links.txt
C:\links.txt Everyone: (F)
Andrew\Me: (F)
BUILTIN\Administrators: (F)
NT AUTHORITY\SYSTEM: (F)
BUILTIN\Users: (F)
Mandatory Label\High Mandatory Level: (I)(NW)

Successfully processed 1 files; Failed processing 0 files

NoelDP said:

There's one default permission entry missing there - which may be because it's missing from the parent folder...

Run the following command and let's see what we get...

ICACLS C:\

C:\Users\Me>ICACLS C:\
C:\ Everyone: (OI)(CI)(F)
NT AUTHORITY\Authenticated Users: (OI)(CI)(F)
Andrew\Me: (OI)(CI)(F)
BUILTIN\Administrators: (OI)(CI)(F)
NT AUTHORITY\SYSTEM: (OI)(CI)(F)
BUILTIN\Users: (OI)(CI)(F)
Mandatory Label\High Mandatory Level: (OI)(NP)(IO)(NW)

Successfully processed 1 files; Failed processing 0 files

NoelDP said:

OK - maybe if we change that permission then, it'll correct things. (there's a minor inheritance error)

run the following commands from an Elevated Command prompt...

ICACLS C:\links.txt /remove "Mandatory Label\High Mandatory Level"
ICACLS C:\ /grant "NT AUTHORITY\Authenticated Users": (IO)(OI)(CI)(F)
ICACLS C:\ /grant "NT AUTHORITY\Authenticated Users": (AD)
ICACLS C:\ /grant "NT AUTHORITY\SYSTEM": (F)

ICACLS C:\
ICACLS C:\links.txt

post the results, and test the open/amend/save routine again.

Ok just did everything you asked. Everything responded with successful messages but afterwards I tested it and the problem is still there :(

C:\Users\Me>ICACLS C:\
C:\ NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\Authenticated Users:(AD)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(F)
Everyone:(OI)(CI)(F)
NT AUTHORITY\Authenticated Users:(OI)(CI)(F)
Andrew\Me:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Users:(OI)(CI)(F)
Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Me>ICACLS C:\links.txt
C:\links.txt Everyone:(F)
Andrew\Me:(F)
BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)
BUILTIN\Users:(F)
Mandatory Label\High Mandatory Level:(I)(NW)

Successfully processed 1 files; Failed processing 0 files

Well I said this in my OP "-I have notepad set to "Run as Administrator" on both windows 7 machines" maybe I don't understand exactly what you want me to do. I have switched ownership of the file multiple times testing it out to see if it would fix the problem. I have tried Everyone, Me (Andrew\Me), Administrators(Andrew\Administrators), Authenticated Users, Users(Andrew\Users), SYSTEM. Right now it's set to Me (Andrew\Me).

How to enable in Windows Vista, Windows 7, and Windows 8

By default, Windows Vista and newer versions of Windows prevent local accounts from accessing administrative shares through the network.
To enable administrative shares you have to make a registry change. Click on Start Menu and in the search box type ‘regedit’ and press ENTER. Add this registry item:
Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: LocalAccountTokenFilterPolicy
Data Type: REG_DWORD
Value: 1
After rebooting, the hidden share is accessible from other computers. Note that this change removes Windows' restrictions on remote User Account Control.
You may be able to use 'net stop server' and then 'net start server' from an administrative command prompt instead of rebooting.


When I was researching on how to fix this problem i saw a post with someone saying to do that. Problem is, I don't have LocalAccountTokenFilterPolicy in that folder. Not sure why or what I should do.

NoelDP you still around? You were responding back pretty fast. Just wondering if you stopped posting cause you were stumped or something else? I thought we might of been close to figuring this out.