Windows 7: Denied Access to D:\ drive

Hakon · 18 Oct 2009

Seems i ****** up my permission settings pretty badly thistime.

cmd is run as admin, and uac is off.

Code:

C:\>whoami
troll\hákon

C:\>net user Hákon
User name                    Hákon
Full Name                    Hákon
Comment
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            18.8.2009 12:42:43
Password expires             Never
Password changeable          18.8.2009 12:42:43
Password required            No
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   19.10.2009 01:39:46

Logon hours allowed          All

Local Group Memberships      *Administrators
Global Group memberships     *None
The command completed successfully.


C:\>takeown /f "D:" /r /d y
ERROR: Access is denied.

C:\>icacls "D:" /grant administrators:F /t
D:: Access is denied.
Successfully processed 0 files; Failed processing 1 files

C:\>

$Denied Access to D:\ drive-clipboard01.jpg$

$Denied Access to D:\ drive-windowsgate.jpg$

sup3rsprt · 18 Oct 2009

Quote: Originally Posted by Hakon

Seems i ****** up my permission settings pretty badly thistime.

and how did you manage to do that?

Flavius · 19 Oct 2009

1.First try through GUI takeownership of drive:Take Ownership of file - Vista Forums

2.If point I fail...Download PsTools PsTools extract from this psexec.exe file and place it in C:\Windows\System32.Psexec let you run processes from SYSTEM account.

for example:if you type in cmd.exe run with administrative previlliges this command:

psexec -s -i -d cmd.exe

it will run second console from SYSTEM account.

You can also run explorer from SYSTEM account

psexec -s -i -d explorer.exe

and again try GUI to take ownership of drive
you can also use your favorite file manager

psexec -s -i -d "path to favorite any good file menager"

moadip · 19 Oct 2009

i had the same issue
i clicked with the right mouse button then navigate to the security tab, then the advanced button on the right bottom, then the owner Tab, edit and there click on your user account dont forget to check the box on the left bottom, the last step is to confirm with OK, and there you have your permissions set to your account.

Hakon · 19 Oct 2009

Thanks for all the replies, i took the laptop to the freindly local computershop and they had a microsoft professional look at it, and he said there is no way to revert what i did (set denie permissions to all Users that are members of the "Users" group). i can now access all subfolders of the D:\ drive (eg. D:\Software) but not the D:\ itself. here is a copypaste from the icacls D: command:

Code:

C:\>icacls D:
D: BUILTIN\Users:(OI)(CI)(N)
   BUILTIN\Users:(F)
   TROLL\Hákon:(F)
   BUILTIN\Administrators:(F)
   NT AUTHORITY\SYSTEM:(OI)(CI)(F)
   BUILTIN\Administrators:(OI)(CI)(F)
   Everyone:(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\>

if there is any l33t h4x0r out there that can possibly help me fix this(eg. rebuild the whole ACL, delete all acl entrys for that drive)...id be thankfull, otherwise im just copying 200GB of data to my external drive and re-partitioning the drive

@ moadip:
i dont have the "Security" tab anymore

@ Flavius:
thanks for the PsExec tool, its awesome, but i cant run explorer as system(i can, but i cant open a window as system, it just runs as the current user)

@ sup3rsprt:
i....dont remember, well, i set denie permissions to all normal users...and something else

logicearth · 19 Oct 2009

Probably best to save what you can from the drive then delete it. As well as never mess with permissions again... o.o Using DENY permissions need to be done with consideration and careful planning because DENY takes precedence over ALLOW.

Flavius · 19 Oct 2009

Quote: Originally Posted by Hakon

@ Flavius:
thanks for the PsExec tool, its awesome, but i cant run explorer as system(i can, but i cant open a window as system, it just runs as the current user)

So run from SYSTEM account any external file menager with security tabs for example Total Commander.From this kind of started program you must have access to security tabs from System account not your own.I often do this kind of things.

EDIT

Quote:

@ moadip:
i dont have the "Security" tab anymore

Navigate to key HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Policies\Explorer and make sure you don't have string Nosecuritytab <-if you have this string remove it +restart

Hakon · 19 Oct 2009

How do i do that to a drive in TC ? i figured it out for folders. Select a folder > File > Properties > security tab

Hakon · 19 Oct 2009

Nvm, i figured it out

Flavius · 19 Oct 2009

Quote: Originally Posted by Hakon

How do i do that to a drive in TC ? i figured it out for folders. Select a folder > File > Properties > security tab

For drives is bit different.Navigate to left upper corner with drive letter,rightclick>>Properties (image)

Windows 7: Denied Access to D:\ drive

Denied Access to D:\ drive problems?