Disable forever. "Special permissions"

ATTENTION ALL:

I think I have found a fix to this. I apologize if someone else posted this already, but by page 3 I had an idea and jumped to the end.

I was having a Horrendous time trying to manage my files. Too many "Administrator permissions needed" messages. Driving me nuts. On top of that, I was having trouble making sense of UAC and Security settings, but I have managed to figure out how to make those darned permissions requests go away!!! Hope this works for you too.

1) Right click on your chosen drive in "My Computer"
2) Click Properties
3) Click Security Tab
4) Check to see if the "Authenticated Users" group has Full Control permissions. If not:
5) Click Advanced
6) Click Change Permissions
7) Select Authenticated Users
8) Click Edit...
9) Select "Full Control"
10) Click OK 4 times
11) Test
It will take quite a long time depending on how much is on that drive, to change the child permissions on every single file and folder on the whole drive. BUT: Hasn't asked me since!!

Please let me know if this works for you all as well

FYI just in case: (I also have SYSTEM and Adminsitrators (Name\Administrators) set to full control too, don't know if that makes a difference as well)

Uhm, unsure what to say...

QUOTE FROM MICROSOFT:
SID: S-1-5-11
Name: Authenticated Users
Description: A group that includes all users whose identities were authenticated when they logged on. Membership is controlled by the operating system.

Now, I am running a WORKING (Win 7 x64) system currently with no permission issues, if you delve any deeper than the quote above and truly know what the Authenticated Users' Group is for, while you may have found something that fixes the problem, what you mention is NOT what is the cause of the "Permissions Issue" referred to in this thread, nor anything I would want to change the permissions for ---> ESPECIALLY ON FOR INSTANCE A WS08/R2 domain or web controller... (Though oddly I have never seen the issue crop up in either of the Server flavors of Windows 6.1/["7"]...) Please look carefully below at the pictures and settings I have on a system with no issues, then think about the possible security vulnerabilities caused by making the change(s) you suggest...

Also of interest, notice how the "REAL" permissions differ in screenshot #4, #5 and subsequently #6 (another permission container for Auth. Users...) over screenshot #2 and #3...








OK, this is a "working system" with no permission issues noted. While I will not argue that what you posted did, or did not work with your particular problem, please realize that I am pretty certain off the top of my head that ACL never has granted the Authenticated User "FULL CONTROL"

It would be of more use for you to have used the ACL tools and others to capture permission levels FIRST, as well as compare on a working system with similar installations; I think you might be surprised... Have you looked to insure all is correct in gpedit.msc??? (Local Group Policy Editor...)

I think you need get back with us on this. As you can see, here is an example of ONE system, working fine and as intended, that the Authenticated User indeed IS NOT granted Full Control; and that is by design I do believe. Can you show us the permission levels as I have here on a system with the permissions bug for the Authenticated User; and show that it differs from above???

A possible solution

I found a cheap -actually free- solution. Erase W7 and install Ubuntu.

More solutions (for idiots only...)

mosco011 said:

I found a cheap -actually free- solution. Erase W7 and install Ubuntu.

Click to expand...

This is as useful as the following solution: DESTROY YOUR COMPUTER WITH A SLEDGE-HAMMER AND NEVER USE ONE AGAIN. Come on man, you're wasting server space with this crap.

mosco011 said:

I found a cheap -actually free- solution. Erase W7 and install Ubuntu.

Click to expand...

Pray tell how you got rid of the "permissions problem" on Linux where every system setting change or program install requires you to type in your root password. Or copying files from one user to another or to and from root owned space doesn't cause the EXACT same issues?

Run as root all the time? Set the global permissions on the entire root space to your user account?

Learning how to USE the permission system will get us all a lot further than constantly trying to thwart it. (And that's exactly the same on Linux)

Ok seriously, tell someone to go use XP over 7 again I'll gladly send you a virtual slap.
Getting sick of hearing people say that. It's not happening get over it. Besides that somethings aren't even support in xp that people need 7 for. Like directx 11 or GPU drivers for example. Sure theres "bootleg" versions, they also come with bootleg coding.....
I can't even change details/descriptions on one file that has nothing to do with windows, no uac, hidden admin acct, has ownership the works and for something so stupid as changing the description of the file?

Computer: You need permission from..... username....oh you!
Me: Well ok ask me for permission....hey win7, retard, ask me...
Computer: (Hmm)No, not going to ask you, but would you like to retry anyway?
Me: "What the f?"
Computer: Click retry, it'll work I promise
Me: ........ (click)
Computer: HAH totally kidding, retry again?
Me: Are you going to ask me this time? ......
Computer: I don't speak english
Me: What about 1's and 0's
Computer: Hmm? I'm windows 7 and I was built using 8's and 9's.
Me: Bl** me.

There are many different reasons(settings) why you cant access files or folder. But my problem was simple. i mistakenly changed ownership of a folder. I changed Ownership back to administrator, but it didnt help.tried it again but this time i noticed a checkbox that said (replace owner on sub containers and objects).
I checked this and it worked. i now have access to this folder and all files init.
Duh!, whats my name?

Apparently, If you dont check this box,ownership of any files or sub folders in that folder. wont be changed.
Hope this may help someone else.

Hello fret4you and welcome to Seven Forums.

You might find this previous thread an interesting read:

http://www.sevenforums.com/general-discussion/66043-take-assign-ownership-file-folder.html

Win 7 permission problems

Hi guys, I think I have found the solution

Problem pt1:
I reinstalled Windows, but some data like photos, music, etc. on my EXTERNAL HDD couldn't be changed (renamed, moved, deleted), because new system thought, that I am not the real owner.

Problem pt.2:
If I opened Properieties->Security on my file, I noticed that there is some another unknown (and non-existing) user from the last last copy of Windows, who owned this file and all other folders and subfolders inherited rights from it. Name of this user was rly long number. I tried to change ownership manualy to "new me", but system still wanted permissions from "new me" and somehow wasn't able to identify me. Also, there was a priblem with deleting this "old me" - I think this caused most of the problems.

Notice: It is good to do this on the very first level of inherited hierarchy, otherwise it may not work properly.

Solution:
1. Download this script from Add "Take Ownership" to Explorer Right-Click Menu in Win 7 or Vista - How-To Geek .
2. Right-click on the folder and select Take Ownership. This (this may take a while)
3. Only NOW you can delete that old user, who has all the rights (Preferences->Security->Edit->Remove) - and actually get back your privileges to files.

This is the correct thing to do with personal files that are on seperate drives or that you manually copied into your windows 7 user folder or in folders on the rrot drive that you created.

One thing to NOT do is run take ownership on the root of your OS drive or on the program files or windows folders. That can mes things up prety bad. But running it on your own personal files is exactlly the right thing to do in this situation

Hi, this maybe a solution for some try it and see...

Well for me I could not, under user account (Administrator), delete a pre-installed backup folder for Vista, which i no longer required as I'd updated to Windows 7. It resided on a 50% partition of my only harddrive, taking up 5.5GB, which i wanted to free up. It was owned by SYSTEM, not TrustedInstaller. It required permission from SYSTEM to delete it. Folder had read only attribute, which i could not change either.

Administrator already had full permissions, but not ownership, which i proceeded to take from SYSTEM:
Properties/Security/Advanced/Owner/Edit/select name of Administrator account/check box: "Replace owner on subcontainers and objects"/ OK your way back out.

I confirmed Administrator now had ownership and full permissions, but i still could not remove read only attribute or delete the folder.

I then went to the "Effective Permissions" tab, which is basically a tool for checking a user or groups current permissions on an file/folder. You cannot type a username into the "Group or user name" box.
Press select/Enter the object name (type the administrator name) at blinking prompt/Click "Check Names"/should return the found profile, underlined, in the text box/click OK.

It reads in the current permissions and you now have a grayed out Administrator username under the Effective Permissions tab with all of it's profiles current permissions for that file/folder. This is read only, you cannot change any permissions here.
Once again i could see that Administrator had full permissions. However, when I OK'd out to the folder in Explorer and right clicked once again, i noticed the Administrator shield had disappeared from the right click context menu for "Delete" and "Rename" :shock:
I proceeded to delete the folder, with only the default "Are you sure you want to move the folder to the Recycle Bin?" message

On further investigation the shield has vanished for all files/folders on the right click context menu!
I can now do as I please, as it should be for someone savvy enough with a pc.
As long as you don't touch the TrustedInstaller owned stuff such as C:\Windows or Program Files & some SYSTEM owned files, you should be ok.

All I can summise, at the moment, is that using the Effective Permissions Tool somehow altered the Setup Administrator to act as the Hidden Administrator account.

Go figure? :sarc:

I didnt read all posts but this may be useful

I have been annoyed by this for ages when Microsoft makes my PC pop up and tell me that i don't have access to my own PC ACCESS DENIED! There are 3 potential fixes Give yourself Backup operator permissions (cant be done on home versions, maybe administrator account can have it?) Use fat32 (not practical with large drives) (I don't know if win7 lets u) Use a different NTFS hd driver(again not practical, Programs like bart-pe access drives without permission problems and they use windows Pre install environment but nearly impossible to find a driver that isn't beta and that doesn't break)

Sorry to hear it dark41--Nobody seems to give a hoot enough to answer in over 2 years! I want FULL permission on my own PC as an Admin also. Too bad nobody in the Universe knows how to tell us how to get FULL abilities on our OWN PCs. I'm sure all this "Permission" stuff is good for some ppl that have to share PCs, but WE who own our own, and have no one else to mess with it--we want to dump all this Permission crap and UAC stuff and have the control we paid for. Surely this can be possible! All is not "Spy Vs Spy" in the real world, and I don't wanna play anymore!

Ok, so without any sarcastic replies, can anyone help the LARGE number of us do away with all this security stuff--I don't want somebody's LOCK on MY files! Hope it doesn't take 2 yrs for an answer to this... Scott

Edited: Sorryfor the noise--I was reading the first page and didn't realize that my post would be the 73rd one. This has been going for awhile. My mistake. Thanks!

Welcome to the Windows 7 Forum. Well I won't take two years to answer but I do have some questions.
How does the University have control over your computer? You state you own your computer. That puzzles me. Does the programs on your computer belong to the University and their I.T. Department set up the computers to protect their programs? I'm just trying to get a understanding for me and others on this site so if we can help we will help.
Could you be precise of what you are trying to get permission to do on your computer that it won't let you do. Some things Windows 7 locks to protect itself.

laserscottman:

Your asking for a non sarcastic reply to a completely sarcastic question?

Ok I'll bite: No, you cannot turn off the entire permission system in Windows 7. There. Question answered, only took a few minutes. Not on Windows7, not on Linux and not on OSX. So you either learn to live in a permissioned world or go back to Windows 95 and OS9 or maybe go fishing... (Ooops, some sarcasm slipped out, darn it!)

The fact is, you already have complete and total control over your Windows 7 PC. Always have. You just need to learn how to use it, but your apoplexy is preventing you from it. Catch-22

Also, in all honesty, that kind of post will do nothing but make every single person that could help you with any specific problem you may have just completely ignore you. That's why a lot of posts go completely unanswered. (Though in this case, there is clearly no answer that will ever satisfy the questioner)

Ok Bear and Seal--Thanks for your answers. (I myself use a Chimp with a Laser mounted on a 1911ACP as my avatar. Maybe I'll figure out how to apply it.) Now I know. BTW I said universe, not university. I was considerably unhappy at the time of writing in that this issue has never been successfully resolved to the satisfaction of anyone I researched. Sorry you all thought I was a smartass, but it seems I have my answer pronto, though by less than savory means. The 2 years remark was accurate, btw.
I have followed tutorials on the matter, and understand how some pgms are linked to others that also require permission, thereby making that higher folder locked also. I have read that Microsoft has forced some measure of security against Administrators also, for what reason, I cannot imagine beyond that even Admins make fatal mistakes. But going beyond critical system files locking is overstepping my desired personal boundaries.

I am logged on as Admin with no other users, set up the install that way, have no password--all because I desire to power-up and then make breakfast, and want the comp to boot without having to choose the user/pass. Also, as I am alone, no one else will use this computer, so I have no need for the security of keeping keyboard/mouse users at bay. Though I have 2@1Tb SATA,W7Ultimate, [email protected] SATA, and 1 IDE@120Gb installed, with Win XP Pro on the IDE
The folders that appear with a Lock icon are many and in various places. The first appear in C: Documents and Settings, and System Volume Information (these 2 show "...not accessible. Access is denied." 4 other folders depict a Lock Icon, but will open.
What I have found is that I can do this to get results, but the Lock Icons remain:
Right click (RC) on the C:/Documents and Settings folder/Properties/Security/in group or user names, I allow only SYSTEM and Administrators by using the edit function as needed/highlight Administrators/Edit/ and make it so that the full control>allow boxes are checked for SYS and Admin/apply/ok.
Then D&S will let me in, but the Lock Icon remains. Nothing has worked to allow access to Sys Vol Info. Not on any of the drives. Maybe that's what Bear means by "Some things Windows 7 locks to protect itself."

Seal, please accept my apology for the irreverent former post. It is not clear that "... no answer that will ever satisfy the questioner" When you say:
"The fact is, you already have complete and total control over your Windows 7 PC. Always have. You just need to learn how to use it, but your apoplexy is preventing you from it. Catch-22"

Certainly, your answer is not satisfying. Simply writing: "you already have complete and total control over your Windows 7 PC. Always have" gives no satisfaction to anyone but yourself. Again, I am sorry to have evoked this type of scathing response from you, and would honor your correct response with appreciation. If it is simultaneously correct to say that:
"No, you cannot turn off the entire permission system in Windows 7. There. Question answered" and also:
"The fact is, you already have complete and total control over your Windows 7 PC. Always have"
Then I may not be capable of understanding. But please try to explain how to remove the majority of the problem with Lock Icons if you can. Thank you. We both seem to be sensitive to the way others write. Perhaps I spoke as a brat might. Sorry.

BTW--I see I was responding to a post from 2 years ago--not the last page of this thread, but rather the first. Sorry, my bad.

laserscottman, Leave Documents and Settings alone, along with any folders that DENY you access out right. There are very few folders like "System Volume Information" that will DENY you access the ones that do, are most likely to be JUNCTIONS. Aka., Documents and Settings is just a reference to the Users directory. Gaining access to Documents and Settings will be the same thing as going to Users. Think of JUNCTIONS as windows or portals.

see: https://www.youtube.com/watch?v=P_bTsdmjgvs

Trying to open JUNCTIONS creates this problem called infinite looping, as well as data duplication. whenever you run a scan or backup with a program that does not understand JUNCTIONS will go through and scan every single file in a infinite loop over and over again. Deadlock. That is why you are denied access. You don't need access.

Furthermore, the little pad lock icon, means private. what that means only a single user might have access. Not shared.

Good info, logicearth--that clears up some of the misconceptions I had about those Lock Icons possibly being tied to UAC or whatever was denying me access to perceived file locations. This kind of good information and instruction is rare in the places I've searched; many times on forums where any unqualified person might offer an opinion that is ridiculous to anyone but himself. Kind of like the people on American Idol that think they can sing! But I now feel like I've struck paydirt in these Seven Forums! The links you share for clarification are excellently written; easy to comprehend.
I'd have bought Win 7 for Dummies (is there even one?) but it would not have been a decent investment, as they tend to talk down, and don't really have any meat there. But this rare cache of knowledge is a Jewel unto us who search it! I'm particularly anxious to search/create and explore the JunctionPoints.txt for a list of things that may exhibit peculiar characteristics!
And now I am wondering whether my goofing around with the "Show hidden files, folders and drives" option has somehow caused a conflict with the Search function and always seeming to have to deal with "Searches may be slow in non-indexed locations: P;\;\. Click to add to index..." No matter how many times I've rebuilt the Search Index, a new query always asks me to add some drive to the index. It's just different than previous OSs. And what it does sometimes list is a folder that is absolutely irrelevant to the query, and does not even contain the query word within the file!

So, I will learn to work within your advice to: "Leave Documents and Settings alone, along with any folders that DENY you access out right." and try to begin using the right paths!

I'll maybe start another thread involving why I can not run Backup successfully--it always says there is not enough room--no matter how much there is (and I have a LOT). Maybe defaulting the Hidden files and folders will keep a "loop" from developing? I have yet to try with these 'proper' settings. I have read that the reserved place for the Backup files is rather small, and that increasing it to about 300-400Mb will be plenty of room. So, I made a partition of 1Gb for it to be sure. It is located on another drive in the machine. Perhaps my errant settings have had a negative effect on the Backup procedure. Thank you for your good information and counseling! Cheers! Scott

Get me to the Geek

I know I am late to the dance, but I wanted to commiserate with laserscottman. I don't have a problem with the concept of permissions, but the only way I am able to live with them at this juncture is to hire a tech to come in and fix it.

I'm 63 and I have had every variant of IBM-Based computer starting with the XT. I've brought up more systems than I can remember. But at this stage I have not the patience to run around my townhouse trying to access my data only to be told I don't have permission. The fact that I am writing this says it all. The environment is way too complicated.

Here is the situation. I'm an entrepreneur who has been involved with media ventures, design and production for the last 40 years. I've got a studio rack mount unit with a laptop on the side for mobility. In addition my flat screen TV is hooked up to a media computer. Both studio rack mount and TV computer are equipped with Hauppauge tuners. Also there is a netbook, a couple of cast-off Tosiba Laptops --- still very viable --- and , of course, my smart phone. And two) 2TB Network Drives. Presently I manage a gob of media: audio, stills and video. I want to be able to access all my data in any corner of my system from any of these devices.

There are 3 sets of stereo speakers in the townhouse each equipped with bluetooth receivers. I work until 12 midnight, then hop in bed and preview audio via my phone for one of my ventures.

You think I'm crazy? Completely and totally. Because the only way to keep this ball of wax in check is with a geek. I RETIRE! ...

UNLESS some caring soul out there in cyberspace identifies with my plight and can tell me why it is impossible to access the main hard drive (E:\) on my studio rack mount from ... anywhere!


Every time I try to share I get:

"An error occurred while trying to share E. There are no more endpoints available from the endpoint mapper. The shared resource was not created at this time."

Thank you in advance for your patience with this diatribe. Laserscottman, you struck a chord with me.

Might help

Have any of you tried to copy the files while having a linux live CD loaded? At the very least that will allow you to move them, no questions asked, if not resetting permissions.