Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 Permissions - How do they work?

31 Aug 2014   #1
CriticalError

Windows 7 Ultimate 32
 
 
Windows 7 Permissions - How do they work?

I have Windows 7 Ultimate and I an quite confused on how the permissions work.

Basically there is an XML file (Windows Image Backups). And only Administrators and Backup operators have full access I am in the Administrators group why do I still have to specify my self individually?


My System SpecsSystem Spec
.
31 Aug 2014   #2
Alejandro85

Windows 7 Ultimate x64
 
 

As far as I understand, the permissions work as expected, and it's due to UAC that you're seeing tht behavior.

When UAC is enabled and you login with an administrator user, Windows silently deprives you of the administrator group membership, efectively leaving yourself as a standard user, that's why giving permissions to the administrators alone will NOT give permissions to use the file.
Whe you use "Run as administrator" option, after accepting the UAC prompt, the program you start gets the full administrator membership as you expect, but ONLY for that program, so the solution in your case would be to run the program that uses the files as administrator.

As a sidenote, that's why normally you can read from program files but not write without elevation. In that case, administrator group has full control, but regular user groups only has read-only access.
My System SpecsSystem Spec
01 Sep 2014   #3
andrew129260

Windows 10 Pro
 
 

Quote   Quote: Originally Posted by Alejandro85 View Post
As far as I understand, the permissions work as expected, and it's due to UAC that you're seeing tht behavior.

When UAC is enabled and you login with an administrator user, Windows silently deprives you of the administrator group membership, efectively leaving yourself as a standard user, that's why giving permissions to the administrators alone will NOT give permissions to use the file.
Whe you use "Run as administrator" option, after accepting the UAC prompt, the program you start gets the full administrator membership as you expect, but ONLY for that program, so the solution in your case would be to run the program that uses the files as administrator.

As a sidenote, that's why normally you can read from program files but not write without elevation. In that case, administrator group has full control, but regular user groups only has read-only access.
That is well explained and correct
My System SpecsSystem Spec
.

02 Sep 2014   #4
CriticalError

Windows 7 Ultimate 32
 
 

Can I just turn UAC off? Any harm in doing so...?
My System SpecsSystem Spec
02 Sep 2014   #5
Alejandro85

Windows 7 Ultimate x64
 
 

Sure you can, but it's highly NOT recommended, because you get every program you use to have full access to the system and that has security implications you may not prefer to face.
It's much better to just run the program in question as administrator and give it only full access when it really needs it. Or as you did, give your user (or the users group) permission to access the needed files, without the need to trash UAC as a whole.
My System SpecsSystem Spec
02 Sep 2014   #6
andrew129260

Windows 10 Pro
 
 

Quote   Quote: Originally Posted by CriticalError View Post
Can I just turn UAC off? Any harm in doing so...?

Sure, would you also like to go back to windows xp?

Because that is basically what you are doing when turning uac off.

UAC is one of the main features of security in ,vista, windows 7, 8. It protects all kinds of things in the OS.
My System SpecsSystem Spec
02 Sep 2014   #7
LMiller7

Windows 7 Pro 64 bit
 
 

The purpose of UAC is to improve security.

By default the software you run inherits the rights and privileges of the account you are using. If that account gives you full and unrestricted access to everything, the software you run will also have those rights. If you are using a limited account that software will also be limited. In particular it will be unable to modify or delete system files or change system settings. Someone using such an account can't do much harm to the system.

In XP and older logging in with an admin account gave you almost full and unrestricted access to whatever you wanted with no questions asked. That was very convenient. But that convenience came with a price. If you were to accidentally run malicious software, such as that downloaded and run without your knowledge by a web browser, that software also has full and unrestricted access to the system with no questions asked. That is very good for the malware authors, but bad for you.

The default behavior of Vista and later changed all that. When you log in with an admin account you initially only have the rights of a standard user. That is quite confusing to inexperienced users but greatly enhances security. That malicious software that was unknowingly downloaded now only has the rights of a limited user. All the doors to the sensitive areas of the operating system are now locked and it it does not have the key. That malicious software is pretty much helpless.

Sophisticated malware can evade UAC but it is hard. UAC doesn't provide absolute protection but it is another layer of protection. In the current and future state of malware you can use all the protection that is available.
My System SpecsSystem Spec
07 Sep 2014   #8
Alejandro85

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by LMiller7 View Post
Sophisticated malware can evade UAC but it is hard.
Actually, Microsoft made it easy to bypass UAC by introducing a critical bug in Windows 7:
Windows 7 UAC whitelist: Code-injection Issue (and more)

In the default configuration, UAC can be bypassed at will by any program that knows the trick (published in 2009). It's not trivial, but not rocket science certainly

Other than that, I second your words!
My System SpecsSystem Spec
Reply

 Windows 7 Permissions - How do they work?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Windows cannot access the ... you may not have the ... permissions
So here I am. Almost finished with re-installing AI Suite II. What a nightmare that was. Took me hours to figure out what was going on when the setup did not start properly. Still after a long time I managed to figure it out on my own without asking help. But for this I think I do need help. ...
Software
Windows won't boot, startup won't work, safe mode dosent work
Today my laptop was working fine but then I shut it down and turned it on again, when I turned it back on, after the Starting Windows and windows logo disappear I get a blue screen for half a second then my computer try's to reboot, I've tried to use startup reapir but u just have a crusor with a...
General Discussion
Windows 7 Permissions
Hi everyone, I have a Macbook Pro running Win 7 Ultimate. I'm the sole user on this device as it's my own personal laptop. What I'd like to know is how I can gain ultimate control so I can access all files without any restrictions. Is this possible?
General Discussion
windows 7 permissions
i am unable to set permissions so that i can install programs or exe's in either administrator or user. H E L P.............
Software
Windows 7 Permissions
Hi All Its my first time posting her and of course I need some help please. I am using Win 7 Home Premium 64 bit. My problem started when I tried to backup my Firefox Profile Folder and my backup software would not backup one specific file ie "signons-sqlite". This file is the login...
System Security
Applications that work with Vista should work with Windows 7 , there are exceptions.
Microsoft ranks Windows 7 features most likely to affect app-compatibility | All about Microsoft | ZDNet.com While Microsoft officials have said that applications that work with Vista should work with Windows 7 , there are exceptions. The 45-page “Windows Application Quality Cookbook”...
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:40.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App