Help Classic Menu - Shortcuts attributes - BIG mistake

Last Post: PARTIAL SOLUTION :sarc::sarc: - NOW I DID SOLVE IT AS IT SHOULD BE :D:D

What happened:The solution I found worked only for admin accounts. Worse: it lowered security level, because I had to include in the exceptions the *.lnk AND *.exe files, that leaves ALL doors open to malware.
So I went back and did this:

1. Stopped the all programs menu "C:\ProgramData\Microsoft\Windows\Start Menu" form inherint permisions from parent folder.
2. In folders security tab I removed ALL users, leaving only system
3. Asigned ownership to system with full control,
4. Rebooted
5. Again in security tab but on sub folder "programs" I enabled "Include inheritable permissions from this object's parent"
6. Added in permissions as user the Admin group, with full control
7. Added in permissions as user everyone with only Read & execute permissions.

EVERYTHING WORKS NOW IN ALL USERS WITH OUT THE BUGGER PERMISIONS MESSAGE THAT I HAD.

Somehow and going back I believe this is what happened:

I used a 32 bit app (Total Commander) to synchronize all users menu with my (admin) user menu. Maybe that is what broke all the permissions.
When I do the next change in start menus I'll sync with a 64 bit app and see what happens.


Hope this is useful for you guys
Be Cool! :)
 

My Computer My Computer

Computer Manufacturer/Model Number
ASUS M2N32-SLI Deluxe
OS
Windows 7 x64 SP1 - Ubuntu 10.10 x64 - Linux Mint 10 (dual boot + Virtual Box)
CPU
AMD Phenom II 945
Motherboard
ASUS M2N32-SLI Deluxe
Memory
Kingston DDR2 800 6GB
Graphics Card(s)
NVidia GForce 8600GT
Sound Card
OnBoard SoundMax Integrated HD
Monitor(s) Displays
LCD Samsung SyncMaster 2033
Screen Resolution
1600*900
Hard Drives
1.0 TB RAID 0 + 2 internal sata 320 GB + external e-sata 500 Gb
PSU
650
Internet Speed
cable 3mb
For others: extended solution

Dear ElQuia,

I am glad to read that your issue is solved.
I had the same issue as you, but unfortunately your solutions didn't work for me, so I had to dig further. I think I have found the solution and I am writing this post for those people out there that are still struggling with the same (or similar) issue.

To summarize the issue:
I use Windows 7 (x64) and I don't like the Windows 7 Start Menu.
So I looked for an alternative and the best I could find was:

Get Windows XP Styled Classic All Programs List in Windows Vista and 7 - Tweaking with Vishal

This worked OK at first, but after one or two days every shortcut in the menu wouldn't immediately start the appropriate program. First I would get a pop-up with the title 'Bestand Openen - Beveiligingswaarschuwing' (this is dutch for 'File Open - Security Warning'), asking me for permission to start the program.

Cause analysis:
I have not been able to determine the cause for this behaviour, but I think the reason might have been that I moved a lot of shortcuts from my personal Start Menu (C:\Users\Systeembeheer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs) to the general Start Menu (C:\ProgramData\Microsoft\Windows\Start Menu\Programs) since the above mentioned alternative Start Menu only shows the contents of C:\ProgramData\Microsoft\Windows\Start Menu\Programs.
I mainly used the 64-bit version of the thirdparty filemanager Q-Dir for this.

Solution analysis:
* Attempt 1:
I tried adding C:\ProgramData\Microsoft\Windows\Start Menu\Programs to
the Intranet Zone in the security settings of Internet Explorer.
This didn't work
* Attempt 2:
I modified the following security settings for the Internet Zone in Internet
Explorer: Set 'Start Applications and insecure files' to 'Enable (not secure)'.
(I hope I translate this correctly from the dutch Windows 7 I run).
This worked, but I didn't like this solution, because it creates a huge security
hole. Advise: don't use this!
* Attempt 3:
I tried (part of) the first solution mentioned above by ElQuia:
- From Start - Run: type gpedit.msc
- Browse to User Configuration / Administrative Templates / Windows
Components / Attachment Manager
- Enable 'Inclusion list for known file types' and add '.exe' to this list.
(NB: alle the other changes mentioned in ElQuia's first solution post above are
not required)
This worked, but again creates a huge security hole. Advise: don't you this
if you don't have to.
* Attempt 4:
I tried the second solution mentioned above by ElQuia, which boils down
to resetting all security settings of all directories from C:\ProgramData\
Microsoft\Windows\Start Menu\Programs down.
Unfortunately this didn't work for me.
* Attempt 5:
So I dug deeper and checked whether the issue might be caused
by settings in NTFS streams on the .lnk or .exe files (see the section Alternate
Data streams on NTFS - Wikipedia, the free encyclopedia and
Streams)
As far as I have been able to determine, this was not the case.

Solution:
Finally I came accross the following site:
How to remove "Open File - Security Warning" window? - Microsoft Windows Vista Community Forums - Vistaheads
And the solution for me proved to be the following steps:

- Click Start and in Accessories find the CommandPrompt
(or click start and type cmd)
- Right click on the found CommandPrompt or cmd.exe and choose
'Run as Administrator'
- Type the following commands (each line followed by <enter>)
CD \ProgramData\Microsoft\Windows\
icacls StartM~1 /setintegritylevel (CI)low
CD Start Menu
icacls Programs /setintegritylevel (CI)low

This worked, so my conclusion is that the issue was caused by incorrect security settings that are not visible from within Windows Explorer on the security tab of a file or a folder, but that are nevertheless relevant for how files are accessed by Windows.
For more info on ICACLS:
Icacls

I hope this helps some people out there that are battling with the same issue.
By the way: Meanwhile I have found a terrific (AND FREE!) alternative to the Windows 7 Start Menu: Welcome to Classic Shell

Keywords: .lnk, shortcut, Windows 7, alternative Start Menu, Favorites
 
Last edited by a moderator:

My Computer My Computer

OS
Windows 7 Ultimate x64
CPU
Intel Core i7 860 2.80GHz
Motherboard
Asus P7P55D Premium
Memory
8GB: 2 x Kingston ValueRam 4GB DDR3 1333MHz
Graphics Card(s)
Asus EAH4890 HTDI 1GB
Monitor(s) Displays
2 Iiyama Prolite 24" B2403WS
Screen Resolution
1920*1200
Hard Drives
Boot: WD VelociRaptor 300GB 3.5" 10Krpm
Data: 2 x WD RE4-GP Enterprise 2TB in RAID-1
PSU
Zalman ZM1000-HP 1000W
Case
CoolerMaster Centurion 5 Black/Silver
Classic Sgell is the best I even seen.

Takes you back to XP days.
 

My Computer My Computer

Computer Manufacturer/Model Number
Cheap $399.00 E-Machine
OS
Windows 7 Pro & Vista Home Premium
CPU
Athlon 64 3800+ (Orleans) 2.40GHz
Motherboard
Winfast
Memory
2GB DDR2 RAM DIMM
Graphics Card(s)
NVIDIA GeForce 8500 GT 512 MB memory HDMI out
Sound Card
creative X-Fi Exteme 7..1 channel
Monitor(s) Displays
Acer V223W 22" widescreen DVI
Screen Resolution
1680x1050
Hard Drives
WDC WD5 500GB
WDC WD25 250GB
PSU
OCZ 550 watt
Case
Gateway
Cooling
2 fans
Keyboard
Dell
Mouse
Sony Vaio
Internet Speed
18MB/s down - .72MB /s up
Back
Top