New
#31
Best left to default - that way everything should be where it normally is expected to be :) - unless you have an actual need for it to be switched off?
Access denied editing text files to root C drive
-
-
New #32
-
New #33
Lets have a look at the permissions again
ICACLS C:
ICACLS C:\
ICACLS C:\links.txt
(of course - there's always the option of not working in the root folder?? :))
-
New #34
Surrender? Never!!
C:\Users\Me>ICACLS C:
C: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
Andrew\Me:(OI)(CI)(F)
Andrew\HomeUsers:(RX)
Andrew\Me:(RX)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Me>ICACLS C:\
C:\ NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\Authenticated Users:(AD)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(F)
Everyone:(OI)(CI)(F)
NT AUTHORITY\Authenticated Users:(OI)(CI)(F)
Andrew\Me:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Users:(OI)(CI)(F)
Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)
Successfully processed 1 files; Failed processing 0 files
C:\Users\Me>ICACLS C:\links.txt
C:\links.txt Everyone:(F)
Andrew\Me:(F)
BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)
BUILTIN\Users:(F)
Mandatory Label\High Mandatory Level:(I)(NW)
Successfully processed 1 files; Failed processing 0 files
-
New #35
Ah - a man (?) after my own heart :)
Too many beers tonight - if you haven't heard in 24 hrs, SHOUT!
:)
-
New #36
I need to test something...
please create a file on your desktop and then Move it to the root (do NOT copy it!)
then run ICACLS on it, and post the results.
now create a new file directly in the root folder and run ICACLS on that.
Try modifying both files - what happens?
-
New #37
Ok i was able to make a text file and move it over to the C: drive. I was able to modify across network.
C:\Users\Me>ICACLS C:\test2.txt
C:\test2.txt NT AUTHORITY\Authenticated Users:(I)(F)
Everyone:(I)(F)
Andrew\Me:(I)(F)
BUILTIN\Administrators:(I)(F)
NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Users:(I)(F)
Successfully processed 1 files; Failed processing 0 files
When i tried to make a text file on the C: it gave me this error message.
-
-
New #39
The results you got are pretty much what I expected.
The problem is that the C:\ folder has that odd permission "Mandatory Label\High Mandatory Level
OI)(NP)(IO)(NW)"
This means that you require local Admin permissions to create a new file there.
the NP means that the permissions are inherited by objects created in the C:\root - but the permissions don't propagate further down the hierarchy.
Moving a file into the folder, it brings its own set of permissions with it, and doesn't inherit the root permissions in the same way, so modification is allowed.
So the solution would appear to be to ensure that whatever file you need to use is created elsewhere, and then moved into the folder, at which point you should be able to modify it at will :)
(If not - move it out of root, modify it, then move it back!)
I've been unable to remove or modify that permission in my VM
-
New #40
Hmmm that sucks. I thought we were getting close to solving this.
Quote
Related Discussions