Adding group to a folders permissions?

[amajamar]

I deleted a user from a folders permissions figuring I could add it back. When I go to do that the "Add" button is greyed out and I can't do it. What am I doing wrong?

Thanks in advance!

 

[richc46]

Just to make sure you are using the correct procedure. Go to the folder, right click, properties, security, edit.

 

[amajamar]

Yes, that is what I am doing. However, when I get there the "Add" and "Remove" buttons are greyed out. When I log onto the account that I changed the permissions on it is all messed up. The desktop background is missing, the icons taskbar icons are gone and I get error messages when trying to open folders.

 

[richc46]

The account seems to be corrupt. Either make a new user account and delete the old or
Try using System Restore a day or two before the problem.

 

[amajamar]

I just noticed that the Edit button that we have discussed has a little shield on it, where it did not before. However if I drill past it other folders under it do not. Will system restore restore permissions?

 

[Bare Foot Kid]

Here's the tutorial about doing a system restore at the link below, just be sure to choose a restore date before the changes.

http://www.sevenforums.com/tutorials/700-system-restore.html?ltr=S

 

[amajamar]

I think I fixed it. I booted into safe mode and then I could restore the permissions there. One more question, when restoring the permissions I got many error messages saying something like "error in app events" or something like that and I just clicked "continue" over and over until it was complete. I don't really know what happened it just seems to be OK.

Any further thoughts?

Thanks.

 

[logicearth]

Any further thoughts?

Further thoughts...do not mess with any permissions of any critical data unless you are absolutely sure you know what you are doing.

 

[amajamar]

I will heed your advice... .

BTW, Safe Mode is good place to fix things... Couldn't get System Restore to function until I ran it from there...

 

[Bare Foot Kid]

I will heed your advice... .

BTW, Safe Mode is good place to fix things... Couldn't get System Restore to function until I ran it from there...

Here's another option in the tutorial at the link below; it mentions resetting passwords but it's a good way in if you're having trouble.

http://www.sevenforums.com/tutorial...t-using-system-restore-windows-7-a.html?ltr=P

 

[richc46]

Glad that we could help and thank you for your thoughts on safe mode. It is because of people like you that this is a great forum. Use our knowledge and share yours.

 

[Bare Foot Kid]

We are glad you've forund a solution that works for you.

 

[amajamar]

Thanks again, all! I'm new to Win7 and have lot's of questions!

 

[richc46]

You are not a quest of the forum, you are family. Use our knowledge and tutorials as much as you require. Feel free to share your knowledge with us, too.

 

[Barman58]

Just a few things that may help in future when dealing with permissions.

Permissions are applied to the actual files and not the Operating system, what this means is that they are written to each file and folder individually and will survive the re-install of an OS or the installation of another OS

Permissions in windows are set to automatically cascade through the folder tree when applied. This results in any permission changes applied to a folder will attempt to be applied to all files and sub folders in the segment of the file tree concerned. It also means that to change or remove permissions it is often required to go up the folder tree to the point where there original permissions were added, although it is often possible to add extra permissions at the point you wish.

When running an administrator account in Windows 7 (or Vista), you actually run as a standard user, if UAC is on.

In order to change permissions you actually have to have a specific permission set for your user on the folders or files, Due to the dual nature of the normal administrator group accounts in win7, (or vista), it is possible that the standard form of the user account will not have this permission whilst the elevated user will.

This permission is part of the full control permissions and is also automatically granted to the owner of the folder or file.

Switching UAC off will automatically elevate the user status, as will running in safe mode, or running as the hidden system administrator.

When cascading the applied permissions down the folder tree it is possible that the system will encounter folders where the user applying the permissions does not have the required Change file permissions Permission, this will cause Windows to produce an error. In these situations it will be necessary to go to the folder and add the correct permissions.

There are various advanced options to control the application of permissions which can break the link between the current folder and it's parent, that may be useful at times.

Basically the application of NTFS file permissions is a complex one that is made more complex by the UAC in Win7 so unless you are certain of the consequences is best to leave well alone. Saying this, the control that the correct use of permissions can provide in a network or multi-user scenario is well worth the effort of learning how they work

 

[Bare Foot Kid]

Thanks for the explanation Nigel.

 

[amajamar]

Just a few things that may help in future when dealing with permissions.

Permissions are applied to the actual files and not the Operating system, what this means is that they are written to each file and folder individually and will survive the re-install of an OS or the installation of another OS

Permissions in windows are set to automatically cascade through the folder tree when applied. This results in any permission changes applied to a folder will attempt to be applied to all files and sub folders in the segment of the file tree concerned. It also means that to change or remove permissions it is often required to go up the folder tree to the point where there original permissions were added, although it is often possible to add extra permissions at the point you wish.

When running an administrator account in Windows 7 (or Vista), you actually run as a standard user, if UAC is on.

In order to change permissions you actually have to have a specific permission set for your user on the folders or files, Due to the dual nature of the normal administrator group accounts in win7, (or vista), it is possible that the standard form of the user account will not have this permission whilst the elevated user will.

This permission is part of the full control permissions and is also automatically granted to the owner of the folder or file.

Switching UAC off will automatically elevate the user status, as will running in safe mode, or running as the hidden system administrator.

When cascading the applied permissions down the folder tree it is possible that the system will encounter folders where the user applying the permissions does not have the required Change file permissions Permission, this will cause Windows to produce an error. In these situations it will be necessary to go to the folder and add the correct permissions.

There are various advanced options to control the application of permissions which can break the link between the current folder and it's parent, that may be useful at times.

Basically the application of NTFS file permissions is a complex one that is made more complex by the UAC in Win7 so unless you are certain of the consequences is best to leave well alone. Saying this, the control that the correct use of permissions can provide in a network or multi-user scenario is well worth the effort of learning how they work

Thank you so much! That was a great explanation!

I posted another thread yesterday with a question of error messages after restoring permissions of a user account. I now can see how those errors could have been caused, however how do you fix them? There seems to be no obvious problems at the top folder, as the correct owner is listed and the standard other users seem to be intact.

As there were seemingly 15 or 20 errors to click through when I made the changes, I couldn't track them all. This was done in Safe Mode, as well.

If you have any further thoughts on how to find and correct folder permission errors on "the tree", so to speak, please let me know.

Thanks so much!

 

[mitchell65]

I will heed your advice... .

BTW, Safe Mode is good place to fix things... Couldn't get System Restore to function until I ran it from there...

Hi Do you run Norton Anti Virus?

 

[Barman58]

Unfortunately the only real way to correct incorrect permissions where they only apply to sub-folders - that is to note the errors during the cascade phase and manually go to the individual folders and correct at that level.

There are tools available within the operating system (under advanced in the permissions dialogue), that allow you to remove the links to the parent folder. It is then possible, (only if you are the owner of the folder or the hidden administrator ), to completely remove all permissions below your current location and then re-attach to the parent folders.

Which ever method you use this is always a complex thing to do especially where previous operating systems or other users have or have had access to the files and folders.

The way that permissions behave can provide a way of correcting permissions.

If you move a folder or file it retains it's existing permissions, however, if you copy the file or folder it takes on the permissions of the folder that it is copied into.

If you are having issues with the User files tree it is sometimes possible to create a new user and then as the hidden administrator copy the user file tree, (everything below the actual user folder, many of which may be hidden/system folders), from the old user to the new user's folder tree thus re-setting all permissions. The problem with this method is the amount of space that you may need to actually perform the copy operation. After the copy operation and the checking of the nw account operationally the old account is deleted.

I have been dealing with complex network/multi-user permissions since the days of NT3.5 so I feel comfortable doing this type of thing.

What I would advise anyone contemplating this is to make a complete system image to another location before you change anything

 

[amajamar]

I will heed your advice... .

BTW, Safe Mode is good place to fix things... Couldn't get System Restore to function until I ran it from there...

Hi Do you run Norton Anti Virus?

Yes, I do. However, it was off when I changed the permissions.

Nigel, as I am exploring the folders where I believe there were errors, I notice that what seems to be missing is the HomeUser account permission. That seems to be consistant with other user accounts with similar folders. My thinking is that the cascade of permisssions may not have been actual errors, as much as a prevention of an error. What is your feeling on this? Also, could you explain the HomeUser and it's impact on the system?

Thanks so much!!