New
#11
Hi Roy,
One thing I noticed is -
For windows directory in C: drive, following is ACL setup
C:\>cacls windows
C:\Windows NT SERVICE\TrustedInstaller:F
NT SERVICE\TrustedInstallerCI)(IO)F
NT AUTHORITY\SYSTEM:C
NT AUTHORITY\SYSTEMOI)(CI)(IO)F
BUILTIN\Administrators:C
BUILTIN\AdministratorsOI)(CI)(IO)F
BUILTIN\Users:R
BUILTIN\UsersOI)(CI)(IO)(special access:)
GENERIC_READ
GENERIC_EXECUTE
CREATOR OWNEROI)(CI)(IO)F
But for winsxs directory, the acl setup is -
C:\Windows>cacls winsxs
C:\Windows\winsxs NT SERVICE\TrustedInstallerOI)(CI)F
BUILTIN\AdministratorsOI)(CI)R
NT AUTHORITY\SYSTEMOI)(CI)R
BUILTIN\UsersOI)(CI)R
I came across a note on another forum, where the SFC was failing (with the same error that I was getting) because the Administrator did not have right access for winsxs and PendingDeletes and PendingRenames directories in winsxs.
Do you know, in general what should be standard ACLs for these directories?
Warm Regards,
Ravi