Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Disable or Reset Access Control

29 Oct 2012   #1

Win 7 Professional 64bit
Disable or Reset Access Control

Is there a way to disable or reset the Access Control List 'subsystem' - not the User Account Control, I'm cool with that.

First up - I am the only user of my computer, no other person has access to it, and I am not connected to any network other than the Internet. So I have no requirement for ACL's - there's only one account (Administrative) - who should have permission to access everything.

Please don't give me a lecture on security. In my mis-spent youth I was a system programmer for large corporations. I am quite happy to admit that I inadvertently did something to cause this annoyance - but if I knew what then I would undo it.

if I move c:\users\<myaccount>\My Documents\mydoc.txt to c:\mydoc.txt it will have a security lock showing, yet I can, read, write, copy, move and really delete the file

if I copy c:\users\<myaccount>\My Documentsmydoc.txt to c:\mydoc.txt it will NOT have a security lock showing

Gradually I am noticing more and more of these security icons appearing, they don't prevent me doing anything access wise - read/write/delete etc. But they do hide other icon overlays that I really would like to see - symlink, junction, tortoise SVN to name a couple

I've tried taking ownership of the drives and folders - makes no difference. The only way I can get rid of the lock icon overlay is to give Everyone full control over the item with the lock.

I thought of giving Everyone full control over the C: drive - but I get the error message in the attachment - which suggests I probably ought not do that.


Attached Images
Disable or Reset Access Control-capture.jpg 
My System SpecsSystem Spec
29 Oct 2012   #2

Windows 8 Pro x64

Funnily enough I am fighting this sort of issue on Windows 8 which has even further complicated the system permissions.
Yeah, don't give Everyone root access to the drive. You may as well put your system in your router DMZ and change the Administrator password to 'password'.

Are you able to tell me who has ownership of the root directory?

This thread might also be of interest:
Changing owner back to TrustedInstaller
My System SpecsSystem Spec
30 Oct 2012   #3

Win 7 Professional 64bit

Thanks LuzTeTT - why dont MS make all this ACL stuff optional, I understand the need for it in the corporate world - it keeps the IT Security & Audit boys and girls off the street - but a one user PC at home...

The owner of c:\ is Administrators (<myname>-PC\Administrators) - I got that from properties->security->... on the drive - I assume that's the root too.

The owner of c:\users\<myname> is Administrators (<myname>-PC\Administrators)
The owner of c:\users\<myname>\CurrentWork is Administrators (<myname>-PC\Administrators)
The owner of c:\users\<myname>\CurrentWork\TheyYearsAhead.pdf is Administrators (<myname>-PC\Administrators)

So why is it that when I move the YearsAhead.pdf from the CurrentWork directory in my home directory to the root of c: I get these security overlay icons (padlock)

The only User Name is <myname> and its flagged as an administrative account - the Guest Account is disabled

I don't think its the TrustedInstaller stuff, I don't fiddle with the system. I let Windows Update take care of all that. Since XP-SP2 I have accepted everything MS have tossed my way - including the .NET updates that some people complain about - never a had problem.

I just looked at the security settings for my Data E: & 3 USB G: H: & I drives - bit of a shambles, but they ain't the problem. I didn't do the original install & setup - a 'mate' did it.

I just copied the stuff I'm bothered about from my home directory on C: to my data drive ( E: ) - now I've been able to do what I actually wanted to do - create a symlink in the root of c: to my CurrentWork directory - and not get security icon overlays. I can live with that.

So the problem lies with the home directory...

Maybe its time for a fresh install, been thinking about an SSD

thanks pjd
My System SpecsSystem Spec

30 Oct 2012   #4

Windows 8 Pro x64

I don't understand. What was your solution?

From what you've said there isn't enough permissions for the directory. If your name (and Guest) is the only thing in there then that is the reason why there is a padlock.
My System SpecsSystem Spec
30 Oct 2012   #5

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1

Remove the Lock Icon from a Folder in Windows 7 - How-To Geek

security lock is only shown if located in root of drive!
since you moved it (not copied) from a PRIVATE folder only accessible by you permissions remain.
My System SpecsSystem Spec
30 Oct 2012   #6

Win 7 Professional 64bit

@LuzTeTT - I moved the data I was concerned about out of my home directory on the System drive to a directory on my Data drive

Now I can move, copy etc from there to drive C with impunity. And do what I was actually wanting to do - put a symlink to my CurrentWork folder in the root of C without any lock symbols hiding other more meaningful (to me) icon overlays.

Quote   Quote: Originally Posted by Kaktussoft View Post
since you [ME] moved it (not copied) from a PRIVATE folder only accessible by you [ME] permissions remain.
@Kaktussoft - but which ME - ME as vanilla ME, or ME as member of Administrators, or ME as member of Users, or ME as member of HomeUsers - I can understand the need for vanilla ME and ME as a member of Administrators - but this is a single user system so the need for the Users group is moot and the HomeUsers group even more moot (mooter ?), since there's no AwayUsers

That "how to by the geek" refers to a regular user created directory (Backups). I'm dealing with the root of C and my home directory. IMO fiddling with the permissions on those resources is something best avoided. Which I've done, by moving my CurrentWork directory out of my home directory to my Data drive.

Anyway as far as I'm concerned my problem is solved

Thanks for your input - pjd
My System SpecsSystem Spec

 Disable or Reset Access Control

Thread Tools

Similar help and support threads
Thread Forum
How to Disable User Account Control
My situation is that I have a laptop running on Windows 7 64 bit that I was given by my college that is connected to the college's wifi network. I want to uninstall some programs since it is very slow but when I try uninstalling a program, it says that I need the User Account Control ID and...
System Security
Disable CMD, Control Panel, Run question
Hello, I'm currently working on a Windows 7 system for someone but I have a problem/question. The account has 3 accounts, one "systemadministrator", one "administrator" and one "normal user". The normal user MUST not have access to the control panel, not have the permission to use "run" or...
General Discussion
Where is Volume Control ? Mic Enable & Disable
Hi, how to find Volume Control and how to add Mic to the taskbar, i want to enable and mute mic manually but know mic is enable all za time... how to do ?
Sound & Audio
Disable the control panel
I run a server from home and im thinking of giving a few of my very good and trusted staff members access to my server machine but would like to disable the control panel first. can it be done ?
General Discussion
How to Disable User account control (UAC) in Windows 7 "User account control (UAC) a new feature which was introduced in Microsoft windows vista has become more annoying feature. UAC in windows vista is way to protected windows operating system by preventing...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:32.
Twitter Facebook Google+