Denied Access to D:\ drive

[Hakon]

Seems i ****** up my permission settings pretty badly thistime.

cmd is run as admin, and uac is off.

C:\>whoami
troll\hákon

C:\>net user Hákon
User name                    Hákon
Full Name                    Hákon
Comment
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            18.8.2009 12:42:43
Password expires             Never
Password changeable          18.8.2009 12:42:43
Password required            No
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   19.10.2009 01:39:46

Logon hours allowed          All

[B]Local Group Memberships      *Administrators[/B]
Global Group memberships     *None
The command completed successfully.


C:\>takeown /f "D:" /r /d y
ERROR: Access is denied.

C:\>icacls "D:" /grant administrators:F /t
D:: Access is denied.
Successfully processed 0 files; Failed processing 1 files

C:\>

 

[sup3rsprt]

Seems i ****** up my permission settings pretty badly thistime.

and how did you manage to do that?

 

[Flavius]

1.First try through GUI takeownership of drive:Take Ownership of file - Vista Forums

2.If point I fail...Download PsTools PsTools extract from this psexec.exe file and place it in C:\Windows\System32.Psexec let you run processes from SYSTEM account.

for example:if you type in cmd.exe run with administrative previlliges this command:

psexec -s -i -d cmd.exe


it will run second console from SYSTEM account.

You can also run explorer from SYSTEM account

psexec -s -i -d explorer.exe

and again try GUI to take ownership of drive
you can also use your favorite file manager

psexec -s -i -d "path to favorite any good file menager"

 

[moadip]

i had the same issue
i clicked with the right mouse button then navigate to the security tab, then the advanced button on the right bottom, then the owner Tab, edit and there click on your user account dont forget to check the box on the left bottom, the last step is to confirm with OK, and there you have your permissions set to your account.

 

[Hakon]

Thanks for all the replies, i took the laptop to the freindly local computershop and they had a microsoft professional look at it, and he said there is no way to revert what i did (set denie permissions to all Users that are members of the "Users" group). i can now access all subfolders of the D:\ drive (eg. D:\Software) but not the D:\ itself. here is a copypaste from the icacls D: command:

C:\>icacls D:
D: BUILTIN\Users:(OI)(CI)(N)
   BUILTIN\Users:(F)
   TROLL\Hákon:(F)
   BUILTIN\Administrators:(F)
   NT AUTHORITY\SYSTEM:(OI)(CI)(F)
   BUILTIN\Administrators:(OI)(CI)(F)
   Everyone:(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\>

if there is any l33t h4x0r out there that can possibly help me fix this(eg. rebuild the whole ACL, delete all acl entrys for that drive)...id be thankfull, otherwise im just copying 200GB of data to my external drive and re-partitioning the drive

@ moadip:
i dont have the "Security" tab anymore

@ Flavius:
thanks for the PsExec tool, its awesome, but i cant run explorer as system(i can, but i cant open a window as system, it just runs as the current user)

@ sup3rsprt:
i....dont remember, well, i set denie permissions to all normal users...and something else

 

[logicearth]

Probably best to save what you can from the drive then delete it. As well as never mess with permissions again... o.o Using DENY permissions need to be done with consideration and careful planning because DENY takes precedence over ALLOW.

 

[Flavius]

@ Flavius:
thanks for the PsExec tool, its awesome, but i cant run explorer as system(i can, but i cant open a window as system, it just runs as the current user)

So run from SYSTEM account any external file menager with security tabs for example Total Commander.From this kind of started program you must have access to security tabs from System account not your own.I often do this kind of things.

EDIT

@ moadip:
i dont have the "Security" tab anymore

Navigate to key HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Policies\Explorer and make sure you don't have string Nosecuritytab <-if you have this string remove it +restart

 

[Hakon]

How do i do that to a drive in TC ? i figured it out for folders. Select a folder > File > Properties > security tab

 

[Hakon]

Nvm, i figured it out

 

[Flavius]

How do i do that to a drive in TC ? i figured it out for folders. Select a folder > File > Properties > security tab

For drives is bit different.Navigate to left upper corner with drive letter,rightclick>>Properties (image)

 

[Hakon]

Aaand it has been solved! thank you all for the replies, and tanks Flavius for the solution!

 

[Nicodemus86]

Hi Guys,
I have exactly the same problem as Hakon, only, I still cannot access my drive trough TC. Can you help me find the solution that worked for you?

I ran TC via PsExec as you suggested, but My Total Commander still returns Access Denied when I try to get the properties of my F:/ Drive.

What I did was delete all user rights and then click Apply. I was planning to recursively set all rights to "Everyone" after that. Stupid mistake ofcourse.

Any way to bring my files back?

 

[Flavius]

Try unmount partition (remove partition letter) +restart and next mount it again in diskmgmt.msc

http://www.sevenforums.com/tutorials/82994-drive-letter-add-change-remove-windows-7-a.html

 

[Hakon]

Try using cacls to set permissions in a NT_AUTORITY\SYSTEM elevated command prompt, using PsExec