Help! I locked my data drive!

[Iris3]

Hi, looks like I am in some trouble. I was trying to limit access to my hard drive (D on the guest account, so i logged in as admin and went to security on properties and denied full control and users. But now even my admin account can't access the data drive. it says access denied. and the security tab is not there any more when i click properties. How can i fix this problem?
ps. i have two hard drives (NTFS both) and the one i locked is not C:, but another i set aside to put data in.
Thanks in advance!

 

[richc46]

See if it works in safe mode, using this administrator account
http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html?filter[2]=User Accounts

 

[Iris3]

not it didn't. is there any other way?

 

[logicearth]

On what permission entries did you put DENY Full Control on?

You might try running these from an Administrator command prompt:

takeoen /F [Drive]: /A
icacls [Drive]:/grant Everyone:(F)

Maybe work may not.

 

[Iris3]

cloud is my computer name...
so i denied full control on Users(CloudWUsers).

 

[Iris3]

takeoen /F [Drive]: /A
icacls [Drive]:/grant EveryoneF)
command promt denies them saying that it doesnt recognize it...the drive letter for the hard drive i locked is D:.

 

[JDobbsy1987]

I hope someone can help you resolve this issue but as you have probably learned it is best to stay away from the 'Deny' permissions.

It is very rare that the 'Deny' permission is required, usually just not adding a user or removing a user from the security group will be enough.

This may help with understanding NTFS permissions (see the Allow vs. Deny Permissions)
NTFS Permissions Overview & Restrictions.

Hope this is sorted for you soon.

Regards,
JDobbsy1987

 

[logicearth]

You are going have to wait for me to set up a test machine to find a solution. Cause there is no way I'm going to try messing with deny permissions on my production machine.

 

[JDobbsy1987]

I hope someone can help you resolve this issue but as you have probably learned it is best to stay away from the 'Deny' permissions.

It is very rare that the 'Deny' permission is required, usually just not adding a user or removing a user from the security group will be enough.

This may help with understanding NTFS permissions (see the Allow vs. Deny Permissions)
NTFS Permissions Overview & Restrictions.

Hope this is sorted for you soon.

Regards,
JDobbsy1987

If this isn't sorted by tomorrow then i will ask the NT guys a work for you and come back with any suggestions.

You are going have to wait for me to set up a test machine to find a solution. Cause there is no way I'm going to try messing with deny permissions on my production machine.

Wise Decision

 

[Iris3]

logicearth, how long would it take for you to set up the test machine? and JDobbsy1987, pls do. there are projects and other documents i need asap that are in that drive...

 

[JDobbsy1987]

logicearth, how long would it take for you to set up the test machine? and JDobbsy1987, pls do. there are projects and other documents i need asap that are in that drive...

Just out of curiosity, has this been done in a domain or workgroup environment?

 

[Iris3]

How to unset administrator deny permission?
basically same situation except for his computer hardware facts.

 

[Iris3]

Just out of curiosity, has this been done in a domain or workgroup environment?[/QUOTE]
not sure what "domain" or "workgroup environment" is...

 

[JDobbsy1987]

Just out of curiosity, has this been done in a domain or workgroup environment?

not sure what "domain" or "workgroup environment" is...[/QUOTE]

Is this on a personal computer at home?

 

[Iris3]

Yes.

 

[JDobbsy1987]

Ok,

Just to add to that you can check Workgroup/Domain and what the name of the name of the Workgroup/Domain is by Clicking on Start >> Right Click Computer >> Click Properties...

It will tell you whether you are on a domain or workgroup... however looking at your system specs you are running a home edition (it is not possible to add a home edition to a domain)

 

[Iris3]

it says workgroup. i tried takeown /F D:\/A but it says that access is denied.

 

[logicearth]

Alright download this:
Run As System for Windows 7 - Run programm as system account - Windows 7 Download
(Already sent the file thought a virus scan: http://www.virustotal.com/file-scan...e27faf2a5fb10d7173b933aff669f52aba-1284938092 )

You are then going to run the .exe by using "Run as Admin".
Type in "cmd" this will open a command prompt.
Then type into the command prompt:

icacls Z:\ /remove:d Users
icacls Z:\ /grant [YOUR USERNAME HERE]:(F)

Next time you have the urge to change permissions of things come to us first.

 

[Iris3]

Thank You so much! icacls D:\ /remove:d Users worked!

 

[JDobbsy1987]

Big to logicearth

Glad you have got the solution you were after