How to change Win 7 folder permissions on a linux PC?

[sst61]

Done the blind log in a number of times, nothing happens.

Yes I can get to recovery, repair cant fix, restores are not available (were there are many). Command prompt works and have run some commands but no fix.

 

[GokAy]

Perhaps try to set auto login from within Windows 10? You should be able to load the HKLM hive and change the registry of Win7.
Option 2 of http://www.sevenforums.com/tutorials/377-log-automatically-startup.html
Also check (while reg is already loaded)
HKEY_Local_Machine\Software\Microsot\Windows NT\Current Version\Winlogon to make sure 'shell = explorer.exe'

 

[sst61]

Good idea but no access to RUN or anything else.
Do you know of any utility that can read and modify a windows registry? If there was one I could run it in 10 and load up 7's reg.

 

[GokAy]

In Windows 10 run: regedit
Select HKEY_LOCAL_MACHINE and menu "File" - Load Hive
For HKEY_LOCAL_MACHINE \SOFTWARE - browse to Win7 partition - Windows\system32\config\software
Give any name you want for the loaded hive.

Check explorer.exe key and set auto login. Close regedit and restart in Win7.

I would also check Run and RunOnce sections for HKLM (Software-Microsoft-Windows-CurrentVersion), and delete anything that doesn't look familiar after a Google search. (This would best help in case of an infection though) Of course take note of what you have deleted, screenshot or copy paste to a text file etc.

 

[sst61]

Just in the middle of Regedit as you propose. I have it open and am wondering now that I have loaded my old Win 7 reg into Local Machine, now I have a new hive called "Win 7 local Machine under my win 10's Local Machine hive. So do I delete this key before I close regedit or what - I am concerned if I close Regedit before deleting the win 7 hive it may mess up my win 10??

Please instruct what to do after I have made my changes to the old registry.

Thanks,

 

[GokAy]

No, just close regedit if there is no unload hive in the menu.

 

[sst61]

OK, I have made no changes, Shell has the correct setting i.e. Explorer.exe, so no change there. Anything else?

 

[sst61]

I was trying something else earlier. boot in to repair of Win 7, command prompt to try to set the user Sean full admin rights:

cacls I:\Users\Sean /E /T /C /G Sean:F

But I am getting this error: no mapping between account names and security ids

I am guessing this should give admin rights to Sean, which i am thinking maybe hasnt got anything although it should.

 

[GokAy]

Check these too:

I would also check Run and RunOnce sections for HKLM
(Software-Microsoft-Windows-CurrentVersion), and delete anything that doesn't
look familiar after a Google search. (This would best help in case of an
infection though) Of course take note of what you have deleted, screenshot or
copy paste to a text file etc.

Also:
Option 2 of Log On Automatically at Startup

The cacls command may be failing if you have renamed the account sometime in the past.

 

[sst61]

Run, has nothing unusual.
RunOnce, has no entry
- so made no changes to the file.
Had a look at auto login but the auto login key wasnt present in the key and I didnt want to create it. On my win 7 I didnt have a password to get in, that could be left blank I guess, wanted domain to log in, blank... so I didnt create any.

But it is good to know I can open win 7' registry which is good to know, learnt something.

I was hoping I could give admin rights to Sean (user folder) to maybe force it to remember the user, I am still convinced it is to do with windows booting but once in User folder, cannot find a valid user to log in to - when I originally caused the problem by changing User permission by allowing 10 to change the permission to grant me access to explore the files. I suppose if I could create a new user, then maybe win 7 would log in then I could deal with other profiles locally.

Thanks for your help anyway...

 

[sst61]

OK. Just tried to reboot in to 7, I now get bluescreen of death every time in Safe or normal modes, too fast to catch the code. Thats despite not changing anything in the registry - odd. On 7 I used to have a little utility that I would use to find the log and read to try to see what the dode was.
I see if I can find the util and see if I can remember where the log file is created...

 

[sst61]

Funny, the drive has become inaccessible again... so not possible to access the files in explorer.
Also. right clicking on the drive (in 10), the Security tab has disappeared!!

isnt that odd - no change to registry and there is a security issue again - I have a safe partition image of the drive that I can always revert to, but i think I will try one more reboot and if still the same then I will run the cacls commands that got the access back again.

 

[GokAy]

In recovery environment try run in cmd:
net localgroup Administrators Sean /add

Here is some commands I keep handy:

Users/Groups from CMD:
wmic useraccount get name,sid - return account SIDs
net user          - return users
net localgroup   - return groups
net user Administrator /active:yes - enable Admin account
net localgroup Administrators [UserLoginName] /add - add user to Admins local group
net localgroup Users - list accounts in USers group

 

[GokAy]

For not auto-restart after a BSOD:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl

AutoReboot DWORD

0 = Disable
1 = Enable

To configure mini-dump http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

 

[sst61]

Sorry, I have access to the drive now. Round one boot it wanted to do a disk check, I guess due to a couple of crashs in 7, I said no to check and I guess it didnt like it and didnt give me access to the drive. Boot 2, I let it scan and now I have access.

You are full of nice handy commands! Thanks.

 

[sst61]

Reboots in to 7 normal = screen and mouse - as before
Safe Mode = Crash whilst loading the list of things to load - as before.

cant find MEMORY.DMP anywhere.

 

[GokAy]

You may need to configure to enable small memory dumps. Option 2 of http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html. You can download the appropriate reg file and right click edit. Then manually set the keys/values after loading the hive.

All of the hives in case you wish to pursue this:
HKEY_LOCAL_MACHINE \SYSTEM : \system32\config\system
HKEY_LOCAL_MACHINE \SAM : \system32\config\sam
HKEY_LOCAL_MACHINE \SECURITY : \system32\config\security
HKEY_LOCAL_MACHINE \SOFTWARE : \system32\config\software
HKEY_USERS \UserProfile : \winnt\profiles\username
HKEY_USERS.DEFAULT : \system32\config\default

 

[sst61]

Thanks for the links & keys GoKay but win 7 was set up to do a memory dump and had done so in a couple of occasion and I had checked the file, but it just isnt there now. I am guessing it isnt creating one, not going far enough to get to write?
Safe mode crash is a complete uncontrolled, no input works crash with random coloured 1 horizontal line across the top of the screen. I dont think it gets a chance to write a file? only reset button works.
normal mode, there is no crash so no dump?

 

[GokAy]

Possible permissions are interfering with dump creation. Can you see owner with cacls? Windows and Program Files (both x86 and x64) should be TrustedInstaller.

 

[sst61]

Please see below permissions. cacls would not do Program Files, it referred me to use icacls but couldnt get that to do it either, dont know the exact command.


Q:\>cacls users
Q:\Users NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
NT AUTHORITY\SYSTEMOI)(CI)(ID)F
MAINLAND\SeanOI)(CI)(ID)F
BUILTIN\AdministratorsOI)(CI)(ID)F

Q:\>cacls users\sean
Q:\users\Sean EveryoneOI)(CI)F
NT AUTHORITY\SYSTEMOI)(CI)F
BUILTIN\AdministratorsOI)(CI)F


Q:\>cacls windows
Q:\Windows NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
NT AUTHORITY\SYSTEMOI)(CI)(ID)F
MAINLAND\SeanOI)(CI)(ID)F
BUILTIN\AdministratorsOI)(CI)(ID)F