Security Permission Problems

[SlasherIT]

Hi,

I have a WD 1TB External HDD plugged into my Windows 7 Home Premium 64 bit. It has a lot of security permission issues, such as most, if not all my files have a security lock icon on it. Every time I try to open a folder, I get the error message



It has all sorts of other security permissions issues. I have even used the Take Ownership command which has never failed me before, but it failed this time. I can access the files, but first of all, I have to be an admin. Failing to be admin results in files not being able to be accessed. This problem is present on any computer I plug my external HDD into. I have tried many computers and laptops. I would appreciate the help. Thanks. Oh, btw, my HDD is formatted as NTFS.

Slasher

 

[SlasherIT]

Anyone?

 

[Golden]

Hi,

Has this external HDD always had these issues?

When you take ownership, you still need to go and change the permissions. Did you try that too?

Just for clarity, see these tutorial and take note of the yellow TIP box:

http://www.sevenforums.com/tutorials/1911-take-ownership-shortcut.html

And this is the permissions tutorial:

http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

Regards,
Golden

 

[Bill2]

Try setting the permissions to Everyone.

http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

 

[SlasherIT]

Hi,

I tried adding the permissions to Everyone for a folder.

For example, I have a folder with a lot of folders with a lot of files in them. So if I try and change the permission for the parent folder to Everyone with Full Control, and I tell it to also apply to subfolders and its files, it says it does that, but when I right-click and check the properties of a subfolder, it shows the Everyone group, but the Everyone group doesn't have Full Control, or Read and Write, stuff like that. It's just empty, no checkboxes are ticked. If I do it individually folder by folder, it works, but when I copy in new folders, the permissions for Everyone will be messed up. Help would be appreciated.

Thanks,
Slasher

 

[Jacee]

You may need to edit the registry .... be sure to back it up first!

Now, see if you can gain access using group edit (It's not available in Win7 home Premium) by following instructions here:
Can i add local users and groups into windows 7 home premium os

 

[SlasherIT]

I'm really sorry if I'm acting thick, but I don't know what I am supposed to do. I have Windows 7 Home Premium btw.

 

[Barman58]

1. Enable and log in as the built in hidden administrator
   
2. on the root of the drive take ownership for your actual user name and apply
   
3. on the advanced permissions tab ensure that the "apply to folders & files" is not selected remove all permissions and set the permissions that you require for the whole drive (include full rights for the administrators, system and your own account)
   
4. For each of the sub folders under the root in advanced permissions select the "apply to folders & files" and the "replace with inherited permissions" are checked apply and confirm the action.

You may get errors - if so make a note of this location and repeat the actions in 3 above to correct corruption.

If you have issues with system information folders use the system options to turn off system protection temporarily to allow you the remove them.

make sure you give the hidden admin a strong password, record this and re-hide it for the next emergency

 

[karlsnooks]

I've shown how to take ownership.

Now I'l show you how to give yourself full, in other words, all permissions to the folder or file of which you took ownership.

To do this you will run CMD as adminiistrator and use the ICACLS command..

Now where you see those blasted smilies, just put a colon followed by a left parenthesis

DISPLAYING AND SETTING PERMISSIONS USING ICACLS​

In the following examples, the user is KARL
You substitute your user name.

/grant:R grants the user access rights.
The permissions replace any previouly granted explicit permissions.
Without :R, the permissions are added to any previously granted explicit permissions.

The (F) specifies FULL, in other words, all Permissions.


DISPLAY PERMISSIONS OF CURRENT FOLDER
ICACLS .
SET PERMISSIONS OF CURRENT FOLDER for user KARL to Full
ICACLS . /GRANT:R KARLF)

DISPLAY PERMISSIONS OF CURRENT FOLDER’S CONTENTS
icacls *
SET PERMISSIONS OF CURRENT FOLDER’S CONTENTS for user KARL to Full
icacls * /GRANT:R KARLF)


DISPLAY PERMISSIONS OF CURRENT FOLDER, OF ITS CONTENTS AND OF THEIR CHILDREN
ICACLS . /T
SET PERMISSIONS OF CURRENT FOLDER, OF ITS CONTENTS AND OF THEIR CHILDREN for user KARL to Full
ICACLS . /GRANT:R KARLF) /T

DISPLAY PERMISSIONS OF CURRENT FOLDER’S CONTENTS AND OF THEIR CHILDREN
ICACLS * /T
SET PERMISSIONS OF CURRENT FOLDER’S CONTENTS AND OF THEIR CHILDREN for user KARL to Full
ICACLS * /GRANT:R KARLF) /T

 

[karlsnooks]

OK people,
I keep forgetting. Where is the setting to turn off the durn translation of colon parenthesis to smilies so that I can enterr a colon followed by parenthesis without getting those childish icons.

 

[SlasherIT]

Please excuse me, I am not very good at security permissions, but I am kind of confused as to what to do (sorry).

 

[karlsnooks]

Several ways, for several different cases, have either been explained or a link given to the relevant SevenForums tutorial.

Did you log in as an administrator?
Did you take ownership? Yes or No.

To change permissions, you must be the owner of the folder.

 

[SlasherIT]

Am i logged in as an administrator? Yes. Always.

Have I tried to take ownership? Yes. Did it work? Nope.

What should I do next?

 

[karlsnooks]

TAKEOWN​

Make an administrator owner of a file​

1. Go to an elevated command prompt, that is,
WIN key | type cmd.exe | right-click on cmd.exe in the list shown | click on Run as administrator
2. type Takeown /F filename and hit Enter where
filename specifies the filename or directory name pattern.
Wildcard "*" can be used to specify the pattern. sharename\filename allowed

Example: take ownership of a file named MyLostfile in C:\Documents
WIN key | type cmd.exe | right-click on cmd.exe in the list shown | click on Run as administrator
Type:
cd /D %userprofile%\Documents and hit Enter
Takeown /f mylostfile and hit Enter

Example: take ownership of drive I and every folder and file therein:
Type: takeown /F I:\ /R
the /R parameter specifies to “recurse”

Example:
Give ownership to the administrator group
Give ownership to all files and file in subfolders of specified folder
TAKEOWN /Fc:\Documents /r /a



NOTE:
TAKING OWNERSHIP IS OFTEN NOT SUFFICIENT
IF YOU CAN NOT USE THE FILE, THEN GIVE YOURSELF FULL PERMISSION.
YOU CAN GIVE YOURSELF FULL PERMISSION WITH EITHER WINDOWS EXPLORER OR THE ICACLS COMMAND.

 

[SlasherIT]

Hi,

I tried doing Take Ownership with cmd how to told me to do so, but it hasn't fixed the problem. What next?

 

[karlsnooks]

Now that you are the owner, you can give yourself full permissions to the file:

Log in as an administrator.
WIN | type CMD.EXE | do NOT hit ENTER | right-click on cmd.exe in the list above the search box | click on Run as administrator

Now navigate to the folder with the troublesome file.
Let's say the file is called humbug.xyz
type following
ICACLS humbug.xyz /Grant:R administratorsF)
That will give administrators full permissions which means they will be able to delete.

Sorry about the blasted "smiley". That's a "feature" of the forum software that is a real pain.
that should read administrators followed by a colon followed by a left-parenthesis then F then right-parenthesis

 

[SlasherIT]

Hi,

If I do this though, sure it might fix it for my account, but if I try the external Hard Drive on another computer, I might still have the problem. I would like my external Hard Drive to function like a regular USB flash drive, where the user 'Everyone' has FULL privileges. Can you help me achieve this?

 

[karlsnooks]

One step at a time.
First take ownership
Second give yourself full permissions.
When finished, go back to running cmd as administrator under your administrator account.
Navigate to where the file is.
Type following:
icacls humbug.xyz

Post the output in your next post.

If you've got this part down, then we can go to bigger and better things.

You can always use the excellent tutorials here from Brink on taking ownership and setting permissions.

 

[SlasherIT]

Well, all the contents in the drive are kind of messed up permissions-wise. I would need to do this for the whole drive. How would i do that?

 

[karlsnooks]

Show me that you can correctly take ownership and grant full permissions are one file. Then we will go to bigger and better things.