Windows says it won't grant access permission, but it does grant.

drkh

New member
Member
Local time
2:31 PM
Messages
55
I tried to take the following steps to get the "full control" permission on a "System Volume Information" folder for a user account I had created.


right-click on the folder -> Properties -> Security tab -> Edit -> the "Permissions for <object>" dialog appears -> Add -> the "Select Users or Groups" dialog appears -> Enter the user account's name and press OK -> back to the "Permissions for <object>" dialoge -> select "Full control" for the newly added name -> Click on the Apply button


After I clicked on the Apply button, a dialoge entitled "Error Applying Security" appears, stating:

"An error occcurred while applying security information to:

...\<GUID><GUID>

Access is denied."

Behind that dialog, there was another dialog entitled "Windows Security", which states:

"Setting security information on <drive>:\System Volume Information\tracking.log"

I thought maybe Windows didn't like people to mess with such an important folder, and therefore refused to grant the permission. So, I cancelled the front "Error Applying Security" dialog. (There's another Continue button)

At this point, a new "Windows Security" dialogue popped up, saying:

"Stopping the propagation of permission settings leads to an inconsistent state, in which some objects have the settings but others don't. If you made the change by mistake, you should apply the correct change immediately to achieve a consistent state."

In this dialogue, the only choice was to click on an OK button. So, I clicked on it. And the ""Permissions for <object>" was brought back to the front again.

But, surprisingly, I noticed that the user account's name I wanted was entered in the name list, with all the permissions (full control) being granted to it!

As I tested it, the "full control" permission has been effective for that "System Volume Information" folder.

So, why did I get the permission even after Windows had said it would refuse me?
 

My Computer My Computer

At a glance

Windows 7 Home Premium x64 SP2AMD Phenom II X3 720 BEA-Data DDR3 1333 Supreme SU3U1333B2G9-R 2G x4ATI Raedon HD 4290 IGX on AMD SB850 chipset
Computer type
PC/Desktop
Computer Manufacturer/Model Number
self-built
OS
Windows 7 Home Premium x64 SP2
CPU
AMD Phenom II X3 720 BE
Motherboard
GigaByte GA-890GPA-UD3H
Memory
A-Data DDR3 1333 Supreme SU3U1333B2G9-R 2G x4
Graphics Card(s)
ATI Raedon HD 4290 IGX on AMD SB850 chipset
Sound Card
on-board Realtek ALC892
Monitor(s) Displays
Samsung S22D300NY 21.5" wide screen
Screen Resolution
1280 x 720
Hard Drives
WD RE4 WD5003ABYX 500GB SATA2 x2 (RAID-0)
PSU
D.HIGH DHP-400GH-80P 400W
Case
no name
Cooling
Foxconn fan and heater for AMD CPU
Keyboard
Logitech standard keyboard Y-SM48
Mouse
Toshiba Pala Chan
Internet Speed
GPON 300M/100M
Antivirus
AVG AntiVirus Free
Browser
Vivaldi & Firefox
You are looking at the permissions set on the folder. Not on the files which can have a different set of permissions. Clearly setting permissions on those files failed.

...Why are you even messing with the permissions in the first place?
 

My Computer My Computer

At a glance

Windows 10 Pro (x64)Intel Core i7-3930K (3.2GHz - 4.5GHz)4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)Nvidia Geforce GTX 690
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Alienware Aurora ALX R4
OS
Windows 10 Pro (x64)
CPU
Intel Core i7-3930K (3.2GHz - 4.5GHz)
Motherboard
Alienware Aurora-R4 x79
Memory
4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)
Graphics Card(s)
Nvidia Geforce GTX 690
Sound Card
SteelSeries Siberia Elite
Monitor(s) Displays
Dell UltraSharp U3011
Screen Resolution
2560x1600
Hard Drives
Samsung 850 Pro 256 GB, Seagate 1TB Desktop Hybrid HDD, 2x Western Digital 4TB Green HDD
PSU
875W Some Dell PSU <.<
Case
Alienware Aurora ALX
Cooling
Custom Liquid Cooling (EK CPU & GPU blocks) dual EK 480RAD
Keyboard
Logitech G710+ Mechanical
Mouse
Logitech G700s
Internet Speed
Verizon Fios (50 mbps average)
Other Info
Server: Intel NUC D54250WYK: i5-4250U, 16GB, 256 GB mSATA, Windows Server 2012 R2
I tried to take the following steps to get the "full control" permission on a "System Volume Information" folder for a user account I had created......
Why? Why would you do such a thing?


......So, why did I get the permission even after Windows had said it would refuse me?
There are a variety of security settings under that folder. It changed some of them and halted on the ones that it could not change (because you did not do things in the correct order). Having full control of the top level folder does not mean that you have full control of all of the objects under that top level folder.

How do you plan on putting the security settings back?
 

My Computer My Computer

At a glance

W7 Pro SP1 64biti78GBIntel HD Graphics
Computer type
Laptop
Computer Manufacturer/Model Number
Employer provided Dell Latitude
OS
W7 Pro SP1 64bit
CPU
i7
Memory
8GB
Graphics Card(s)
Intel HD Graphics
Hard Drives
crappy SSD
Antivirus
Employer mandated Symantec Endpoint Protection
Browser
Pale Moon 64bit, IE11 64bit & Chrome 64bit
Thank you, guys, for the explanation.

I don't want to do anything in the "System Volume Information" folder. Just curious if I can take over the "full control" of a system folder.

I have restored the security settings by removing the user account's name I had added.
 

My Computer My Computer

At a glance

Windows 7 Home Premium x64 SP2AMD Phenom II X3 720 BEA-Data DDR3 1333 Supreme SU3U1333B2G9-R 2G x4ATI Raedon HD 4290 IGX on AMD SB850 chipset
Computer type
PC/Desktop
Computer Manufacturer/Model Number
self-built
OS
Windows 7 Home Premium x64 SP2
CPU
AMD Phenom II X3 720 BE
Motherboard
GigaByte GA-890GPA-UD3H
Memory
A-Data DDR3 1333 Supreme SU3U1333B2G9-R 2G x4
Graphics Card(s)
ATI Raedon HD 4290 IGX on AMD SB850 chipset
Sound Card
on-board Realtek ALC892
Monitor(s) Displays
Samsung S22D300NY 21.5" wide screen
Screen Resolution
1280 x 720
Hard Drives
WD RE4 WD5003ABYX 500GB SATA2 x2 (RAID-0)
PSU
D.HIGH DHP-400GH-80P 400W
Case
no name
Cooling
Foxconn fan and heater for AMD CPU
Keyboard
Logitech standard keyboard Y-SM48
Mouse
Toshiba Pala Chan
Internet Speed
GPON 300M/100M
Antivirus
AVG AntiVirus Free
Browser
Vivaldi & Firefox
Back
Top