Re: HELP- I locked myself out
From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 11/15/04
- Next message: TonyG: "Dual boot removal - cleaning up..."
- Previous message: Geoff Briedé: "Re: View as a slide show timing"
- In reply to: Jan Nademlejnsky: "Re: HELP- I locked myself out"
- Next in thread: Jim Carlock: "Re: HELP- I locked myself out"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 15 Nov 2004 00:29:42 -0500
The basic problem is that the Users group encompasses all other users on the machine. And Deny permissions outweigh Allow permissions. For future reference, rather than using Deny for a specific user or user group, just uncheck Allow. It has the same effect, but only works down stream. Unchecking Allow for Users would restrict all User level accounts, but not Administrators.
I can't fault MS for trying to move away from the 9x platform. As far as security of your computer and information goes, they were much more vulnerable. The problem is that the masses weren't ready for the NTFS file system. I can only assume that MS thought "enough people use it in the workplace, we should be able to migrate them to it in the Home environment." Sadly, "enough people" didn't have the power to change anything in the work place. They just used it and complained when they couldn't do something. :-)
-- Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display Win 95/98/Me/XP Tweaks and Fixes http://www.dougknox.com -------------------------------- Per user Group Policy Restrictions for XP Home and XP Pro http://www.dougknox.com/xp/utils/xp_securityconsole.htm -------------------------------- Please reply only to the newsgroup so all may benefit. Unsolicited e-mail is not answered. "Jan Nademlejnsky" <jannade@shaw.ca> wrote in message news:uuLbB8qyEHA.824@TK2MSFTNGP11.phx.gbl... > Thanks Doug, > > I have to explore what you suggested, but it is not very clear what I > supposed to do. I have to read on the permissions, because it is not design > for normal people. What is logical to me could produce totally unpredictable > results. I do not consider myself a computer novice, but I have to admit > that I am totally lost in this security issues. I have to educate myself. > > I assumed that if I am an administrator and if I have full control, (which I > verified many times before I clicked Apply), that I will have full control. > Obviously, this is not that case. I lost that control and locked myself out. > It is totally illogical to me. > > I eventually entered in safe mode (F8) as administrator, which took 1.5 > hour to load. I removed Deny access from that locked backup drive and I was > very happy, until I found out that all the files and folders denied me > access. I could not unlock them regardless what I did. I decide to reformat > the back up drive, because I did not wand to fart with this anymore. This is > totally unreasonable and I am disappointed with MS. > > Thanks > > Jan > > "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message > news:uO%23$MHpyEHA.3024@TK2MSFTNGP14.phx.gbl... > Jan, > > Log into a normal user account with Administrator level privileges. Open a > Command Prompt window (Start, Run and enter CMD.EXE). > > At the command prompt, enter CACLS /? > > This will get you the command line options for this utilty. One of the > problems with using DENY permissions, is if you Deny access to the Users > group, you deny permissions to every user on the computer. > > -- > Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display > Win 95/98/Me/XP Tweaks and Fixes > http://www.dougknox.com > -------------------------------- > Per user Group Policy Restrictions for XP Home and XP Pro > http://www.dougknox.com/xp/utils/xp_securityconsole.htm > -------------------------------- > Please reply only to the newsgroup so all may benefit. > Unsolicited e-mail is not answered. > > "Jan Nademlejnsky" <jannade@shaw.ca> wrote in message > news:ud4zg9nyEHA.3952@TK2MSFTNGP10.phx.gbl... >>I think I am in trouble. After reformatting HD 3x and loading all my >> applications, I was doing final touch ups. I have 2nd HD which I use for >> back up of all my important stuff. >> >> I wanted this drive to be inaccessible to everybody else except to >> administrator. I could not change this Sharing from my account, which is >> weird (I am administrator) My account is named "Jan" and I am the >> administrator. I read on News group to go to Safe mode and log as >> administrator. >> >> Safe mode, selected Administrator, and then selected D (my backup HD) and >> assign Full control to Jan (my account) and to Administrator and Deny >> everything for everyone else. This was my mistake. Now D drive is totally >> inaccessible. My intent was to be the one who has access to this drive. >> The >> result is that nobody can access to it. >> >> I wanted to reverse it and went to Safe Mode (Restart F8), selected >> Administrator and nothing happened. It does not progress any further. >> >> I am facing another format of HD or is there some hope to recover? >> >> Need your help, please. >> >> >> > >
- Next message: TonyG: "Dual boot removal - cleaning up..."
- Previous message: Geoff Briedé: "Re: View as a slide show timing"
- In reply to: Jan Nademlejnsky: "Re: HELP- I locked myself out"
- Next in thread: Jim Carlock: "Re: HELP- I locked myself out"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
