Re: Rights problem - Even the administrator is locked out, but I don't see why

You can issue the command like this:
cacls d:\images\Collection /t /e /g "Will Pittenger":F

In your reply I expected to see the permission structure of the
files you cannot access.


"Will Pittenger" <see.my.sig@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eWWSSa%23wIHA.2360@xxxxxxxxxxxxxxxxxxxxxxx
C:\Documents and Settings\Will Pittenger>cacls d:\images\Collection /t
/e /g everybody:F "%UserName%":F

No mapping between account names and security IDs was done.
-----
will 68 at mtco dot com
will dot pittenger1 at gmail dot com (use this address for large
signatures)

Pegasus (MVP) wrote:
Fine. My first test revealed the permission structure of
the Collection folder. There was no problem there. If
your problem relates to existing files then you need to
apply the first set of test commands to one of these files.
You could also run this command:

cacls d:\images\Collection /t /e /g everybody:F "%UserName%":F


"Will Pittenger" <see.my.sig@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:OcIBEt7wIHA.5892@xxxxxxxxxxxxxxxxxxxxxxx
I don't think your tests were all that helpful. They showed that I
could get a directory of those folders (I knew that) and could create
new files. The problem is reading existing files.
-----
will 68 at mtco dot com
will dot pittenger1 at gmail dot com (use this address for large
signatures)

Pegasus (MVP) wrote:
The data you posted tells me two things:
- You are a member of the Administrators group.
- The permission structure for the Collection folder
defines the access rights for a number of users.
All of them have full and unrestricted access, without
exception.

The above tells me that you should be able to do anything
you like with the Collection folder, yet you report otherwise.
Would you care to run this test?
- Click Start / Run / cmd {OK}
- Type the following commands:
dir "d:\images\Collection" > c:\test.txt 2>&1{Enter}
md "d:\images\Collection\Test" 1>>c:\test.txt 2>>&1{Enter}
copy c:\test.txt "d:\images\Collection\Test" 1>>c:\test.txt
2>>&1{Enter}
dir "d:\images\Collection\Test" >> c:\test.txt 2>>&1{Enter}
notepad c:\test.txt(Enter}

"Will Pittenger" <see.my.sig@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eGVBg$6wIHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
See attached. The reinstall happened because I was experimenting with
a
program that emulated Vista on XP. However, it was crashing
constantly,
including during installation. I tried to uninstall it, but it
crashed
again. Next time I rebooted, a critical system file was missing. I
was
told to boot my system disk and use the repair option. However, I
couldn't get far enough along to use the repair option because my XP
install disk is SP1 and I had partitions extending past 137 GB. That
disk wouldn't boot. I was able to use G4L to back up my partitons, so
I
could finally get that disk booting, but for some reason thought that
I
needed to backup the boot partition too. That failed. A partition
with
32GB was supposedly stored in just 52 megs. I didn't notice until I
was
attempting to restore.

I did ensure that I own the folder.
-----
will 68 at mtco dot com
will dot pittenger1 at gmail dot com (use this address for large
signatures)

Pegasus (MVP) wrote:
"Will Pittenger" <see.my.sig@xxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:unsf4c6wIHA.1236@xxxxxxxxxxxxxxxxxxxxxxx
I needed to lock users out of a select folder due to privacy
concerns. I
know not to deny to all users and then attempt to allow in just
select
users. So I locked out just the users I needed to stay out. Then I
found
myself forced to reinstall Windows.

In the new installation, I tried something slightly different with
that
folder. I create a group containing just the members that had to
stay
out. I then denied to that group rather than to individual members.
Trouble was, somehow, it acted like I was part of that group. (I
could
see the files, which others weren't supposed to be able to do, but
that
was it.) I never was. I verified that I wasn't by going to the
window
where it lists the effective rights for a user. I supposedly had
all
rights.

Eventually, I deleted all entries and reset it by inheriting from
the
parent folder. That provides full access to everyone. This, from
the
point of view of what I, as user, could do, changed nothing. I
still
can't open the files.

What is going on?
-----
will 68 at mtco dot com
will dot pittenger1 at gmail dot com (use this address for large
signatures)
- Why were you forced to re-install Windows?
- Did you ever try to seize ownership of the problem folder?
- What is the current permission structure of the problem folder?

To post the current permissions, do this:
- Click Start / Run / cmd {OK}
- Type these commands:
cacls "d:\My Folder\My Subfolder" > c:\perms.txt{Enter}
net user "%UserName%" >> c:\perms.txt{Enter}
notepad c:\perms.txt{Enter}
- Copy & paste this text into your reply.



--------------------------------------------------------------------------------


d:\images\Collection BUILTIN\Administrators:(OI)(CI)F
BUILTIN\Backup Operators:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
Everyone:(OI)(CI)F
BUILTIN\Power Users:(OI)(CI)F
BUILTIN\Users:(OI)(CI)F
LUCY\Will Pittenger:(OI)(CI)F

User name Will Pittenger
Full Name
Comment
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 4-27-2008 6:0 am
Password expires Never
Password changeable 4-27-2008 6:0 am
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 5-31-2008 10:16 pm

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *None
The command completed successfully.





.

Relevant Pages

  • RE: Locating corrupt driver
    ... This article describes the functionality and limitations of the Windows ... Create and format partitions on drives. ... MB of hard disk space on your system partition to hold the Cmdcons folder ... Windows NTBoot Console Command Interpreter. ...
    (microsoft.public.win2000.applications)
  • Re: Batch Job
    ... You cannot use the 'del' command at a DOS prompt. ... files (since 'del' might not work into the special folder). ... while the above will delete the deleted files from the Recycle Bin but it also deletes configuration files used by the Recycle Bin. ...
    (microsoft.public.windowsxp.general)
  • Re: Help with cacls in WinXP Home
    ... Take Ownership of a File or Folder in Windows XP ... all the information I have of CACLS: ... Just because you can set permissions with Cacls doesn't mean you should. ... Try the Cacls command on a test folder first and make sure that your ...
    (microsoft.public.windowsxp.security_admin)
  • Re: home network problem
    ... I opened the command prompt and typed ... browstat status>c:\browstat.txt and it said "browstat is not recognized as ... You're half way there, Phil. ... that you want to put the software into the folder added to the path. ...
    (microsoft.public.windowsxp.network_web)
  • Re: User Account Suddenly Unaccessable
    ... As I started to type the second command, ... I get two error messages. ... Contact your network administrator. ... It tells me that only the Administrator has access to the CWLee profile folder. ...
    (microsoft.public.win2000.general)