none
Default Permissions for Documents and Settings, Windows 7

    Pregunta

  • Hi,

    I am trying to find out, what the default permissions for "Documents and Settings" folder are. I know it's a junction point, and its purpose.

    I saw there were three special permissions on that folder : Everyone, SYSTEM, and Administrator. Somehow, my 'Administrator' got deleted from that list of permissions. So, my question is, can somebody please tell me what those permissions are ?  (Default permissions that are assigned upon installation of Windows 7, for the Administrator account, to that folder "Documents and Settings" )

     

    Thanks so much!

     

    sábado, 22 de enero de 2011 11:36

Respuestas

  • Hi,

     

    If you double click on it, you'll get an error messages. Even administrators don't have enough NTFS rights to navigate to this folder. It is not even possible if you change the rights by taking the ownership.

     

    Here are the permissions for Documents and Settings.

     

     

    Regards,

    Niki


    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    miércoles, 26 de enero de 2011 1:20
    Moderador

Todas las respuestas

  • Hi,

     

    If you double click on it, you'll get an error messages. Even administrators don't have enough NTFS rights to navigate to this folder. It is not even possible if you change the rights by taking the ownership.

     

    Here are the permissions for Documents and Settings.

     

     

    Regards,

    Niki


    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    miércoles, 26 de enero de 2011 1:20
    Moderador
  • Your image is missing the salient permission at the bottom - I too am in the same pickle with the administrator access gone but even if I knew what the permission should be, how to put it back is not known at this time.
    sábado, 09 de julio de 2011 6:28
  • Your description is woefully inadequate. The permissions for this folder are located in the advanced tab;

    There was a permission 'Type' Deny that I deleted so I could view the contents of this - junction - ? anyway, I figured out that maybe this was some kind of security feature, and I wanted to put it back, but the 'Permission' was "special' and I do not know what it is supposed to be. If anyone out there has NOT removed the 'Deny' permission, I could use a screen dump of the permissions that were selected so I can duplicate the permission on my machine. I had to take ownership of this folder from 'SYSTEM' to do this, but I am not trying to tell anyone how to do it, just tell them you will jack up the security protocols on your machine just to satisfy your curiosity. Trust me folks, nothing to see here.

     

    • Propuesto como respuesta miguelone domingo, 14 de agosto de 2011 19:12
    • Votado como útil miguelone domingo, 14 de agosto de 2011 19:12
    domingo, 14 de agosto de 2011 18:58
  • I am sorry, I was so caught up in my own issues, I missed the original thread question.

    I checked the administrators permissions for this 'junction' (I guess fancy name for a bunch of fancy shortcuts), and if you added an 'allow' permission for Administrators, set it to full control (even though mine reads 'special' - everything is set to 'allow'). That is what mine is set to, and I have not monkeyed with it.

    The kicker is that the default permissions also have a 'deny' permission for 'everyone', That is only set for 'list folder/ read data' Networking 101 tells us that any 'deny' permission set up in the folder security trumps all other downstream permissions, so I guess 'everyone' includes admins.

    If you are asking this question, then that means you figured out that you had to change ownership of this folder from 'SYSTEM' to yourself (admin, of course) THEN go properties/security/permissions/advanced/change permissions/add-edit-remove. I am pretty sure there are other ways to skin this cat, but this is the way I used.

    In short - Nothing to see here, just a bunch of shortcuts. Don't monkey with it, because it probably hyas something to do with windows ever fragile security situatio.

    • Propuesto como respuesta miguelone domingo, 14 de agosto de 2011 19:28
    domingo, 14 de agosto de 2011 19:28
  • Your description is woefully inadequate. The permissions for this folder are located in the advanced tab;

    ... Trust me folks, nothing to see here.

     

    I see something unusual. Your permissions have been rifled by a person or application. Default Windows permissions, stable permission structures that are designed for healthy system function, are assembled such that "special" may appear, but normally "cookie cutter" or [win7 jargon] "cookie" permission selections correspond with eo nominae permissions, like "Full control", "Modify", "Read and execute", "Read/write and execute", "Read", "Write". Not a security engineer, so can't say what that indicates exactly, but for sure, your Permissions have been rifled.

    Security > Advanced > (add edit or remove)

    burb when you setup a Windows system carefully with default choices in Adobe and Microsoft software Setups, those "Special" things are rare to non-existent, the higher up you go in the file tree. Strange. Perhaps knowing where in the file tree your snapshot is taken would help.

    I would check Properties > Security > Owner > Edit ... you should at least see a button there called 'Other users or groups'. You might also want to try Security > Auditing. Clcik Continue > Add > Advanced > Find New ... select your Windows username and OK > OK > Full Control. Then change that SYSTEM "Special" to Full control. While you are at it ... ?

    Just a thought.





    lunes, 16 de enero de 2012 22:13