none
Windows 10 Authenticated user removed in C drive RRS feed

  • Question

  • HI 

    I just accidentally removed authenticated user access in C drive. I am the administrator. I am not able to access the C drive now. Please help 

    Saturday, September 1, 2018 6:36 PM

All replies

  • Hi dhanamjayan,

    As an admin on the computer, you have the rights to "take ownership" of the C:\drive which gives you Full Control see the "Takeown" command.

    Are you able to log on as local administrator?

    If not, boot the computer with a gparted linux live CD and mount your C drive and set permissions manually - BEFORE you try this though, please mount your Hdd somewhere and pull all personal files and data to another location!!!


    Charlie Coverdale

    Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.

    Saturday, September 1, 2018 8:03 PM
  • I am able to log in as a local administrator, but I am not able to open C drive or PowerShell(admin). I accidentally removed the authenticated users in the security tab. When I try to open C drive it says C is not accessible. Access is Denied.

    Sunday, September 2, 2018 1:20 AM
  • Hi dhanamjayan, 

    you may try something.. download psexec

    https://docs.microsoft.com/en-us/sysinternals/downloads/psexec

    from another machine, open the prompt and move to psexec folder, and run the following command:

    psexec \\pcWithCUnitProblem -s cmd

    if the prompt opens, type c:\windows\system32\icacls C:\ /grant "Authenticated Users":(OI)(CI)M

    Sunday, September 2, 2018 4:17 AM
  • i am not able to run psexec. I want to give access to authenticated users. I accidentally removed the access to authenticated users. I am not able to open C drive.

    • Edited by dhanamjayan Sunday, September 2, 2018 4:35 AM
    Sunday, September 2, 2018 4:33 AM
  • Ok, but can't your run psexec from ANOTHER computer?
    Sunday, September 2, 2018 5:17 AM
  • don't have another PC. is there any other way

    • Edited by dhanamjayan Sunday, September 2, 2018 6:10 AM
    Sunday, September 2, 2018 6:07 AM
  • Hello,

    Do you've System Restore points created earlier? If yes, use them to restore back.

    Regards.

    Microsoft MVP (Windows and Devices for IT)

    Windows Insider MVP

    Windows Help & Support [www.kapilarya.com]

    Sunday, September 2, 2018 7:03 AM
  • Click start > run and type gpedit.msc

    Edit a new policy and set File System permissions.

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc782533(v=ws.10)


    Charlie Coverdale

    Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.

    Sunday, September 2, 2018 7:59 AM
  • I don't have restore points.
    Sunday, September 2, 2018 10:41 AM
  • Not able to open gpedit.msc. I am using windows 10 OS
    Sunday, September 2, 2018 10:42 AM

  • What CAN you open? If you cant open any window, then you cant do much... How about regedit?

    You will need to either repair your OS from a boot media or mount your Hdd somewhere else, copy your stuff off and reformat / reinstall


    Charlie Coverdale

    Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.

    Sunday, September 2, 2018 11:26 AM
  • I cannot open regedit.  I removed authenticated user access of C drive accidentally so don't have any permission now to access the files in C drive or run programs.
    Sunday, September 2, 2018 2:53 PM
  • Download a bootable Linux ISO (i have used gparted for various things).

    Boot from that and fix the permissions on C:\ and C:\Windows\System32.

    Once done, reboot and logon as Local Administrator - you will be able to run CMD prompt.

    Once you have launched an admin cmd prompt, run:

    sfc / scannow

    then

    DISM.exe /Online /Cleanup-image /Restorehealth

    Information about these commands found at the link below.

    https://support.microsoft.com/en-gb/help/929833/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system


    Charlie Coverdale

    Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.


    Sunday, September 2, 2018 6:57 PM
  • Here is a post where your exact scenario has been discussed.

    https://answers.microsoft.com/en-us/windows/forum/windows_10-security-winpc/accidentally-denied-access-to-authenticated-users/e8c41435-20b1-4b44-8021-693039649963

    You must still be able to run programs as you have local admin rights (you can clearly run a browser). Fine you may not have rights to open and read documents, but you can launch Task Manager, click File > run and type cmd and hit enter.

    After that it is just a matter of running TAKEOWN and ICACLS...


    Charlie Coverdale

    Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.



    Sunday, September 2, 2018 7:06 PM