Solved

Cannot change permissions in Windows 2008 windows folder (cmd.exe)?

Posted on 2009-07-10
6
5,719 Views
Last Modified: 2012-05-07
Hi all,
 
  I have some problems with setting permissions on the file "cmd.exe" (which is required for some php appliction). I can change permissions on any given folder/file without problems, but within the Windows directory all "add", "remove" etc. buttons are disabled.

How do I enable the possibility to alter permissions in the Windows dir?

Many thanks!

Chris
0
Comment
Question by:HidDS
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 2

Expert Comment

by:javiersantana
ID: 24827569
Well, the windows folder is a system folder... Why would you need to modify permissions to cmd.exe? Because by default cmd doesn't open with admin privilages in server 2008?
0
 

Author Comment

by:HidDS
ID: 24829658
I need PHP to run an application (FFMPEG), but it refuses / returns no values. The command is good (it works when you run it from the command line), so I figured the webserver (IIS) must have the appropriate rights on the cmd.exe file.

There must be a way to be able to change this permissions? (Turn of some security somewhere?).
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 24830024
Look for 'Run as administrator' submenu when right-clicking the folder and choose properties from the admin-submenu.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:HidDS
ID: 24833880
I can run cmd.exe as administrator, but when pressing properties I still can't add/edit users (groups) or alter rights for the application.
0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 500 total points
ID: 24834534
What I ment is that it's sometimes a submenu on the context menu when right-clicking the folder for administrative tasks to reach the properties dialog with administrative privileges.
I've seen this behavior with the disabled Add/Remove-buttons before on some of our 2008 servers and the buttons were only accessible through a special administrative properties dialog by using the submenu I described, but I don't remember exactly when/where this occured, but it can be that we've patched the servers to change this functionality as I can't recreate the issue. When displaying Properties now, I have an UAC-button labeled Edit instead of Add/Remove.

If you can't do it through the GUI, do it with the admin command prompt
cacls path-to-file /E /G usergroup:<perm>

When re-reading question, what permissions are you expecting to set on cmd.exe? All users have normally Read, which is necessary to execute the program. Restricting/allowing access to command prompt can be done by modifying the following policy setting
User Configuration\Administrative Templates\System\Prevent access to the command prompt
0
 

Expert Comment

by:islandjoe
ID: 34405414
Had a similar issue with 2008 server.  At first could not click add/modify (greyed out)  Disabled UAC (control panel / users) and rebooted.  Fixed that but could not change (access denied).  Took ownership of cmd.exe from trusted installer and then was able to add IUSR with read/execute.  
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question