Solved

Cannot change permissions in Windows 2008 windows folder (cmd.exe)?

Posted on 2009-07-10
6
5,762 Views
Last Modified: 2012-05-07
Hi all,
 
  I have some problems with setting permissions on the file "cmd.exe" (which is required for some php appliction). I can change permissions on any given folder/file without problems, but within the Windows directory all "add", "remove" etc. buttons are disabled.

How do I enable the possibility to alter permissions in the Windows dir?

Many thanks!

Chris
0
Comment
Question by:HidDS
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 2

Expert Comment

by:javiersantana
ID: 24827569
Well, the windows folder is a system folder... Why would you need to modify permissions to cmd.exe? Because by default cmd doesn't open with admin privilages in server 2008?
0
 

Author Comment

by:HidDS
ID: 24829658
I need PHP to run an application (FFMPEG), but it refuses / returns no values. The command is good (it works when you run it from the command line), so I figured the webserver (IIS) must have the appropriate rights on the cmd.exe file.

There must be a way to be able to change this permissions? (Turn of some security somewhere?).
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 24830024
Look for 'Run as administrator' submenu when right-clicking the folder and choose properties from the admin-submenu.
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 

Author Comment

by:HidDS
ID: 24833880
I can run cmd.exe as administrator, but when pressing properties I still can't add/edit users (groups) or alter rights for the application.
0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 500 total points
ID: 24834534
What I ment is that it's sometimes a submenu on the context menu when right-clicking the folder for administrative tasks to reach the properties dialog with administrative privileges.
I've seen this behavior with the disabled Add/Remove-buttons before on some of our 2008 servers and the buttons were only accessible through a special administrative properties dialog by using the submenu I described, but I don't remember exactly when/where this occured, but it can be that we've patched the servers to change this functionality as I can't recreate the issue. When displaying Properties now, I have an UAC-button labeled Edit instead of Add/Remove.

If you can't do it through the GUI, do it with the admin command prompt
cacls path-to-file /E /G usergroup:<perm>

When re-reading question, what permissions are you expecting to set on cmd.exe? All users have normally Read, which is necessary to execute the program. Restricting/allowing access to command prompt can be done by modifying the following policy setting
User Configuration\Administrative Templates\System\Prevent access to the command prompt
0
 

Expert Comment

by:islandjoe
ID: 34405414
Had a similar issue with 2008 server.  At first could not click add/modify (greyed out)  Disabled UAC (control panel / users) and rebooted.  Fixed that but could not change (access denied).  Took ownership of cmd.exe from trusted installer and then was able to add IUSR with read/execute.  
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question