Cannot change permissions in Windows 2008 windows folder (cmd.exe)?

Hi all,
 
  I have some problems with setting permissions on the file "cmd.exe" (which is required for some php appliction). I can change permissions on any given folder/file without problems, but within the Windows directory all "add", "remove" etc. buttons are disabled.

How do I enable the possibility to alter permissions in the Windows dir?

Many thanks!

Chris
HidDSAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

javiersantanaCommented:
Well, the windows folder is a system folder... Why would you need to modify permissions to cmd.exe? Because by default cmd doesn't open with admin privilages in server 2008?
0
HidDSAuthor Commented:
I need PHP to run an application (FFMPEG), but it refuses / returns no values. The command is good (it works when you run it from the command line), so I figured the webserver (IIS) must have the appropriate rights on the cmd.exe file.

There must be a way to be able to change this permissions? (Turn of some security somewhere?).
0
Henrik JohanssonSystems engineerCommented:
Look for 'Run as administrator' submenu when right-clicking the folder and choose properties from the admin-submenu.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

HidDSAuthor Commented:
I can run cmd.exe as administrator, but when pressing properties I still can't add/edit users (groups) or alter rights for the application.
0
Henrik JohanssonSystems engineerCommented:
What I ment is that it's sometimes a submenu on the context menu when right-clicking the folder for administrative tasks to reach the properties dialog with administrative privileges.
I've seen this behavior with the disabled Add/Remove-buttons before on some of our 2008 servers and the buttons were only accessible through a special administrative properties dialog by using the submenu I described, but I don't remember exactly when/where this occured, but it can be that we've patched the servers to change this functionality as I can't recreate the issue. When displaying Properties now, I have an UAC-button labeled Edit instead of Add/Remove.

If you can't do it through the GUI, do it with the admin command prompt
cacls path-to-file /E /G usergroup:<perm>

When re-reading question, what permissions are you expecting to set on cmd.exe? All users have normally Read, which is necessary to execute the program. Restricting/allowing access to command prompt can be done by modifying the following policy setting
User Configuration\Administrative Templates\System\Prevent access to the command prompt
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
islandjoeCommented:
Had a similar issue with 2008 server.  At first could not click add/modify (greyed out)  Disabled UAC (control panel / users) and rebooted.  Fixed that but could not change (access denied).  Took ownership of cmd.exe from trusted installer and then was able to add IUSR with read/execute.  
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.