windows 7 ACL

vagabond1214
vagabond1214 used Ask the Experts™
on
I have one windows 7 professional..i made a user on it lets say MDS1 AND made it member of
administrators group...but to my surprise when i am logged in to windows thorough mds1 user..it does not let me change security settings on folder...i wanted to modify host file which happens to be in c:\windows\system32\drivers\etc\.....but it does not let me modify it....whats going on??
when i logged in back through administrator ..it worked perfectly..but as mds1 is member of administrators group why it is not happening to it ???

i am so confused ..whats wrong with windows 7
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
by default, the administrators group has access to modify that file, so I don't think you've got an ACL problem.  open an administrative command prompt and type in:

attrib -s -h -r c:\windows\system32\drivers\etc\hosts

and then try it again.  If that doesn't work, please disable any and all anti-spyware/anti-virus software on the system.  Many products out there will prevent the hosts file from being modified (heck, many malware infections will do that as well to prevent you from uninstalling them!).

Author

Commented:
but mds1 user is member of administrator group.???...
and what is elevated security in windows 7 ??
thanks for your interest

Author

Commented:
i tried your command attrib -s -h -r c:\windows\system32\drivers\etc\hosts....it did not work in mds1 user  saying access denied ..but through administrator user it worked but i still can not update host file in system32..i even can not change acl on system32 when i am in mds1 user..its grayed out.even though it is member of administrator group...i don't know where i am wrong
OWASP: Forgery and Phishing

Learn the techniques to avoid forgery and phishing attacks and the types of attacks an application or network may face.

Did you right click on the command prompt and select the option "Run as Administrator"?

By default, the Administrator account won't be prompted for elevation.  a new account that is a member of the administrators group will need to elevate their rights in order to do admin functions.  Right click the command prompt, select "Run as Administrator", give the OK to the prompt and then try running the attrib command again.

Author

Commented:
i tried what you said but it still does not allow me to modify host file despite the fact the the user is member of administrators group ...i ran the command in both users administrator and mds1 but all in vain..i can not modify host file in mds1 user ...

Author

Commented:
no body is there to help me out ??
if you are not using the "Run as Administrator" option, even an administrator can't modify system files.  Be sure you launch your Command Prompt with the Run as Administrator option and then give it a try.

If all else fails, try disabling UAC in the Users applet in the Control Panel.
actually you need to go to control panel and then to users and then change the user from standard user to administrator even if it is member of administrators group..i did it and it worked fine
thanks for your help by the way

Author

Commented:
because it worked for me and i did not know that in windows 7 you need to go to control panel still to convert it to work as administrator even it has become member of administrators group from computer management console

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial