Link to home
Start Free TrialLog in
Avatar of vagabond1214
vagabond1214

asked on

windows 7 ACL

I have one windows 7 professional..i made a user on it lets say MDS1 AND made it member of
administrators group...but to my surprise when i am logged in to windows thorough mds1 user..it does not let me change security settings on folder...i wanted to modify host file which happens to be in c:\windows\system32\drivers\etc\.....but it does not let me modify it....whats going on??
when i logged in back through administrator ..it worked perfectly..but as mds1 is member of administrators group why it is not happening to it ???

i am so confused ..whats wrong with windows 7
Avatar of EshuunDara
EshuunDara

by default, the administrators group has access to modify that file, so I don't think you've got an ACL problem.  open an administrative command prompt and type in:

attrib -s -h -r c:\windows\system32\drivers\etc\hosts

and then try it again.  If that doesn't work, please disable any and all anti-spyware/anti-virus software on the system.  Many products out there will prevent the hosts file from being modified (heck, many malware infections will do that as well to prevent you from uninstalling them!).

Avatar of vagabond1214

ASKER

but mds1 user is member of administrator group.???...
and what is elevated security in windows 7 ??
thanks for your interest
i tried your command attrib -s -h -r c:\windows\system32\drivers\etc\hosts....it did not work in mds1 user  saying access denied ..but through administrator user it worked but i still can not update host file in system32..i even can not change acl on system32 when i am in mds1 user..its grayed out.even though it is member of administrator group...i don't know where i am wrong
Did you right click on the command prompt and select the option "Run as Administrator"?

By default, the Administrator account won't be prompted for elevation.  a new account that is a member of the administrators group will need to elevate their rights in order to do admin functions.  Right click the command prompt, select "Run as Administrator", give the OK to the prompt and then try running the attrib command again.
i tried what you said but it still does not allow me to modify host file despite the fact the the user is member of administrators group ...i ran the command in both users administrator and mds1 but all in vain..i can not modify host file in mds1 user ...
no body is there to help me out ??
if you are not using the "Run as Administrator" option, even an administrator can't modify system files.  Be sure you launch your Command Prompt with the Run as Administrator option and then give it a try.

If all else fails, try disabling UAC in the Users applet in the Control Panel.
ASKER CERTIFIED SOLUTION
Avatar of vagabond1214
vagabond1214

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
because it worked for me and i did not know that in windows 7 you need to go to control panel still to convert it to work as administrator even it has become member of administrators group from computer management console