Solved

Resetting default folder/drive permissions in Windows 7

Posted on 2011-03-01
9
2,090 Views
Last Modified: 2012-05-11
Hi folks,

I've recently upgraded my PC to Windows 7 (x64). I have multiple drives/partitions on my PC but only the C: partition was touched (this was an otherwise clean install in C:, i.e. I formatted and installed Win7 from scratch).

Now I'm having problems accessing files/folders in my other drives/partitions. Initially I suspected it was due to the reinstallation, so I went round the various drive letters and set the properties/owner as follows:

Owner:
Administrators (Group)
Permissions:
Authenticated Users: Read & execute
SYSTEM: Full control
Administrators: Full control
Users: Full control


I'm logged on as a user in the "Administrators" group, and whenever I try to move items from one folder to another I keep getting a "Folder Access Denied" UAC window with it saying that "You'll need to provide administrator permission to move this folder".

This happens whether I'm trying to move files around within the same partition or across partitions.  

The only way I can get around this is to set my own user as owner on the drive and all its subfolders, which I'm keen to avoid.

However, I've also noticed that a cleanly formatted (in Windows 7) partition doesn't have the above behaviour, and permissions/ownership of objects is the same as above.

I could reset everything by copying all the files to a network drive, reformatting the partitions and copying files back, but there's around 4-5 TB of data to move, and I'd rather avoid this!

Is there a way to "hard reset" all folder permissions for these drives?

Thanks,
-Alex
0
Comment
Question by:ardm
9 Comments
 
LVL 13

Expert Comment

by:AustinComputerLabs
ID: 35013576
Right click the drive letter in Computer
Choose properties
Choose security
Click advanced
Click change permissions
Choose the group or user that you would like to be the owner
Check the "replace all child objects.... box
Click OK or apply.
0
 

Author Comment

by:ardm
ID: 35013633
Thanks for the quick response - Sorry, I should have mentioned I have done that already. Reset all child object permissions and ownership as mentioned above. Still getting UAC...

Only way around it is to set the owner to my own user, but I want to avoid doing that.
0
 
LVL 13

Expert Comment

by:AustinComputerLabs
ID: 35013677
The untouched drives are most likely set for the old SID of the clients previous to the install.
When you look at folder permissions do you see any objects that do not have user names just the SID (a bunch of seemingly random numbers and letters)?
0
 

Author Comment

by:ardm
ID: 35013731
No - and that's the strange thing... permissions look identical to the newly formatted drive. Yet for the old ones I still get the UAC dialog whenever I move files around, and I don't for the new one.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 2

Expert Comment

by:ind_selva
ID: 35013889
Microsoft fixit available download from http://support.microsoft.com/fixit/.  Diagnose and repair Windows File and Folder Problems automatically" may automatically fix your problem.
0
 
LVL 30

Accepted Solution

by:
ded9 earned 500 total points
ID: 35014933
Run subinacl to reset your security settings to default


http://blogs.msdn.com/b/astebner/archive/2006/09/04/739820.aspx



Ded9
0
 

Author Comment

by:ardm
ID: 35023060
Thanks ded9... subinacl seems to be the right tool for the job, at least according to the documentation. Will give it a shot when I have some time and let you know!

Also, I came across "icacls" when searching for documentation on the above - do you know how that is different to "subinacl"? They both seem to do the same (or similar) things, at least for file-based ACLs, with the benefit that "icacls" is already installed on my system...

Cheers,
-Alex
0
 

Author Comment

by:ardm
ID: 35076409
A combination of using "subinacl" and ensuring system files were visible seemed to do the trick, thanks!

I think with system files hidden, and using the windows GUI to change permissions, it wasn't touching some of the files/folders and they were left with the wrong/old SID and permissions.

All looks good now :)
0
 

Author Closing Comment

by:ardm
ID: 35076427
subinacl by itself needed further research, and had to unhide system files first. otherwise everything worked great!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now