[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

How to modify c drive permissions remotely when the drive is not shared

Posted on 2011-04-27
4
Medium Priority
?
837 Views
Last Modified: 2012-05-11
It was discovered that all workstations have everyone read and execute set on the local c drives.

I can run to \\workstation\c$ and see the contents. But since the drive is not shared out I cannot get to the root permissions of the cdrive.

End result: Be able to run a script or remotely access a local c drive and remove the everyone group from the permissions list.

I tried

cacls /E /R user everyone

But I get the error

No mapping between account names and security IDs was done.

I can use vbscript or any command that would be a default .exe on a windows XP machine.
0
Comment
Question by:Mikehyde
  • 2
  • 2
4 Comments
 
LVL 7

Accepted Solution

by:
jrwarren earned 2000 total points
ID: 35477060
Use of the NET command should assist.

net use [{DEVICE | *}] [\\COMPUTER\SHARE[\VOL]]
  Example:
  net use m \\MyComputer\c$

Assuming you have administrative rights, you will have mapped the Cdrive of MyComputer as M on your local machine.

You can command line permission changes using the cacls.exe
   Be careful and read thoroughly on cacls, it can be tricky.  But that would provide you with the ability to script through cmd line to set permissions.
0
 
LVL 1

Author Comment

by:Mikehyde
ID: 35477349
no kidding. I am aware of the pitfalls of calcs.

It gets worse. Apparantly the local group (users) on their workstations have full control. Nested in this group is "domain users". So I need to remove this permission as well.

While we are on the subject, this will most likely disable users from using their pc's as they rely on this permission. No one is named specifically.

So I will need to add "%username% to have full control over the c drive. Aye. Really? Like I dont have enuf to do already. : P

New end result:

Remove Everyone from c drive
remove Domain users from local Users group or remove local users from c drive
Add named user to c drive full control
0
 
LVL 7

Assisted Solution

by:jrwarren
jrwarren earned 2000 total points
ID: 35477808
Domain Users are typically added to the local machine with Domain Group Policy.  I would check that route first and determine if you could modify the access through the GPO for domain SIDs.

Local accounts, it may be suggested, to remove them all, except the local admin account (for offline/emergency purposes)

 You can also assign specific Domain Users to Local Groups, such as Power Users or Local Admin via Group Policy, as well.

  this centralizes your administration of machines and should achieve your goal.

Here is a brief synopsis of how this can be done, you will need to test and tweak it for your roll-out, of course : Tech-Republic - GPO for Local Admin
0
 
LVL 1

Author Comment

by:Mikehyde
ID: 35478216
This allows you to get to the properties page, but breaks ineritance. : (

Use of the NET command should assist.

net use [{DEVICE | *}] [\\COMPUTER\SHARE[\VOL]]
  Example:
  net use m \\MyComputer\c$
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
The video provides a quick and easy steps to migrate MBOX file to well known Outlook PST and Office 365. Besides this, it also supports and migrates more than 20 email clients of MBOX which include AppleMail, Opera, Thunderbird and SeaMonkey effortl…
Suggested Courses
Course of the Month10 days, 6 hours left to enroll

591 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question