Windows 7 - How to setup NTFS permissions to System32 folder

tkdo13
tkdo13 used Ask the Experts™
on
Hello,

On Windows 7 workstation, I am trying to add "Domain Users" NTFS permission (read/execute) to system32 folder and getting "access denied" error message, and also would like to inherit the permissions for sub-folders as well.

Thanks!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2011
Top Expert 2011

Commented:
Why are you trying to modify a System Folder? Not a very good idea.....
You are administrator, but.. when you are running some applications or you are trying to change folder properties you are doing it as a User, not Administrator.. just right click on System32 and look at the Security tab. You can find there Group or user names list. Only administrator has special permissions, other users like can only read this folder. If you really want to change this settings you need change Advanced permissions for the user "ComputerName\Users"

Author

Commented:
Yea, I know it's not good idea, but it required by the application vendor that we're using - I guess I can say the name of the app - it's "Raiser's Edge" from Blackbaud. In order for their apps to work properly we need to grant read/execute NTFS permissions to system32 folder.

Also it really strange - I checked the properties of System32 and it seems that nobody has full control over system32 folder. Even "ComputerName\Administrators" have Special permissions.

Also when I am adding "My_DOMAIN\domain users" to system32 it errors out -"Access Denied" but if I continue to click continue maybe 100 times or more I finally added doman users, but it's a hussle to click 100 times continue... and it still doesn't inherit all the permissions all the way to the subfolders.

11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Commented:
@tkdo13:

Since this is a vendor requirement, and it's likely that you're not their only customer, have you tried asking them for support to configure the necessary permissions? It may be something they do all the time. Otherwise how do they know that it's a *requirement*?
DarinTCHSenior CyberSecurity Engineer

Commented:
sounds like you might have been in share permissions not NTFS permissions?

Author

Commented:
Yes, we asked them first and got in trouble. They've recommended to use 3rd party utility that we have downloaded from their website  called - "PermFlashNTFS". Then later on they said that -  Since this is not an approved Blackbaud utility, we (blackbaud) would advise you to remove that utility from your procedures since the utility did not set the proper permissions, you may even consider getting rid of the utility all together. But the utility we downloaded is from their website - strange...

Author

Commented:
DarinTCH:  I would choose the properties of system32 and click on the third tab "Security" tab...
not on the second one which is "sharing" tab. It's happenning on Winblows 7 pro
Most Valuable Expert 2011
Top Expert 2011

Commented:
In BB50354, in the below link's reference, can you post an exerpt of the requirements? From what I can see if this kb entry, uac/windows 7 shouldn't be an issue shouldn't be an issue for a standard user....

I'm just wondering. If you got some bad info.....
Most Valuable Expert 2011
Top Expert 2011
Commented:
Distinguished Expert 2018
Commented:
Hi.

We should come back to your original need: read/execute perm. for domain users - they already have that permission. As dom. users is member of the local users group which has red/execute permissions on that folder.

So you should tell us what permissions apart reading are needed. By the way: apps writing to that folder on behalf of the user are poorly built, the vendor should know that.

To set those permissions, you can use GPOs. Group Policy editor - 'computer
configuration', 'security settings' 'File System'

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial