• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1236
  • Last Modified:

How do I take file ownership from TrustedInstaller in Windows 7

I need to edit and replace some files that are owned by TrustedInstaller.  At one time you could take ownership of the file (Properties/Security/Advanced/Owner/Edit) but this no longer works in Windows 7.  Looks like the security has been increased recently.  Does anyone know of a way around this problem now?  I need to edit the TS_BrokemShortcuts.ps1 file to keep a machine from deleting the desktop icons.  Thanks for any help.
0
Erdnerd
Asked:
Erdnerd
  • 6
  • 5
  • 2
  • +1
2 Solutions
 
raremindCommented:
Is this on a domain?
0
 
ErdnerdAuthor Commented:
Yes, this (and several others with the same problem) are on a Windows 2008R2 domain.
0
 
raremindCommented:
Use the domain admin login to take control of the machine and you should be able to change the permissions on the files. You need to take ownership of the files or folders first under the advanced security settings/owner tab (please see photo) Owner tab
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
johnb6767Commented:
Any chance you could try the copy in a Machine Startup script?
0
 
Mohammed RahmanCommented:
Import the Take Ownership file to the registry from the link below.3

http://www.howtogeek.com/downloads/TakeOwnership.zip

This will add an option "Take Ownership" to the right click menu. I have tested this on Folders. Not sure if it can be applied to take ownership of a file. It may be the most simplest way.
0
 
ErdnerdAuthor Commented:
In response to the above comments ...

raremind:  We have tried as both local machine administrator and domain administrator, neither have permission to change ownership of the file.  (They used to, I did this about a year ago on some other machines and it worked then)

johnb6767:  I haven't tried that yet, that gives me the idea of booting from a Linux CD and seeing if I can edit the file.

mody2579:  I have already updated the registry with the "Take Ownership" add-on to the right-click menu.  It works well on other files but not on ones owned by TrustedInstaller.
0
 
raremindCommented:
Is the file Local to the Machine?
0
 
ErdnerdAuthor Commented:
The file is local to each machine, and I suspect on every version of Windows 7 (at least Pro and above, I don't have access to any Home versions)

 C:\Windows\diagnostics\scheduled\maintenance\TS_BrokenShortcuts.ps1

0
 
raremindCommented:
This should help you immensely. I didn't realize that is what you were talking about, LOL.
http://www.ghacks.net/2010/03/30/fix-windows-7-desktop-shortcuts-disappearing/
0
 
johnb6767Commented:
@erdnerd

The live cd would certainly work, I was assuming you had multiple systems to do this on, hence the script idea....
0
 
ErdnerdAuthor Commented:
To raremind  - re:  "http://www.ghacks.net/2010/03/30/fix-windows-7-desktop-shortcuts-disappearing/

That is the article that we used a year ago and it worked then, but it does NOT work now, we can no longer take ownership of the file to change the permissions.  We know what to change, the problem is that we can't.  At least on our machines it has become impossible to take ownership away from TrustedInstaller - that is what I'm looking for help with.


To johnb6767 - actually, there are only 2 machines that have a problem with the TS_BrokenShortcuts file issue, but we have several more with another problem involving Javascript issues in Internet Explorer that is pointing to the shdocvw.dll file which is also protected by TrustedInstaller, so I really would like to find a solution the root issue of being able to take control and edit or replace any file on the computer.
0
 
raremindCommented:
Try going into safe mode and logging in as domain admin. I know that sometimes this is cause when a file is a hidden file. In safe mode with the administrator account should do it,
0
 
raremindCommented:
You can also try the command line tool included in win7 if you use professional

http://technet.microsoft.com/en-us/library/cc755342(WS.10).aspx

Let us know how it goes.
0
 
ErdnerdAuthor Commented:
The solution was a combination of both of the above suggestions - I used the TAKEOWN tool while logged in as the Domain Administrator in SafeMode with Command Prompt.  (I had tried the TAKEOWN tool before without success - but not while in Safe Mode)

Many thanks to all, especially raremind, for your time and suggestions!
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

  • 6
  • 5
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now