troubleshooting Question

Restoring Windows 7 ACLs on C:\

Avatar of Scurfy
Scurfy asked on
Windows 7
4 Comments1 Solution1693 ViewsLast Modified:
Long story, I'll make it short(er). I inadvertently changed ACLs on C:\ (ie, the root directory of the C: drive) and want to get them set back to how they were when the OS was installed.  Tried lots of things. Lastest is to use icacls /save to save the ACLs from another machine I know is correct, and then icacls /restore to restore, on the target machine, those ACLs from the previously saved file.  (i.e., save to file icacls.ssp, copy icacls.ssp to target machine,
restore on target machine).

I:\>icacls C:\ /restore icacls.ssp
C:\D:PAI(A;;FA;;;BA)(A;OICIIO;GA;;;BA)(A;;FA;;;SY)(A;OICIIO;GA;;;SY)(A;OICI;0x1200a9;;;BU)(A;OICIIO;SDGXGWGR;;;AU)(A;;LC;;;AU)S:(ML;OINPIO;NW;;;HI): The filename, directory name, or volume label syntax is incorrect.
Successfully processed 0 files; Failed processing 1 files

Hmm...

Not sure if there's a problem with my command line, or the ACL file from the other system, so as a test I /saved and then tried to immediately /restore, BOTH SAVE AND RESTORE ON THE TARGET SYSTEM, just to see if it would work.  It didn't:

I:\>icacls C:\ /save icacls.jmb
processed file: C:\
Successfully processed 1 files; Failed processing 0 files

I:\>icacls C:\ /restore icacls.jmb
C:\D:PAI(A;OICI;FA;;;WD)(A;OICI;0x1301bf;;;AU)(A;OICIIO;FA;;;SY)(A;;0x1201ff;;;SY)(A;OICI;FA;;;S-1-5-21-1718308051-1053876602-292602114-1000)(A;OICI;FA;;;BA)S:(ML;OINPIO;NW;;;HI):
The filename, directory name, or volume label syntax is incorrect.
Successfully processed 0 files; Failed processing 1 files

All of the above was done from the Command Prompt running as Administrator.

I would like to understand what's up with icalcs; but even more I'd like to get my ACLs  reset the way I want.  I've tried to do this using the GUI, with different problems:

Start -> Computer -> right click OS (C:) -> Properties -> Security -> Advanced -> Change Permissions  -> Add/Edit/Remove etc., but when I try to set permissions for a particular
user or group, and I specify  "Apply to: " "This folder only", it STILL tries to propagate
the setting to sub-folders!

I just want a simple, clean, reliable way to get my ACLs reset.
ASKER CERTIFIED SOLUTION
Scurfy

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 4 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 4 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros