Solved

Test NTFS Permissions without logging out

Posted on 2013-11-26
9
229 Views
Last Modified: 2013-12-02
I want to test the permissions as if I were a lower level user, not administrator.  I could log out and log in as the lower level user from my workstation, but I want a faster way.

What is the best way to do this?  Can I open an explorer window as that user? I've tried "Run As" but it doesn't work.

I'm using windows 7 on my workstation.

Thank you,

John Caspary
0
Comment
Question by:JohnMan777
  • 5
  • 4
9 Comments
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39679606
make a shortcut to cmd, do a 'run as' on that, and you'll have a cmd environment as that user, execute what you want to check from that.

if it's  really just the ntfs permissions you want to verify for a specific user or group without going through all his group memberships, open the security tab of the file/folder u want to check, click advanced and then in the 'effective permissions' tab , click select , change domain/user/group as required and ok, the resulting list of permissions is what he/she will have on it.
0
 

Author Comment

by:JohnMan777
ID: 39681189
When opening explorer from the command prompt, the following appears:

"Windows cannot access the specified device, path, or file.  You may not have the appropriate permissions to access the item."
[OK]

I want to open explorer as that user to quickly browse folders and test rights. Is there a way to do this without logging out?
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39681458
thats normal,  'explorer.exe' is part of windows.
You could test using something else like notepad executed with 'run as'.
0
 

Author Comment

by:JohnMan777
ID: 39690373
I need an explorer window, not just notepad.

I want to test folder permissions. Adding, deleting, modifying, etc. I ultimately setup a laptop next to my main station so I could test the permissions without having to log out of my main station repeatedly.

There must be a better way to do this. I'm sure I'm not the only one who has wanted this.

Is there a way to have an explorer window open on my main station that would work the same as the explorer window that I opened from my 2nd computer that was logged in as a lower level user?

Thanks again for the help,

John
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 5

Expert Comment

by:warddhooghe
ID: 39690421
Doesnt make much sence what you are asking for.
I assume you're still learning about NTFS security since the 'effective permissions' tab is all you really need.

May I point out that when you make a security change in the positive way (meaning giving someone more permissions) that person needs to log off and on again before it works.

Maybe useful http://technet.microsoft.com/en-us/magazine/2005.11.howitworksntfs.aspx

BR,
Ward
0
 

Author Comment

by:JohnMan777
ID: 39690588
I simply want an explorer window to open that has the same privileges as a different user. Either an admin user or a low level user. Under XP, this was possible.  See here:

Article

They killed it in Vista and above. That article mentions something from the 2008 toolkit, but I can not get to the link to get the answer.

Any addition help is appreciated.

Thanks again,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39691058
My apologies, didnt know that existed.
Perhaps the tool is on the Win 2008 installation CD, there should be a folder 'support tools'.
0
 

Author Comment

by:JohnMan777
ID: 39691115
I found a solution!  Your mention of notepad gave me an Idea.

Win7 will not allow two explorers to run...period.  However, when I open Notepad.exe as a different user, I can use the file location box that opens when I choose File > Open as a quasi explorer to test access. I can double click folders, try to delete files, test read only....everything just like I was that user!

If this is what you'd meant, please let me know and I will assign you the credit.

Thanks again for the help,

John
0
 
LVL 5

Accepted Solution

by:
warddhooghe earned 500 total points
ID: 39691431
obviously thats what i meant, you can do it with any program that has a open/save option. Notepad is the simplest.

You're welcome,

Best regards,
Ward
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now