Solved

Test NTFS Permissions without logging out

Posted on 2013-11-26
9
233 Views
Last Modified: 2013-12-02
I want to test the permissions as if I were a lower level user, not administrator.  I could log out and log in as the lower level user from my workstation, but I want a faster way.

What is the best way to do this?  Can I open an explorer window as that user? I've tried "Run As" but it doesn't work.

I'm using windows 7 on my workstation.

Thank you,

John Caspary
0
Comment
Question by:JohnMan777
  • 5
  • 4
9 Comments
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39679606
make a shortcut to cmd, do a 'run as' on that, and you'll have a cmd environment as that user, execute what you want to check from that.

if it's  really just the ntfs permissions you want to verify for a specific user or group without going through all his group memberships, open the security tab of the file/folder u want to check, click advanced and then in the 'effective permissions' tab , click select , change domain/user/group as required and ok, the resulting list of permissions is what he/she will have on it.
0
 

Author Comment

by:JohnMan777
ID: 39681189
When opening explorer from the command prompt, the following appears:

"Windows cannot access the specified device, path, or file.  You may not have the appropriate permissions to access the item."
[OK]

I want to open explorer as that user to quickly browse folders and test rights. Is there a way to do this without logging out?
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39681458
thats normal,  'explorer.exe' is part of windows.
You could test using something else like notepad executed with 'run as'.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:JohnMan777
ID: 39690373
I need an explorer window, not just notepad.

I want to test folder permissions. Adding, deleting, modifying, etc. I ultimately setup a laptop next to my main station so I could test the permissions without having to log out of my main station repeatedly.

There must be a better way to do this. I'm sure I'm not the only one who has wanted this.

Is there a way to have an explorer window open on my main station that would work the same as the explorer window that I opened from my 2nd computer that was logged in as a lower level user?

Thanks again for the help,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39690421
Doesnt make much sence what you are asking for.
I assume you're still learning about NTFS security since the 'effective permissions' tab is all you really need.

May I point out that when you make a security change in the positive way (meaning giving someone more permissions) that person needs to log off and on again before it works.

Maybe useful http://technet.microsoft.com/en-us/magazine/2005.11.howitworksntfs.aspx

BR,
Ward
0
 

Author Comment

by:JohnMan777
ID: 39690588
I simply want an explorer window to open that has the same privileges as a different user. Either an admin user or a low level user. Under XP, this was possible.  See here:

Article

They killed it in Vista and above. That article mentions something from the 2008 toolkit, but I can not get to the link to get the answer.

Any addition help is appreciated.

Thanks again,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39691058
My apologies, didnt know that existed.
Perhaps the tool is on the Win 2008 installation CD, there should be a folder 'support tools'.
0
 

Author Comment

by:JohnMan777
ID: 39691115
I found a solution!  Your mention of notepad gave me an Idea.

Win7 will not allow two explorers to run...period.  However, when I open Notepad.exe as a different user, I can use the file location box that opens when I choose File > Open as a quasi explorer to test access. I can double click folders, try to delete files, test read only....everything just like I was that user!

If this is what you'd meant, please let me know and I will assign you the credit.

Thanks again for the help,

John
0
 
LVL 5

Accepted Solution

by:
warddhooghe earned 500 total points
ID: 39691431
obviously thats what i meant, you can do it with any program that has a open/save option. Notepad is the simplest.

You're welcome,

Best regards,
Ward
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question