Solved

Test NTFS Permissions without logging out

Posted on 2013-11-26
9
232 Views
Last Modified: 2013-12-02
I want to test the permissions as if I were a lower level user, not administrator.  I could log out and log in as the lower level user from my workstation, but I want a faster way.

What is the best way to do this?  Can I open an explorer window as that user? I've tried "Run As" but it doesn't work.

I'm using windows 7 on my workstation.

Thank you,

John Caspary
0
Comment
Question by:JohnMan777
  • 5
  • 4
9 Comments
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39679606
make a shortcut to cmd, do a 'run as' on that, and you'll have a cmd environment as that user, execute what you want to check from that.

if it's  really just the ntfs permissions you want to verify for a specific user or group without going through all his group memberships, open the security tab of the file/folder u want to check, click advanced and then in the 'effective permissions' tab , click select , change domain/user/group as required and ok, the resulting list of permissions is what he/she will have on it.
0
 

Author Comment

by:JohnMan777
ID: 39681189
When opening explorer from the command prompt, the following appears:

"Windows cannot access the specified device, path, or file.  You may not have the appropriate permissions to access the item."
[OK]

I want to open explorer as that user to quickly browse folders and test rights. Is there a way to do this without logging out?
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39681458
thats normal,  'explorer.exe' is part of windows.
You could test using something else like notepad executed with 'run as'.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:JohnMan777
ID: 39690373
I need an explorer window, not just notepad.

I want to test folder permissions. Adding, deleting, modifying, etc. I ultimately setup a laptop next to my main station so I could test the permissions without having to log out of my main station repeatedly.

There must be a better way to do this. I'm sure I'm not the only one who has wanted this.

Is there a way to have an explorer window open on my main station that would work the same as the explorer window that I opened from my 2nd computer that was logged in as a lower level user?

Thanks again for the help,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39690421
Doesnt make much sence what you are asking for.
I assume you're still learning about NTFS security since the 'effective permissions' tab is all you really need.

May I point out that when you make a security change in the positive way (meaning giving someone more permissions) that person needs to log off and on again before it works.

Maybe useful http://technet.microsoft.com/en-us/magazine/2005.11.howitworksntfs.aspx

BR,
Ward
0
 

Author Comment

by:JohnMan777
ID: 39690588
I simply want an explorer window to open that has the same privileges as a different user. Either an admin user or a low level user. Under XP, this was possible.  See here:

Article

They killed it in Vista and above. That article mentions something from the 2008 toolkit, but I can not get to the link to get the answer.

Any addition help is appreciated.

Thanks again,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39691058
My apologies, didnt know that existed.
Perhaps the tool is on the Win 2008 installation CD, there should be a folder 'support tools'.
0
 

Author Comment

by:JohnMan777
ID: 39691115
I found a solution!  Your mention of notepad gave me an Idea.

Win7 will not allow two explorers to run...period.  However, when I open Notepad.exe as a different user, I can use the file location box that opens when I choose File > Open as a quasi explorer to test access. I can double click folders, try to delete files, test read only....everything just like I was that user!

If this is what you'd meant, please let me know and I will assign you the credit.

Thanks again for the help,

John
0
 
LVL 5

Accepted Solution

by:
warddhooghe earned 500 total points
ID: 39691431
obviously thats what i meant, you can do it with any program that has a open/save option. Notepad is the simplest.

You're welcome,

Best regards,
Ward
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question