Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Test NTFS Permissions without logging out

Posted on 2013-11-26
9
Medium Priority
?
238 Views
Last Modified: 2013-12-02
I want to test the permissions as if I were a lower level user, not administrator.  I could log out and log in as the lower level user from my workstation, but I want a faster way.

What is the best way to do this?  Can I open an explorer window as that user? I've tried "Run As" but it doesn't work.

I'm using windows 7 on my workstation.

Thank you,

John Caspary
0
Comment
Question by:JohnMan777
  • 5
  • 4
9 Comments
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39679606
make a shortcut to cmd, do a 'run as' on that, and you'll have a cmd environment as that user, execute what you want to check from that.

if it's  really just the ntfs permissions you want to verify for a specific user or group without going through all his group memberships, open the security tab of the file/folder u want to check, click advanced and then in the 'effective permissions' tab , click select , change domain/user/group as required and ok, the resulting list of permissions is what he/she will have on it.
0
 

Author Comment

by:JohnMan777
ID: 39681189
When opening explorer from the command prompt, the following appears:

"Windows cannot access the specified device, path, or file.  You may not have the appropriate permissions to access the item."
[OK]

I want to open explorer as that user to quickly browse folders and test rights. Is there a way to do this without logging out?
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39681458
thats normal,  'explorer.exe' is part of windows.
You could test using something else like notepad executed with 'run as'.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:JohnMan777
ID: 39690373
I need an explorer window, not just notepad.

I want to test folder permissions. Adding, deleting, modifying, etc. I ultimately setup a laptop next to my main station so I could test the permissions without having to log out of my main station repeatedly.

There must be a better way to do this. I'm sure I'm not the only one who has wanted this.

Is there a way to have an explorer window open on my main station that would work the same as the explorer window that I opened from my 2nd computer that was logged in as a lower level user?

Thanks again for the help,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39690421
Doesnt make much sence what you are asking for.
I assume you're still learning about NTFS security since the 'effective permissions' tab is all you really need.

May I point out that when you make a security change in the positive way (meaning giving someone more permissions) that person needs to log off and on again before it works.

Maybe useful http://technet.microsoft.com/en-us/magazine/2005.11.howitworksntfs.aspx

BR,
Ward
0
 

Author Comment

by:JohnMan777
ID: 39690588
I simply want an explorer window to open that has the same privileges as a different user. Either an admin user or a low level user. Under XP, this was possible.  See here:

Article

They killed it in Vista and above. That article mentions something from the 2008 toolkit, but I can not get to the link to get the answer.

Any addition help is appreciated.

Thanks again,

John
0
 
LVL 5

Expert Comment

by:warddhooghe
ID: 39691058
My apologies, didnt know that existed.
Perhaps the tool is on the Win 2008 installation CD, there should be a folder 'support tools'.
0
 

Author Comment

by:JohnMan777
ID: 39691115
I found a solution!  Your mention of notepad gave me an Idea.

Win7 will not allow two explorers to run...period.  However, when I open Notepad.exe as a different user, I can use the file location box that opens when I choose File > Open as a quasi explorer to test access. I can double click folders, try to delete files, test read only....everything just like I was that user!

If this is what you'd meant, please let me know and I will assign you the credit.

Thanks again for the help,

John
0
 
LVL 5

Accepted Solution

by:
warddhooghe earned 1500 total points
ID: 39691431
obviously thats what i meant, you can do it with any program that has a open/save option. Notepad is the simplest.

You're welcome,

Best regards,
Ward
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question