Over 1 million tech questions and answers.

Local Security Policies vs NTFS Permissions

Q: Local Security Policies vs NTFS Permissions

Hi All.

What exactly is the difference between Local Security Policies and NTFS permissions.
Scenario: I want to add a power user to my computer with the following do's and don'ts:

Do's:
Can Do all the things a Power user can such as: Installing programs and devices, drivers, access command prompt
Don'ts
No Administrative Privileges, especially NOT to be able to use the 'Take Ownership' permission
Cannot delete anything except things he has Ownership of(created himself)
Cannot Uninstall Any programs, except the Ones he installed
Cannot access unauthorized folders and files as set up by permissions
I can add him to Power Users group, but then he won't be able to add devices right...
As I understand, NTFS permissions:
Enable you to set Modify, Execute, Read and Write permissions on files, folders and programs right...(since a program is just a file)

and

Local Security Policies:
Enables you to do specific things such as: Deny a user access to command prompt, or regedit. Allow a user to install programs but not drivers etc...
Or am I wrong here?
Thank you

RELEVANCY SCORE 200
Preferred Solution: Local Security Policies vs NTFS Permissions

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Local Security Policies vs NTFS Permissions

NTFS Permissions Overview

Windows Local Security Policy Settings - Microsoft Windows Tips

Hope the above links explain the difference between the two.

Read other 3 answers
RELEVANCY SCORE 131.2

Hi All

What exactly is the difference between Local Security Policies and NTFS permissions?
Scenario: I want to add a power user to my computer with the following do's and don'ts:

Do's:
Can Do all the things a Power user can such as: Installing programs and devices, drivers, access command prompt
Don'ts
No Administrative Privileges, especially NOT to be able to use the 'Take Ownership' permission
Cannot delete anything except things he has Ownership of(created himself)
Cannot Uninstall Any programs, except the Ones he installed
Cannot access unauthorized folders and files as set up by permissions
I can add him to Power Users group, but then he won't be able to add devices right...
As I understand, NTFS permissions:
Enable you to set Modify, Execute, Read and Write permissions on files, folders and programs right...(since a program is just a file)

and

Local Security Policies:
Enables you to do specific things such as: Deny a user access to command prompt, or regedit. Allow a user to install programs but not drivers etc...
Or am I wrong here?
Thank you
 

Read other answers
RELEVANCY SCORE 79.6

Do anyone have idea about windows Vista local security policies settings? where are they located? If they are not with Windows Vista, where can I get them for my computer?

MY computer is windows home basic

I like these policies...

please help
 

A:Local Security Policies

Policies are set in many locations throughout the system, in files, and primarily in the registry.

There is no Microsoft Management Console in Home Basic, and so no way to use the Group Policy snap-in. It cannot be installed or used with Home Basic.
 

Read other 2 answers
RELEVANCY SCORE 78.8

I need to map a network for school, but the network is incompatible with the default security. My school's website had a set of instructions for how to make my computer compatible, but they required going into Administrative Tools and then to Local Security Policies, and for some reason Local Security Policies is not there.

Basically my question is where the heck did Local Security Policies go? I feel like this should be an easy enough question, but nothing I've tried has worked.

Any suggestions?

Thanks,
Paul

A:Cannot find Local Security Policies

Hello Paul, and welcome to Vista Forums.

I'm sorry, but secpol.msc (Local Security Policy) is not available in the Vista Home Basic edition. It's only available in the Business, Ultimate, and Enterprise editions.

Sorry.

Shawn

Read other 1 answers
RELEVANCY SCORE 78.8

Network: NT Domain type (no ADS)
Workstations: WinXP Pro & Win2k

I'm trying to find a way to distribute security policies to other workstations on the network. Specifically User Rights Assignments. I'm convinced that I cannot use registry to change local security policies so I need to create a file that has configuration information that if copied to other workstations, it can then transfer the new security settings to those workstations. I searched and found a few sites that state it can be done but I'm having trouble deciphering the instructions.

Help me out TSG! Thanks in advanced!
 

A:Distributing Local Security Policies w/No ADS

The only way I think you could do it is with the NT Policy Editor.
http://support.microsoft.com/kb/910203
 

Read other 1 answers
RELEVANCY SCORE 76.8

Hi,
I apparently have some remnants of a previous infection.
I cannot modify my registry with regedit (haven't tried any other tool yet) and I wanted to add additional user access to my network and found out that I cannot modify that either.
As for the Registry, I tried to modify the permissions (I'm admin) for specific keys, but it wouldn't allow me doing that. I added an additional key to set DisableRegistryTools to 0, no effect. Actually the key is there but doesn't unblock the saving.
I did some sweeps with Superantispyware, Ad-Aware, Malware, all no results. So now where to go, anyone an idea?
I'm running WIN XP Pro SP2, avast, superantispyware

Read other answers
RELEVANCY SCORE 76.8

Hi all,

I'm trying to make a batch file to edit a local security policy on XP Pro Machines. Basically what I want to do is edit the run as service policy and add one user to it. so maybe if there is a command that would look something like this

[codebox]ntsecurity set SeRunAsServiceRight /add Domain\Username[/codebox]

Otherwise if that's not possible, can I edit the registry to do something like that. Like add a Registry entry like

[codebox]HKEY_LOCAL_MACHINE\Software\Test
"TestValue"="domain\username"[/codebox]

Any help would be amazing.

A:Edit Local Security Policies Using Command Line

What would be the end result of such editing?

Read other 7 answers
RELEVANCY SCORE 76.8

how to handle this?

did system restore.. no change to ntfs local disk.
local disk changed to ntfs. cannot open local disk C:
no windows action center,
not working all including:
Device Manager,
Remote Settings,
System protection
not format...
is there any other way except reinstallin OS again.
My os is win 7 ultimate..

A:Local Hard Drive (*c) changed to NTFS by clicking on "permissions of r

That sounds like the side effect of a virus.
Do you get the same behavior in safe mode?

Read other 4 answers
RELEVANCY SCORE 74.4

I was screwing around with the permissions in Win 7 Premium, C:\Windows\winsxs and I now have them in a mess! System Restore wont work. Trying to rest the permissions with icals.

From an elevated command prompt I did this:
C:\Windows\winsxs>icacls * /T /Q /C /RESET

After running awhile I got this message:
successfully processed 73649 files; Failed processing 0 files

But nothing was changed?

Would someone please explain what it is I'm doing wrong?

Thanks

A:NTFS Security Permissions

  
Quote: Originally Posted by glatzfront


Would someone please explain what it is I'm doing wrong?


You changed permissions of a highly sensitive portion of the system, WinSxS is Windows. That is what you did wrong. There is no "RESET" once you make a change, the "RESET" command of icacls does not do a reset like you are thinking it does. Lets this be a lesson, DO NOT DO IT AGAIN. Reinstall Windows.

Leave NTFS permissions alone from now on, do not even look at it.






Quote:
Thanks


Welcome.

Read other 1 answers
RELEVANCY SCORE 70.8

Dear,

Can somebody help me?

My initial admin account (made with the installation of windows7) is Marie.
When I look at the Local Users and Groups snap-in of MMC, she's member of the group administrators but not of the group Users.

BUT
then I made a folder "Test".
I disabled the inheritance.
Then I gave the group Users deny permissions of this folder.
The administrators group I gave full control permissions.

The strange thing is that Marie gets also deny permissions though she's not a member of the local group Users but she's member of the group Administrators.

Can somebody give me an anwser on this problem?

Thanks in advance!!

Kind Regards.

A:Membership of local built-in group "Users" -- NTFS permissions

Please post screenshot of permissions. Please post screenshot of users members list and administrators list as well.

Read other 8 answers
RELEVANCY SCORE 63.2

 
 
 
 
Hi.  I hope I'm posting this in the right forum; if not, feel free to move it.
 
I am the sole user of my desktop which has Windows 7.  Other than some freezes/hangs and a very slow Firefox startup, my browsing is otherwise smooth.
 
I have a few issues and hopefully you can triage me, so to speak.  If you find something that is out of your scope, kindly direct me elsewhere.  I don't think I have an active infection because I've run multiple scans using a variety of programs and they all come up clean; rather, it could be the after effects of malware and policies it implemented.  Emsisoft was the only program that found something - setting.disabletaskmgr and setting.disableregistrytool - which I deleted.
 
First, I need to know whether I've been hacked.  Yesterday I stumbled upon the netstat.exe tool and when I run it, I see an IP address that isn't mine as well as a ton of active connections which concerns me because I am the only user.
 
There are entries for maconfig_tcp and maconfig_udp as programs my Firewall allows.  I can't find any information on what those entries are.
 
Corruption is also a problem.  Windows Search - There are *content source MAPI* Event ID 3036 errors galore in my Event Viewer and I have to reset Windows Search on a daily basis.  Windows Media Player - the troubleshooter is worthless.  Corruption constantly present.  I've run sfc /scannow a t... Read more

A:Possible Hack, Corruption, Permissions, Policies...

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/594336 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 36 answers
RELEVANCY SCORE 62

I added some local policies to a local machine to prevent users from doing some things. Ie; run command, display, clock.

However, its also affected my admin side as well. Is there a way to have the policies jsut enforced to the specified user or group? I know about group policies, but i have not done them locally on 1 machine, to affect one user. I've only done them via domain structure.

Would i basically create a group on the local machine, add the user, and apply the policies to that group? If so, from where do i apply these settings to a group?
 

A:Local policies....

Read other 6 answers
RELEVANCY SCORE 62

Hi everybody,
I'm new in thios forum and new in Windows 7
I have a question, if someone can help me, i will be grateful.
How can i set to my Win 7 local polocies for users.
I want only my user to LogIn in my Computer, and everybody to have access denied

Tanks !

A:Local Policies

Hello Marian, and welcome to Seven Forums.

The easiest way to do this is to only have one user account (yours) on the computer, and create a strong password for it. This way they will not be able to log on to your user account at startup without knowing the password.

Hope this helps,
Shawn

Read other 1 answers
RELEVANCY SCORE 61.2

Over the weekend we rolled out a new database that necessitated upgrading all the PC's to Access XP. In order to do that I first uninstalled every Office installation entirely and then reinstalled the complete package.

All went well except for one laptop. When the install begins the machine responds with the error message 'The System Administrator has set policies to prohibit this installation.' I've looked at the local policies but couldn't find anything that referenced installing software. Furthermore, I've logged on as a domain admin and also tried local admin and still I get the message.

I've asked our network admin if he's set anything and he said no. Anyone have any ideas about this? Very confusing.

Cheers.
 

A:Changing Local Policies in W2K

You can change the policies by going to:

Start>Settings>Control Panel>Administrative Tools>Local security Policy.

In order to change these you most have administrative rights to the computer. Also any domain polices you have in place override local polices.
 

Read other 2 answers
RELEVANCY SCORE 61.2

I have a computer setup with local (NO DOMAIN) policies to enforce some rules, so that end users cant do certain things.

I would like to take those settings (done in gpedit.msc) and copy them and apply them to 2 other computers as well.

Does anyone know how to do so?
I know that MMC might be what i should look into, and i understand how to add the snap-in "Group Policy" and save all the settings. But then how do i get that imported on the next computer?
Any help would be great!!!
 

Read other answers
RELEVANCY SCORE 60.8

When i run up Windows XP run GPEDIT.MSC go to computer configuration --> local policy --> user rights assignment

--> Logon as service. The add users group is greyed out why is this ? I have logged in as an administrator ?

How can i add users to this local policy ?

Thanks

Kev

A:Local policies on Windows XP Dilema

Hi Windows XP Whizzkids anyone seen my issue before ?. Sorry if i ask dumb questions i am only learning IT recently

Thanks,

Kev

Read other 2 answers
RELEVANCY SCORE 60

We are setting up stand alone win2k workstations that have to be locked down pretty tight. We cannot create an image to distribute due to breaking the warranty. We have been manually locking down the machines through the mmc, local computer policy. This has become tedious as so many settings have to be enabled and if something is forgotten or missed it is a pain to get back in, disable enable and so on. Is there a way to copy the files that holds these settings and distribute them to each PC and have them take effect? Does anyone know an easier way to do this? Thanks!
 

A:Copying local windows 2000 policies

who is the manufactuer of the pc that says putting an image on voids the warrenty? we use dell and while someitmes their techs wince at the fact we use images they still offer support to the pcs, maybe you should bark higher up the food chain and tell them if they want your continued buisness they will support their hardware with any image you put on, i mean lets be serious a win2k image is a pretty standard thing...greg
 

Read other 1 answers
RELEVANCY SCORE 60

I had a network guy come in and he locked a lot of my group policies out. It shows that the Administrator account is locked and disabled. I need to get into this computer and it is urgent. I have tried enabling the administrator account doing net user administrator /active:yes and it said it was successful but I still had no effect. When you restart the computer it goes back to disabled
If I go to add a local user to the policy and it doesn't show. Tried adding any form of administrator user and when you restore it says that the administrator account is locked. Also when you restart it shows the administrator account disabled.

The computer refuses to add any users to the local group. Is there anyway I can add one so I can fix this laptop that a dumbass network guy set up without a restore.

This all had to be done through CMD as well.......

If you help me I will love you long time
Thanks,
Justin

A:Network Group Policies Help: Need to add Local User

  
Quote: Originally Posted by JTNKTZ


I had a network guy come in and he locked a lot of my group policies out. It shows that the Administrator account is locked and disabled. I need to get into this computer and it is urgent. I have tried enabling the administrator account doing net user administrator /active:yes and it said it was successful but I still had no effect. When you restart the computer it goes back to disabled
If I go to add a local user to the policy and it doesn't show. Tried adding any form of administrator user and when you restore it says that the administrator account is locked. Also when you restart it shows the administrator account disabled.

The computer refuses to add any users to the local group. Is there anyway I can add one so I can fix this laptop that a dumbass network guy set up without a restore.

This all had to be done through CMD as well.......

If you help me I will love you long time
Thanks,
Justin



Justin

I would think the network IT guy did that for a reason and if their policy is to lock out the admin account they want it that way. I would suggest you call the IT guy with an explanation as to why you need it and perhaps he will make an exception.

\What exactly do you need to do anyway?

Read other 2 answers
RELEVANCY SCORE 59.2

I implemented SRP on a Windows 7 Pro PC that I was logged into as the Local Administrator. In Enforcement I ensured that "All users except local administrators" was selected. I then set the default Security Level to Disallow. At this point I attempted to open Windows Update from the Start menu and was blocked. I ran gpupdate, still blocked. I rebooted the PC, still blocked. I changed the default Security Level back to Unrestricted and was no longer blocked. Why is'nt the "All users except local administrators" enforcement variable working? This is the 9th PC I've setup with SRP, all the same configuration, and all the others work fine. Also, this PC is not part of a domain. Any ideas?

A:SRP (Software Restriction Policies) blocking local Administrator

Try Software Restriction Policies is wrongly applied to Administrator.

Read other 1 answers
RELEVANCY SCORE 59.2

I implemented SRP on a Windows 7 Pro PC that I was logged into as the Local Administrator. In Enforcement I ensured that "All users
except local administrators" was selected. I then set the default Security Level to Disallow. At this point I attempted to open Windows Update from the Start menu and was blocked. I ran gpupdate, still blocked. I rebooted the PC, still blocked. I changed the
default Security Level back to Unrestricted and was no longer blocked. Why is'nt the "All users except local administrators" enforcement variable working? This is the 9th PC I've setup with SRP, all the same configuration, and all the others work fine. Also,
this PC is not part of a domain. Any ideas?

Read other answers
RELEVANCY SCORE 59.2

Running into an odd issue.  I have a Windows 7 x64 box running IE9.  When IE9 is install I can do Start > Run > gpedit.msc and get into local group policy.  I can then navigate to User Config > Admin Temp > Windows Components >
 Internet Explorer.
The issue happens once I install IE11 on that machine.  Once I install IE11 on that machine I wanted to go into group policy and enable enterprise mode for some testing purposes.  Once IE11 is installed if I do Start > Run > gpedit.msc I
get:
Encountered an error while parsing:
Resource '$(string.BlockImmersiveBrowser)' reference in attribute displayName could not be found
File C:\Windows\PolicyDefinitions\inetres.admx, line 34666, column 250

Eventually the local GP will display after I click OK on the error above.  However, when I navigate to User Config > Admin Temp > Windows Components the Internet Explorer section is now gone.  I've done this on 3 separate boxes, all Windows
7 x64 going from IE9 to IE11 and they all exhibit this exact same issue.  Anyone have any ideas?

Read other answers
RELEVANCY SCORE 58.8

Dear forum readers,

I know it's possible to configure Wireless settings by policy. However it seems absent from the local group policy, which is where I would like to put it.

How can I do ? Maybe it would work if I copy the corresponding "Wireless Network (IEEE 802.11) Policies" section from a non-local policy template, then import in my local group policy ? I would need such a template though, since I don't know how it looks like.

I'm speaking of the security templates here (the inf files), not the admx files which I have already since I have W10 Pro...

Read other answers
RELEVANCY SCORE 58.8

Hello everyone

Is there any Third party tool to reset local policies, services, registries, windows update service to default in Windows 7.Earlier for windows xp i used to subinacl it was great tool from Microsoft but its not supported in windows 7.

A:Tools to reset local policies registries to default in windows7

Hi risingflight,

I am unaware of such a tool, and I don't think you can default the registry, but please find
the following tutorials that cover resetting Policies/Windows Update/Services

http://www.sevenforums.com/tutorials/214461-local-group-policy-reset-default.html
Services - Restore Default Services in Windows 7
Windows Update - Reset

For registry issues, you can use CCleaner, it has a Registry defrag option
and also a Registry cleaner (use wisely)

Hope this helps.

Cheers

Dave

Read other 6 answers
RELEVANCY SCORE 58

Hello Forum,

I have a base image, where I have configured the default profile using the administrator account. I created user ids, but did not log into these ids. I used Local Group Policy to edit the policy of one non administrator ids I created. After sysprepping the computer, and successfully copying the profiles, the user is not configured with the group policy settings. Any idea why this is happening or how to get around this problem?

Same deal as this guy Sysprep deletes Local Group Policy but his question was never answered.

Help.

A:Local Group Policies created for user, but sysprep removes settings

anybody?

Read other 2 answers
RELEVANCY SCORE 58

Hi my name’s Chris.  I recently had a thread on this forum but it has since been locked.  I wanted to post the solution in case other people have similar issues in the future.
 
A few months ago I started noticing that Symantec Antivirus wouldn’t boot, I couldn’t run Malwarebytes anti-Malware either.  Trying to run Malwarebytes would result in a message saying there was a software restriction policy in place.
 
I checked with the company that does our IT stuff but they said there as no kind of domain level restrictions on anything.
 
Basically, a group policy was enabled on my local machine.
 
The following 6 entries were discovered after a scan with Farbar Recovery Scan Tool...
 
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ATTENTION
 
 
Exactly how this happened is still a mystery. I... Read more

Read other answers
RELEVANCY SCORE 56.8

Hi, I'm having a conflict with NTFS permissions or so it seems. I'm running a dual-boot environment with XP and VISTA. I have a shared drive between them with some folders I need to secure with permissions for different users. However, when I set permissions up on XP it clears all permissions from VISTA. And vice versa. So I thought NTFS permissions were part of the file system, not the OS. Help?
 

A:NTFS Permissions

They will be inherited from each parent. You better set up 2 different drives, or make it FAT32 so there are no permissions issues.
 

Read other 2 answers
RELEVANCY SCORE 56.8

Hello there

i am just learning a bit about NTFS permissions, and have been looking through the access control help pages to get some information.

I only have vista home premium, so i know that i cannot manage groups.
So what can you actually manage if you only have home premium, i would assume you can manage other "standard accounts.

Anyway i was just looking at the windows folder on my admin account and on the windows folder properties on the sercurty tab under "group or user name"
I could see my admin account, and standard account and "system" .

But also "creator owner" and "Trusted installer" can you tell me what these mean.


And also when i ckick on system or administrator the permissions are blank, but there are a few permission on the standard account...

A:NTFS permissions

NTFS Explained:
NTFS.com NTFS File System. Data Recovery Software.

Creator Owner
Knowledge Base - Creator Owner Explained

Read other 2 answers
RELEVANCY SCORE 56.8

Jane has a folder on the PDC and she is locally mapped to that folder. She has full control of NTFS permission of the folder as well as the domain admin (this folder is not shared out). However, when she logged in from her workstation and open any file in her folder (located on PDC), she got a read-only file, she can't save or delete any thing. while if domain admin logs in from her workstation, he can do anything, read, change and delete..etc. Then, a new folder created for her on the PDC and gave her a full control on that, and again she got read-only permission when she tried to save or delete anything in that new folder. I dont' understand why. Can someone help please?

thanks
Thao
 

A:NTFS permissions ?

Read other 7 answers
RELEVANCY SCORE 56.8

I have a single file I have applied special permissions to - The permissions are to allow everything except Ful Control\Delete\Take Ownership -There is nothing disallowed.

The problem is the other users cannot save the spreadsheet. the only way they can do this is to save a copy of it to their desktop. Modify it and then place it back in the same location?

Now there is an Everyone group with only read and Execute but this would mean they would not be able to copy it back out to the directory no?
 

A:NTFS permissions.

What groups has the "everything except full control" rights?
 

Read other 1 answers
RELEVANCY SCORE 56.8

Hi all,
There is a one drive synced shared folder on local disk D which contains below files and folders
 OneDrive folder-
    Folder A
    Folder B 
    Folder C
    Excel workbook 1
    Excel workbook 2
    Excel workbook 3
    Excel workbook 4
I want to share Main OneDrive Folder with every user in the network and add below restrictions,

1) Users should not be able to delete,Rename any files or folders in Main OneDrive folder.
2) Users Should not be able to create any files or folders in Main One Drive folder.
3) Users should be able to simultaneously (6 users) Edit and save all excel workbooks in Main One drive folder.

4) Users should not be able to create any folders in Folder A
5) Users should be able to create,edit,rename files in Folder A

6) Users should be able to view the content in folder B and C
7)Need to give full control of shared folder to 3 users.

Is it possible to create a setup like this? Ive been trying to do this from a week now and Excel workbooks always end up locked. But NTFS permissions really hard to understand.Really appreciate if you guys can help  me out.

Read other answers
RELEVANCY SCORE 56.8

Hello,

I have 2 files: a batch file (radmin.bat) and an executable (radmin.exe). The batch file executes radmin.exe

Is there a way I can set permissions on the batch file so that users can execute it, but not view the contents of it? (the commands)

Thanks in advance,
Adam
 

A:NTFS permissions

Read other 16 answers
RELEVANCY SCORE 56.8

hi,

I already know what

read
write
full access
modify permissions are but,

I dont get this NTFS permissions thing, I thought NTFS was just a File system.
Can permissions ONLY be bused on partitions or volumes that are formatted using the NTFS file system?

A:NTFS Permissions

Instant reference material, http://www.google.com/search?hl=en&sou...mp;oq=&aqi=Louis

Read other 4 answers
RELEVANCY SCORE 56.8

is there a way i can let somebody watch my movies, listen to my music without them being able to copy the file?

A:NTFS permissions

I don't think so, read permission is required for both.

Read other 1 answers
RELEVANCY SCORE 56

Hi,
if i disable inherit permission and i create a subfolder what permission does the new folder get?
Thanks

A:NTFS permissions inherited

Should be just the account that created the folder.

Read other 2 answers
RELEVANCY SCORE 56

Hello,

My company, a small non-profit, recently had a new server installed with Windows 2003 SBS. When the folders were copied over from the old server, the permissions were lost. Now everyone has permissions to view everyone else's home folder. We do not want this!

What we have is a folder named "Users Shared Folders" with the following share permissions:
Domain Admins - Full Control
Domain Users - Full Control
Folder Operators - Full Control
On the security tab of the same folder the following permissions are in place:
Domain Admins - Full Control (no special permissions)
Domain Users - Full Control (no special permissions)
Folder Operators - Full Control (no special permissions)
System - Full Control (no special permissions)

What is the best way to lock down the Users Shared Folders so that only the owner of the folder has full control over their own home folder?

I am new to this and do not want to screw up the permissions. Should I remove the Full Control from the Users Shared Folder for Domain Users and then give each individual user Full Control of their own home folder and access to any other folders they need?

Any advise or help would be greatly appreciated. Thank you.

Feral Geek
 

A:Share/NTFS Permissions

Right click the folder and click properties.
Click the security tab and click advanced.
Click the owner tab and set the owner to the owner of the folder.
Click apply and OK to return to the basic security screen.
Click on each user that you don't want to have access
and click remove.
Do not remove administrator as it may be needed in the future.
Click apply and OK.
If the user account does not exist on the server,
you will need to create it.
 

Read other 1 answers
RELEVANCY SCORE 56

I'm a little late (okay, 3 years or so), but I saw this post asking about NTFS permissions tools:

May I know is there any tools for NTFS permissions reporting? Said it can tell us how many permission sets exist under a folder (includes subfolders and files), and what subfolders/files are under each permission set...etc. Thanks a lot!Click to expand...

I just found one NTFS permission tool that has a really nice UI and shows user and group access reporting, CSV reports etc. It's not free, but they do give a free trial. The product is called Aprigo NINJA.

I've only tried it for a couple of days, but is seems to work pretty well. It's SaaS, so some companies probably won't be able to use it (regulation, compliance, etc.), but I thought I'd post it here since the only forum post I could find was from 2007. If anyone has found anything else- especially a free tool- I'd love to hear it.

Thanks!
 

A:NTFS Permissions Tool

I guess it is nice to have a GUI especially with reporting.
I have only ever used Xcacls
You could also use
AccessEnum
AccessChk
ShareEnum
 

Read other 2 answers
RELEVANCY SCORE 56

Does anyone know if there is a way or software, to backup & restore NTFS permissions? I don't want to backup the data, just the permissions on a folder. Thanks
 

A:Backing up NTFS permissions

Veritas backup exec does this but you have to have a valid backup to restore the directory from. With Veritas you just check the folder and uncheck the contents of the folder and you will only backup the folder itself.
 

Read other 1 answers
RELEVANCY SCORE 56

I have accidentally removed the "SYSTEM" group from one of my drives. Is there anyway to restore these permissions??

Thanks
 

A:Restore NTFS Permissions

Open Windows Explorer, right click on the drive in question and select properties, go to the security tab, in Group or user names section click Edit, then in the window that opens click Add, then type SYSTEM into the box, hit OK, OK, OK which closes all the properties windows.

Do the properties thing again on the drive, Security Tab, click Edit, then highlight SYSTEM and be sure "full control" is ticked in the bottom pane, hit OK, OK, OK

.
 

Read other 2 answers
RELEVANCY SCORE 56

Correct default NTFS permissions on disks after W7 installation. May be is some tutorial how to tune permissions.

A:Correcting NTFS permissions

Hello retroTimeKeeper,

Here's a tutorial on permissions, but what is happening that you are trying to correct?

Permissions - Allow or Deny Users and Groups

Read other 1 answers
RELEVANCY SCORE 56

Does anyone know if there is a way or software, to backup & restore NTFS permissions? I don't want to backup the data, just the permissions on a folder. Thanks
 

Read other answers
RELEVANCY SCORE 56

Hi everyone,

I have an external HDD formatted as NTFS (supports file bigger than 4GB). After several times copying back and forth to the HDD between my new and old computers, now the whole file system in the external HDD doesn't seem to work properly anymore , expecially with the permission, I'm frequently asked to be admin in order to access some folder, which are not neccessary at all like my music folder.

I tried to reset all the permissions using windows explorer but it takes quite a lot time (my hdd is 500gb) and it get stopped in the middle due to some access denied error.

Can anyone suggest me a way to remove all this nuisances (reset the security options for all files and folders), I only want a FAT32 like HDD with support for file > 4GB,
 

A:NTFS Permissions Messed Up !!!

Read other 14 answers
RELEVANCY SCORE 56

Does anyone know if you can use NTFS file permissions on XP Home edition? I have a lot of files on my pc I would like to set security on. I used it in XP Pro at school and it was great.
 

A:NTFS File Permissions

XP Home doesn't have the security features at the file level like XP Pro does ... The link below explains the differences. I believe you're referring to the "Access Control" features ...

http://www.microsoft.com/windowsxp/pro/howtobuy/choosing2.mspx
 

Read other 1 answers
RELEVANCY SCORE 56

On my W2K server i have a folder that hasn't got any NTFS permissions.
The location is C:\WINNT\system32\dhcp\backup\Jet\old. The folder in question - 'old' - cannot be copied, moved, renamed or deleted.

I have errors in my event log concerning the dhcp database,which are to do with backing up and compacting the database. I'm sure those errors are connected with the folder that i cannot delete.

I have tried to google for the folder with no permissions but cannot find anything.
BTW the drive is formatted in NTFS, which is why i dont understand why this folder has no permissions. I have stopped all dhcp services etc. and still cannot do anything with this folder.

Any help would be appreciated.
Thanks in advance
 

Read other answers
RELEVANCY SCORE 56

I've just upgraded a system to 2000 pro. It's on a network. I notive that when I right click on a folder on the w2k system it's not giving me an option to password protect it.

I though I worked on another 2k machine that allows you to set a password on it. I left the disk in FAT32 when I upgraded, is this the problem??

Secondly, this system is on a small LAN, I'd like to give people access to only one folder on this PC, but it seems once the c drive is given permission to share, you can "unshare the folders within it?" is this right??
 

A:W2K NTFS or FAT32 for permissions

Read other 13 answers
RELEVANCY SCORE 55.6

I'm not sure if this is the correct forum, but none of the others looked specific to this. And I apologise that I may not be asking the right questions - it is difficult for me to even understand what is niggling at me, because I don't understand what my OS is doing sometimes. I'll try and highlight questions in bold as they occur to me, the kind of things that will help me to understand how my PC (OS) works.

Okay, that said, here's my setup. I have always been the only user on my PC. Just one PC, one person.

My understanding, going back to my first 486, is that a Windows PC is made up of a formatted hard drive (Fat32 or - later - NTFS format, which affect how big a file can be, and compatibility with other operating systems), and a load of files, which generally have an extension which determines what it does. Files can be programs (.exe, .bat) or collections of non-executable data that need a program to understand (.txt, .docx, .mp3). Because they're just all files, there should be no problem backing them up, transferring them to another PC and so on.

I think my problems began when I moved from Windows XP to Windows 7 in 2012, but it is hard to remember back for sure. Let's assume I'm right. I was generally happy with Windows 7, it was definitely more stable, though Windows Explorer seemed more packed with options I didn't want to use and couldn't hide (Libraries, Homegroup, a computer name, Control Panel etc - I just wanted C:, D: etc, and maybe the "Favorit... Read more

A:Need help understanding Windows NTFS permissions

I can't help you much, but I'll just give you my experience.

I'm like you: one PC; one human, sole proprietor and operator; close to 100,000 data files from various sources--Word, Excel, music, video, jpg, etc, as well as standard Windows files; no home network; no use for libraries, homegroup, etc. I like as much simplification as possible.

I copy and move my data files around constantly---to internal drives mounted internally, to internal drives mounted externally in a dock, and to USB flash drives connected to a standard USB port on the back of my PC. Never had a significant problem beyond failing drives.

I build my own PCs and have used nearly all Windows operating systems released in the last 20 years. I always carry over hundreds of gigabytes of data from PC to PC.

Having said that as background:

I frankly cannot recall any permission issues and have only a vague understanding of permissions, much like yourself. If I did start to have permission issues, I would be pretty much at a loss, just as you are.

Most of my data files were not originally made by me on any of my PCs. They were obtained. Most have been modified or edited in some way after they were obtained.

Regarding naming: every time I install Windows, I use a new "computer name" derived from my initials and the current date---something like JG-04-11-14. This has never posed a problem.

I've never used passwords to log onto my own PC.

I've never had any issues that I could trace to the file sy... Read more

Read other 9 answers
RELEVANCY SCORE 55.6

Hi everyone,
I'm running Win XP Pro and have turned off advanced file sharing. I want to set advanced permissions for my Shared Documents folder, but I can't see my other networked computer. My network is very simple, 2 computers (the other is running XP Home) both connected to a 4 port router/dsl modem. I want to create a new user, OR group for the Shared documents folder on the XP pro machine, that is specific to only my Xp home computer having acess to it, so that I can tighten the restrictions on the "everyone" group. However, when prompted where to look for new users, I can only see my own (xp pro) computer, and not the other one. Both computers are in the MSHOME workgroup, and both can see each other in windows explorer. Why can't I search for users on my xp home machine?

Thanks
 

Read other answers