Re: remove security for everyone

From: Steven Umbach (n9zrou_at_nscomcast.com)
Date: 10/27/03 

Date: Mon, 27 Oct 2003 02:42:11 GMT

You might want to try downloading the xcalcs utility and using it to revoke
permissions for the everyone group for the \winnt folder and subfolders such as
" xcalcs c:\winnt /r everyone /e /t ". You can run it from the folder it
installs to which will not be in the \winnt folder. Then you might be able to
use secedit to restore ntfs security to default settings. It is best to leave
permissions alone on the \winnt folder. Regular users already have restricted
permissions there. It is OK to change permissions on specific .exe command files
[such as the IIS Lockdown tool does] that you may want to restrict to regular
users such as ping, etc and it is generally best to remove permissions instead
of using deny. No allow permissions for a user/group is an implicit deny. Be
sure to have a backup plan which may include Ghost Images. --- Steve

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asp
  -- Download link.

"Karl" <anonymous@discussions.microsoft.com> wrote in message
news:023b01c39c0e$6d84a2b0$a301280a@phx.gbl...
> unfortunatly after denying access to winnt folder i no
> longer have the security tab available when looking at the
> folder or file properties - also cannot run user manager
> for active directory
> kb
>
> >-----Original Message-----
> >As you've discovered, "deny" means "deny". It overrides
> anything else.
> >
> >You should be able to take ownership from the security
> tab and then reset
> >the permissions.
> >
> >Oli
> >
> >
> >"Karl" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:007e01c39c00$47c7df00$a601280a@phx.gbl...
> >> ok so now i've done it - i was playing with security
> and
> >> set the c:\winnt directory to have no access by
> everyone -
> >> although i thought that i gave full rights to
> >> administrators i can no longer access winnt which means
> i
> >> can't run any admin utils etc - oops - i'm a little
> afraid
> >> of rebooting because i dont think i can login again.
> >> any help would be appreciated
> >
> >
> >.
> >

Relevant Pages

  • Re: Too late for Administrators Password?
    ... if you're going to be messing with permissions then ALWAYS FIRST SET ... folder and click the Security Options folder. ... Next, administrator, you need to have the security tab show when you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Still Read-only
    ... >That is how XP and W2k3 are. ... >read-only attribute of the folder. ... >and file permissions are different things. ... Security) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP File and printer sharing SOLVED!! A HIDDEN FIREWALL!!
    ... Then click a shared folder to open it. ... problem is probably caused by share permissions or NTFS file system ... I decided that it /had/ to be a firewall problem. ... I hadn't used any Symantec security software ...
    (microsoft.public.windowsxp.network_web)
  • Re: Q.) NTFS rights - How to Append NTFS assignments
    ... The Share is setup to Everyone with Full access and the NTFS ... security restricts the permissions to only those authorized. ... via NTFS from the parent folder being requested to change - however I ... permissions on subfolders, set up different *shares* for your departments.. ...
    (microsoft.public.windows.server.sbs)
  • Reinstalling WMP
    ... I don't know what the permissions were reset to. ... I tightened up the security on it and figured I'll ... reinstall by editing the .inf files that came with the WMP install package. ... Change the line to the new folder. ...
    (microsoft.public.security)
Quantcast