Re: How to add to Internet Favorites with UAC on?

I've seen the Integrity level get messed up. That looks correct. Just to be sure try this command in an elevated command prompt.

icacls C:\Users\Tom\Favorites /setintegritylevel (OI)(CI)low

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/


"Tom" <DontSpamMr_tsquare@xxxxxxxxxxx> wrote in message news:717927D9-0F62-416F-8A4B-3819A6B66A67@xxxxxxxxxxxxxxxx
c:\Users\Tom\Favorites BUILTIN\Administrators:(F)
Tom-PC\Tom:(I)(OI)(CI)(F)
NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
Mandatory Label\Low Mandatory Level:(OI)(CI)(NW)

OK, now, what does it mean and how does it relate to my problem? Recall, also, that I have removed the problem folders end entered new folders of the same name so that I can once again save new URLs to subfolders of Favorites.

Tom

"Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message news:e5TEONphJHA.1172@xxxxxxxxxxxxxxxxxxxxxxx
Can you post the results of icacls for your favorites folder? At a command prompt type:

icacls c:\username\favorites

or whatever the path to your favorites folder is.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/




"Tom" <DontSpamMr_tsquare@xxxxxxxxxxx> wrote in message news:29DCDCD3-5FDA-4FE8-80EF-6EC8253E87A0@xxxxxxxxxxxxxxxx

"FromTheRafters" <erratic@xxxxxxxxxxxxxxxxx> wrote in message news:uB%23tnAihJHA.4408@xxxxxxxxxxxxxxxxxxxxxxx

"Tom" <DontSpamMr_tsquare@xxxxxxxxxxx> wrote in message news:C1EBA448-8A14-4020-9E7D-EEF8E6F78122@xxxxxxxxxxxxxxxx
Interesting read. As I understand it, there are characteristics to each object that the casual observer/administrator can't see, let alone modify/control.

Yes, and access can be denied before any "permissions" are checked.

As I said above, I tried taking ownership, turning off/on protected mode etc,

I'm not sure turning off protected mode actually removes MIC from
other aspects of the system. It may just run IE elevated - I haven't
looked into it. Protected mode uses MIC not the other way 'round.



Don't think that IE ran elevated with Protected Mode turned off as IE was still unable to write new shortcuts to the "moved" folders. Recall that I as Administrator was able to write/copy files to those folders, but IE was not. Interestingly, turning off UAC "fixes" the problem, allowing IE to once again write to those "moved" folders.





but was only finally able (2 hours this afternoon) to get control of my Favorites chain by dragging each folder in my favorites off onto the desk top, creating a new folder in the Favorites chain of a similar name and then dragging the shortcut contents of the moved folders back into the new folders.

I'm guessing that my "user" account in creating new folders made it so that IE had sufficient "Integrety" (medium) to then write to them as well.



Sounds like an 'end run' around MIC to me. Glad you got it sorted. I'm
thinking your favorites data became untrusted

Only certain folders - What I did was copy/move files and folders off of the thumb drive to the new Favorites folder. I trusted the folders I moved and my problem was to somehow convince Vista to trust them too. Not sure how Vista would react to dumping a bunch of folder/file data into a new Vista system. I guess IE or (I haven't tried this) notepad wouldn't be able write to/modify that data.

due to the way you tried
to migrate it. It regained trust when you manipulated it on the desktop.

Interesting that the folders were a problem and not the shortcuts/executables.


Just guessing though.

If you right-click on any folder and choose properties and security, you see the Group/user names (accounts?) and each of their "Permissions". The FOLDERS that I had problems with had a check mark under the allow/Special Permissions for Administrators(that's me as there are no other users). The folders that I had not problems with did NOT have a check mark under the Allow/Special Permissions.

Now, whatever that means - MIC?

Nope, permissions again. Regular permissions are like ordering a #22 Chinese
take-out order. Special permissions sort of lets you pick from columns A, B, C,
etc...for a better custom fit.

http://support.microsoft.com/kb/308419

XP stuff. Is Vista 64 the same?



Magic stuff. Will Windows 7 fix this?

I don't think so as it is not broken. I assume most people won't be
migrating their data this way.

But I think it its broken. Certainly not from the perspective of computer science or secure business software, but from the perspective of the "power user" who got used to doing things in a reasonable way and gets a little upset when there seems to be no good reason for it to change on MY computer. The thread above started by Kathy resonates a little for me. The link you provided above references Windows XP where none of this was an issue, (at least in my experience) but now with Vista, we are suddenly not so much masters of our own hardware system.

[...]


BTW FromTheRafters, I really appreciate the discussion and attempts to educate - hard as it is ;<)



.

Relevant Pages

  • Re: Mirror disk and share permissions...
    ... to seize ownership of the folders. ... You can then do this from a Command Prompt: ... Thanks for the confirmation that share permissions won't be transferred ... corresponding profiles / home folders and I don't want to do this ...
    (microsoft.public.windows.server.general)
  • Re: Cant delete mystery folders in C: drive
    ... Open a Command Prompt ... cacls EBCFBF~1\Update (to check the permissions) ... It seems that both of those oddly-named folders were directly ...
    (microsoft.public.windowsxp.general)
  • Re: Cant delete mystery folders in C: drive
    ... Open a Command Prompt ... cacls EBCFBF~1\Update (to check the permissions) ... It seems that both of those oddly-named folders were directly ...
    (microsoft.public.windowsxp.general)
  • Re: How to add to Internet Favorites with UAC on?
    ... Recall, also, that I have removed the problem folders end entered new folders of the same name so that I can once again save new URLs to subfolders of Favorites. ... Not sure how Vista would react to dumping a bunch of folder/file data into a new Vista system. ... The FOLDERS that I had problems with had a check mark under the allow/Special Permissions for Administrators. ...
    (microsoft.public.windows.vista.security)
  • Re: How to add to Internet Favorites with UAC on?
    ... As I said above, I tried taking ownership, turning off/on protected mode etc, but was only finally able to get control of my Favorites chain by dragging each folder in my favorites off onto the desk top, creating a new folder in the Favorites chain of a similar name and then dragging the shortcut contents of the moved folders back into the new folders. ... I'm pretty sure that the issue has to do with how I imported the Favorites from my old hard disk, ie by copying them on to a thumb drive from the old HD and then copying them onto the new HD that had already been installed with Vista64. ... I believe turning this off will defeat 'protected mode' IE, but not all of UAC. ...
    (microsoft.public.windows.vista.security)