Re: Folder Access Settings in XP Home

From: Jack Reed (jreed6@bigfoot.com)
Date: 07/03/02 

From: "Jack Reed" <jreed6@bigfoot.com>
Date: Wed, 3 Jul 2002 10:06:16 -0700

Kent,

Just to say thanks very much for all this info. Now I need
to spend a bit of time experimenting with this to get
properly up to speed.

Beast Regards,

Jack

>-----Original Message-----
>Jack, these are excellent questions. I'll respond inline.
>
>--
>Kent W. England, MS MVP for Windows XP
>(Please respond only in the newsgroup)
>
>Jack Reed <jreed6@bigfoot.com> wrote:
>
>> Thanks Kent for such a comprehensive response. It gets
>> right to the heart of what I was asking, and actually
>> prompts some more peripheral questions:
>>
>> I'm happy to use command line, but out of interest, is
>> there a way to changes these from windows, say in Safe
>> Mode?
>
>Yes, reboot, press F8 at the Windows logo screen and
choose a safe mode.
>Enter a null password or the password you entered when
you installed XP
>Pro. Now all the security tabs will be visible and you
can navigate to
>the application folder and make the changes on the
Security tab.
>
>> I haven't been able to find information about this
>> stuff in the help files, but I must admit I did not look
>> for command line help in the command line interface. I
>> will look for this when I get back to my XP machine at
>> home.
>
>You won't find anything. Microsoft support in this area
is very, very
>poor.
>
>> So if these are dumb questions answered by online
>> help, please just say:
>>
>> As well as the cacls command to change folder access, is
>> there a command to view current settings?
>
>Yes, you simply enter "cacls ." or "cacls <folderpath>"
to see what the
>current settings are. However, cacls is buggy and you
sometimes have to
>interpret what you see. And you can't see inheritance
settings. It is
>much more confusing than the security tab.
>
>>
>> Presumably "users" in the command you gave is the group
of
>> accounts that limited users except for the owner fall
>> into.
>
>The User Group is the group that limited accounts belong
to. CREATOR
>OWNER is a builtin account.
>
>> What are the others? (I assume something
>> like "System" "Owner" "limited on this machine" "limited
>> remote"?)
>
>Those are system accounts. Please don't change them.
Administrators,
>SYSTEM, and CREATOR OWNER all have default settings on
most folders and
>you should not change those.
>
>> You said "If a limited user sets their My Documents
>> to "private" then not even the Administrator can read
>> files or subfolders." I have seen this, but also found
>> that the "private" folder setting only affects
>> Administrator(s). In other words, other limited users
>> cannot see My Documents in Windows Explorer even if the
>> folder is not set to "private". Is that correct?
>
>In general, limited accounts can see other accounts, but
XP could get
>set up in a way that user profiles are protected from
other limited
>users. The correct and detailed answer depends on whether
you are using
>Home with simple file sharing or Pro with full file
sharing.
>
>See Description of File Sharing and Permissions in
Windows XP (Q304040)
>http://support.microsoft.com/default.aspx?scid=kb;;q304040
>for much more information.
>
>>
>> Thanks again,
>>
>> Regards,
>>
>> Jack
>>
>>> -----Original Message-----
>>> The problem is that some applications run on XP but
are not
>>> compatible with the way XP stores application files.
Limited users
>> do not have
>>> write privilege on the application folder in Program
>> Files, nor the
>>> LOCAL_MACHINE hive in the registry. You can change
this, if{wOT.~~ĺ  you
>>> reboot, press F8 and logon in a safe mode.
>>>
>>> If your game or application falls into the category
where it works OK
>>> with admin accounts, but not with limited accounts,
you can fix it to
>>> allow limited users to access the program files folder
>> with "change"
>>>

Relevant Pages

  • Re: Folder Access Settings in XP Home
    ... >> can navigate to the application folder and make the changes on the ... >>> for command line help in the command line interface. ... >>> accounts that limited users except for the owner fall ... >> The User Group is the group that limited accounts belong ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Access Settings in XP Home
    ... the application folder and make the changes on the Security tab. ... > there a command to view current settings? ... > accounts that limited users except for the owner fall ... The User Group is the group that limited accounts belong to. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Access Settings in XP Home
    ... As well as the cacls command to change folder access, ... accounts that limited users except for the owner fall ... >with admin accounts, but not with limited accounts, you ... >> the profiles of other limited users unless their profile ...
    (microsoft.public.windowsxp.security_admin)
  • Re: multiple account problems
    ... > They all have their own accounts, which are set up as limited users. ... The problem is they cannot install ... Start Menu folder and Desktop folder shortcuts from the user profile ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Admin rights
    ... In 2k they could be a power user but not in xp. ... you can make this software available to other users by _copying_ the Start Menu folder and Desktop folder shortcuts from the user profile from which the software was installed in the corresponding folders in the user profilein which you'd like the software to be accessible. ... For some obscure reason, game developers in particular seem to not understand WinXP's file security paradigm, and require even limited users to have unnecessarily high privileges to protected systems folders. ...
    (microsoft.public.windowsxp.general)