Re: Default User Serurity Permission

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 06/07/03 

Date: Sat, 7 Jun 2003 12:53:19 -0700

Bill,

I should have added that this will get your system to a
known base state, since you had indicated changing
permissions from the root down.

After this, you will need to adjust a few permissions
to adjust to account creation after setup.
Basically, for each profile root directory in the
Docs and Settings, you will need to access the
NTFS security dialog and make sure each profile
has a grant of Full to the specific user account, of
Full to System, and of Full to Administrators, and
that there are no other grants.

Roger

"Bill" <private_1000@hotmail.com> wrote in message
news:00b001c32d26$3e80ee30$a501280a@phx.gbl...
> Hi Roger,
>
> I tried the http://support.microsoft.com/?id=313222
>
> To reset your operating system back to original
> installation default security settings:
> Click Start, click Run, type cmd, and then press ENTER.
> Type secedit /configure /cfg %windir%
> \repair\secsetup.inf /db secsetup.sdb /verbose, and then
> press ENTER. You receive a "Task is completed" message,
> and a warning message that something could not be done.
> You can safely ignore this message. For more information
> about this message, view the %windir%
> \Security\Logs\Scesrv.log file.
>
> However, it did nothing-I never received the "Task is
> completed" message or anything else for that matter. I
> checked and rechecked the proper syntax, but it did not
> work. I have not tried anything regarding getting the
> application to work. First, I want to restore the default
> security settings.
>
> By the way, I never renamed/deleted anything within the
> profiles, I just changed them. Also, when I refer to a
> workgroup environment, I only have one computer and have
> setup user accounts for my children. Thus simulating a
> workgroup enviroment.
>
> Thanks for tyring Roger, it is appreciated!
>
> >-----Original Message-----
> >IT sounds as if you only need to get NTFS permissions
> >back to a known config state. This should help in Pro
> >Restore XP to installation Security Defaults
> > for Pro see: http://support.microsoft.com/?id=313222
> >If you renamed/deleted things within the profiles this is
> >not going to adjust for that.
> >On the running of apps that are illbehaved, this may help
> >Run programs as Limited/Restricted accounts
> >
> >This is commonly seen from applications that fail to
> meet the Windows
> >Certification requirements.
> >Some apps make use of calls that are no longer
> supported, and for
> >these use of the application compatibility tool may help.
> >Beyond that, the first thing to try is to grant the
> Users group modify on
> >the area where the application has installed, usually a
> folder within
> >Program Files.
> >If this is insufficient, then very often one or both of
> the next increased
> >grants to Users group helps
> >1. some folder outside of the app install point where
> > attempts are made to create temp files or specific
> > files such as the app's self-installed ini file in
> the
> > Windows dir structure
> >2. the registry keys of the application
> >The regmon and filemon tools from www.sysinternals.com
> can help one
> >determine what accesses are being attempted but are
> denied to Users only
> >accounts.
> >
> >"Bill" <private_1000@hotmail.com> wrote in message
> >news:096201c32cdc$745635a0$a101280a@phx.gbl...
> >> Hi,
> >>
> >> Can someone help me restore the default users' security
> >> permission profile in a workgroup environment using
> NTFS
> >> in Windows XP Pro version 2002 Service Pack 1? In fact,
> >> maybe I should restore all the defaults for Guest,
> User,
> >> and Admin
> >>
> >> I tried to get a legacy program (Readers Rabbit's Math
> >> Ages 4-6), which worked fine when logged on as an
> >> administrator, to work in my kids profiles (users'
> >> [limited]) and also the guest profile in Windows XP
> Pro.
> >> So I right clicked the C drive, chose properties, and
> >> then chose the security tab and made some adjustments
> to
> >> the user profile. These adjustments got the legacy
> >> program working. However, now one user can read and
> write
> >> to all other users accounts-including the
> administrators
> >> account. In fact, all users have read/write access to
> the
> >> entire C:\ drive. This is not what I intended, I only
> >> want to allow my children to run their programs and
> have
> >> access to their documents. I would have used the
> restore
> >> function, but I had disabled it-I have re-enabled it
> for
> >> future occurrences like these.
> >>
> >> The most important thing for me at this point is to
> reset
> >> the default security profiles. However, advice on
> getting
> >> this legacy program working while maintaining control
> >> would also be greatly appreciated. I've tried the
> >> compatibility wizard included with XP Pro, but it did
> not
> >> work. This application might be writing to the temp
> file
> >> so maybe if I gave write permission to the temp file it
> >> might work. But which temp file, there are several.
> >> Anyway,
> >>
> >> I'm starting to ramble. If anyone can help it would be
> >> greatly appreciated. THANK YOU!
> >>
> >
> >
> >.
> >

Relevant Pages

  • Re: VSTO Security policy
    ... installation is busted in a strange way or your code group is not being ... because another code level grants less permissions. ... you choose "View code groups that grant permissions to the assembly", ... reset your security settings to their ...
    (microsoft.public.vsnet.vstools.office)
  • Re: Permissions on filesystem via Group policy
    ... can use the Resultant Set of Policy mmc snapin to see exactly what Group ... you want to disable "inherited permissions" in the advanced page if you only ... > Right-click File System and press Add File. ... Use the security settings of that GPO to specify ...
    (microsoft.public.windows.group_policy)
  • Re: Windows XP boots to background only, no start button, no icons
    ... I tried the cacls command for explorer.exe and it showed that users & power ... about not having the right permissions. ... but I can access my task manager. ... use your system CD to do a repair installation. ...
    (microsoft.public.windowsxp.general)
  • Re: Administrator cannot access registry or uninstall programs
    ... VirusScan Enterprise 7 or Netshield 4.5... ... >Select the 'SYSTEM' account ... changing permissions ... >Copy the VSE installation files to C:\WINNT\Temp ...
    (microsoft.public.windowsxp.security_admin)
  • Re: USERS group has the ability to change security permissions???
    ... Please use the Advance view in the NTFS permissions dialog to ... When there is a generic grant and a special grant to the same entity ... the RESULT: user level access can change NTFS ...
    (microsoft.public.win2000.security)