Re: MS Knowledgebase Article 298345-Can't delete file...

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 09/05/03


Date: Fri, 5 Sep 2003 00:40:36 -0700


Logging in as admin is not that important with NTFS.
What is important is the the NTFS permissions have
been granted on the filesystem object for whatever
account you are using (and yes, even Administrators
need these grants).
When logging in as an admin is important is if there is
no grant to Administrators and the owner is also not
Administrators. In this case one needs to use and admin
account to take ownership of the NTFS object, which
then allows permissions to be granted.

-- 
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Matt Galbraith" <mg9291@netzero.com> wrote in message
news:0c9201c3725f$8cb13870$a001280a@phx.gbl...
> I checked the Knowledge Base and got the following:
>
> "SYMPTOMS
> When you attempt to delete a file, you may receive the
> following error message:
>
> 'Cannot delete filename: Access is denied.
>
> Make sure the disk is not full or write-protected and
> that the file is not currently in use.'
> However, the disk is neither full nor write-protected and
> the file is not in use by anyone else.
> CAUSE
> This behavior can occur if you do not have the
> permissions necessary to delete the file under the NTFS
> file system.
> RESOLUTION
> To resolve this behavior, ask the administrator to grant
> the necessary permissions."
>
> The problem is that I DO have administrator logon and I
> still cannot delete certain files. I tried to go into
> COMMAND mode (DOS) but can't CD to Program Files
> directory which would allow me to delete it by removing
> the blocking attribute (hidden, read-only, system, etc.)
>
> I would really appreciate any input on this.
> Thanks Matt


Relevant Pages

  • RE: Any way to remove ADMIN$ only?
    ... Mixing the share permissions and the NTFS permissions generally cause ... which means more groups/people access the same shares. ... Along comes another admin that creates a share at a higher level in the ...
    (Focus-Microsoft)
  • RE: Any way to remove ADMIN$ only?
    ... 2K and newer systems running NTFS 5 or greater). ... Share permissions ... Any way to remove ADMIN$ only? ... default security of Windows drives. ...
    (Focus-Microsoft)
  • RE: Any way to remove ADMIN$ only?
    ... The jist is that that share permissions basically still exist to support fat ... Any way to remove ADMIN$ only? ... 2K and newer systems running NTFS 5 or greater). ... applies default permissions to those shares it creates. ...
    (Focus-Microsoft)
  • Re: Giving admins Local Admin to DCs not Domain Admins
    ... out permissions over the whole domain. ... Althought I can give the users PowerUser or LocalLogon rights via ... Can you with Server 2003 give a user just local admin to a DC ... but there's no such thing as local administrators ...
    (microsoft.public.security)
  • RE: Any way to remove ADMIN$ only?
    ... method of setting permissions between share level and file level within the ... Any way to remove ADMIN$ only? ... 2K and newer systems running NTFS 5 or greater). ... applies default permissions to those shares it creates. ...
    (Focus-Microsoft)