Re: ran caclc on "c:\program files" no /e on XP Home
From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 01/30/04
- Next message: Kaylene/Taurarian: "Re: message from Microsoft Windows"
- Previous message: C.Brown: "files"
- In reply to: kurt ruby: "ran caclc on "c:\program files" no /e on XP Home"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 30 Jan 2004 03:19:02 -0700
To fine tone the permissions you would need to use an
F8 safe mode boot and access the Security dialog in the
properties of C:\Program Files
Note that c:\Program Files normally has its own permissions,
unlike what would exist on C:\somenewdirectory
C:\>cacls "c:\program files"
c:\Program Files BUILTIN\Users:R
BUILTIN\Users:(OI)(CI)(IO)(special access:)
GENERIC_READ
GENERIC_EXECUTE
BUILTIN\Power Users:C
BUILTIN\Power Users:(OI)(CI)(IO)C
BUILTIN\Administrators:F
BUILTIN\Administrators:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:F
CREATOR OWNER:(OI)(CI)(IO)F
"kurt ruby" <kurtis318@charter.net> wrote in message
news:5bd34e7e.0401292035.5280b30d@posting.google.com...
> I inadvertantly did add the /e switch on the entire "Program Files"
> directory on my WinXP Home system. Searching through Google groups, I
> see there is a command for WinXP Pro to restore the settings but not
> on Home. Norton AntiVirus Corporate Edition was failing to start. I
> was able to get it running by manually putting the following ACL with
> CACLS.exe.
> c:\Program Files BUILTIN\Users:(OI)(CI)F
> BUILTIN\Administrators:(OI)(CI)F
> NT AUTHORITY\SYSTEM:(OI)(CI)F
> THEPOWER\Kurtis:(OI)(CI)F
> I ran CACLS.exe on another directory and see the following:
> c:\downl BUILTIN\Administrators:F
> BUILTIN\Administrators:(OI)(CI)(IO)F
> NT AUTHORITY\SYSTEM:F
> NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
> THEPOWER\Kurtis:F
> CREATOR OWNER:(OI)(CI)(IO)F
> BUILTIN\Users:R
> BUILTIN\Users:(OI)(CI)(IO)(special access:)
> GENERIC_READ
> GENERIC_EXECUTE
>
> BUILTIN\Users:(CI)(special access:)
> FILE_APPEND_DATA
>
> BUILTIN\Users:(CI)(special access:)
> FILE_WRITE_DATA
>
> Everyone:(OI)(CI)C
>
> I am thinking I should have similar ACL on C:\Program Files but can't
> seem to get CACLS.exe to add the other special permissions.
>
> Anyone help me out, short of reinstalling?
>
> Thanks...
- Next message: Kaylene/Taurarian: "Re: message from Microsoft Windows"
- Previous message: C.Brown: "files"
- In reply to: kurt ruby: "ran caclc on "c:\program files" no /e on XP Home"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
