Questions

Changing file permissions when 'Users' are denied?

+
0 Votes
Locked

Changing file permissions when 'Users' are denied?

MrKicks
When trying to asses ways of protecting data on my new laptop I foolishly denied access to the Group 'Users' for a whole partition. I accepted the warning (that all users in the group would be denied as deny takes precedence) as I didn't (couldn't) beleive that there wasn't anything that the administrator couldn't undo.

How wrong could I be?

I used all reasonable precautions, backed up (most) of the data. Created a restore point etc.

The system will not restore.

Administrator cannot change the permissions (as he is a member of the group users duh!). I have lost half my hard disk at stroke.

I have searched most of the forums but nothing comes close to this one.

Is there any way to recover from this? Am I going to have to fix it in Linux or do I have to delete and recreate the partition (can I delete and recreate the partition if access to it is denied)?

I am running Vista Home Premium Sp1 on a Toshiba laptop. UAC is disabled.
  • +
    0 Votes
    cmiller5400

    Sorry, I couldn't help it; IT WARNED YOU.

    I'd boot into safe mode and login as the administrator there, then try and modify the permissions. Administrators should always be able to change permissions even if they are not given the permission to the file. (Well this is my experience in XP at least, I haven't used Vista extensively yet)

    Use this link to activate the "True" administrator account and try changing the permissions with it.

    http://gchandra.wordpress.com/2007/09/03/how-to-enable-administrator-account-in-vista-home-premium/

    Good luck!! Please post back if it does/doesn't work.

    +
    0 Votes
    MrKicks

    Yes I know it was silly, but I did take all reasonable precautions and couldn't believe even Microsoft could be stupid enough to release software with that kind of trap built in. And I was right.

    Thanks to your help I enabled the Administrator account, logged in as Administrator and after a little messing about I have full access to the partition.

    Incidently, I could still have retrieved the data using a third party application such as Recover NTFS. So it failed my test anyway (which was to completely protect the data from unauthorised access).

    Once again, many thanks to all who answered this post.

    +
    0 Votes
    Kenone

    Take ownership

    +
    0 Votes
    LarryD4

    Just remember that you need to push down the ownership and permissions you set, down to all subdirectories and files. Just taking ownership and adding the User group back will not solve the problem.

  • +
    0 Votes
    cmiller5400

    Sorry, I couldn't help it; IT WARNED YOU.

    I'd boot into safe mode and login as the administrator there, then try and modify the permissions. Administrators should always be able to change permissions even if they are not given the permission to the file. (Well this is my experience in XP at least, I haven't used Vista extensively yet)

    Use this link to activate the "True" administrator account and try changing the permissions with it.

    http://gchandra.wordpress.com/2007/09/03/how-to-enable-administrator-account-in-vista-home-premium/

    Good luck!! Please post back if it does/doesn't work.

    +
    0 Votes
    MrKicks

    Yes I know it was silly, but I did take all reasonable precautions and couldn't believe even Microsoft could be stupid enough to release software with that kind of trap built in. And I was right.

    Thanks to your help I enabled the Administrator account, logged in as Administrator and after a little messing about I have full access to the partition.

    Incidently, I could still have retrieved the data using a third party application such as Recover NTFS. So it failed my test anyway (which was to completely protect the data from unauthorised access).

    Once again, many thanks to all who answered this post.

    +
    0 Votes
    Kenone

    Take ownership

    +
    0 Votes
    LarryD4

    Just remember that you need to push down the ownership and permissions you set, down to all subdirectories and files. Just taking ownership and adding the User group back will not solve the problem.