Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows Vista / Administration / June 2006

Tip: Looking for answers? Try searching our database.

Permissions

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Ian M. Walker - 16 Jun 2006 23:33 GMT
I'm getting rather ticked off with the file system in general but this post
is regarding permissions.

I've already had to take "ownership" of various folders on my data
partitions but now I'm finding that when I create a document say in
CorelDraw, when I next open it to edit and then go to save I'm told it is
"read only" and I'm asked to give a different file name!  This is also
happening with Word 2007.  WHY?  I've tried to remove the "read only"
attribute from these folders and I'm told I don't currently have permission
to do so!  Sheesh.  I'm the bloody owner of this machine, I'm using an Admin
account and I've taken ownership.  Who then DOES have permission?
Microsoft?

Signature

Ian M. Walker

http://www.IanMWalker.com

~ Look to your own life before worrying how others are living theirs ~

Zack Whittaker - 18 Jun 2006 13:12 GMT
This is by default and "by design" - although it's read-only, it's only
read-only by the operating system. Basically, it's just as normal - nothing
to worry about, just a simple tick box which means very little :oP

Signature

» More information here: www.vistabase.co.uk
--
Zack Whittaker
» ZackNET Enterprises: www.zacknet.co.uk
» MSBLOG Technology News: www.msblog.org
» This mailing is provided "as is" with no warranties, and confers no
rights. All opinions expressed are those of myself unless stated so, and not
of my employer, best friend, Ghandi, my mother or my cat. Glad we cleared
that up!

        --: Original message follows :--

> I'm getting rather ticked off with the file system in general but this
> post is regarding permissions.
[quoted text clipped - 8 lines]
> using an Admin account and I've taken ownership.  Who then DOES have
> permission? Microsoft?
Ian M. Walker - 19 Jun 2006 05:27 GMT
Umm, Zack, please do some real trials before you post an answer.

It is NOT as normal.  I CANNOT save my file except with another file-name.

I cannot change permissions - I don't have the authority to do so.

THIS IS RIDICULOUS.

As others have posted, this is way over the top.  MS should be able to
program an OS that can tell the difference between local commands and ones
coming over the bloody internet.

Grrrrrr.

Signature

Ian M. Walker

http://www.IanMWalker.com

~ Look to your own life before worrying how others are living theirs ~

> This is by default and "by design" - although it's read-only, it's only
> read-only by the operating system. Basically, it's just as normal -
[quoted text clipped - 12 lines]
>> using an Admin account and I've taken ownership.  Who then DOES have
>> permission? Microsoft?
jim_from_il - 19 Jun 2006 17:08 GMT
I too am fed up with what I would call "over the top" security.  I'm in a
dual-boot scenario, and have admin rights on both XP and Vista.  Whenever I
try to view a simple Word doc (on XP), I get "permission" errors.  Is there
any way to "disable" permisions altogether in Vista?

> Umm, Zack, please do some real trials before you post an answer.
>
[quoted text clipped - 26 lines]
> >> using an Admin account and I've taken ownership.  Who then DOES have
> >> permission? Microsoft?
Rusty - 21 Jun 2006 14:37 GMT
Ian I haven't gotten far enough to not have permission on documents yet BUT.  
I downloaded trend pccillin beta for Vista x64 and it did not properly
install so it never actually starts.  I tried add remove and it couldn't
remove the program.  I went to reinstall and it kept trying to uninstall so I
decided to just remove the program files.  Guess what - I dont have
permission and I need to talk to the system administrator (ME).  Does anyone
know how to remove a freakin file on this thing since I dont have permission.

> I'm getting rather ticked off with the file system in general but this post
> is regarding permissions.
[quoted text clipped - 8 lines]
> account and I've taken ownership.  Who then DOES have permission?
> Microsoft?
Rusty - 21 Jun 2006 14:39 GMT
Anyone know how to remove a program file/folder.  Seem that I who built the
damn machine and installed the program do not have permission.

> I'm getting rather ticked off with the file system in general but this post
> is regarding permissions.
[quoted text clipped - 8 lines]
> account and I've taken ownership.  Who then DOES have permission?
> Microsoft?
Gordon - 22 Jun 2006 12:58 GMT
I ended up tsaking ownership of the whole root but even then I have problems.
The fact is that VISTA itself seems to b e the only thing that can do
things. Even with full ownership of all files it still tells me Permissions
are denied on Folders that just do not need to be 'special' inj any way. It
really is a joke the level of security they built into this and they have
gone totally OTT - I think almost everyone on here is bitching about
permissions and the anal way in which M$ have implemented them.

M$ are you listening to all this?

> Anyone know how to remove a program file/folder.  Seem that I who built the
> damn machine and installed the program do not have permission.
[quoted text clipped - 11 lines]
> > account and I've taken ownership.  Who then DOES have permission?
> > Microsoft?
Gordon - 22 Jun 2006 13:01 GMT
I ended up tsaking ownership of the whole root but even then I have problems.
The fact is that VISTA itself seems to b e the only thing that can do
things. Even with full ownership of all files it still tells me Permissions
are denied on Folders that just do not need to be 'special' inj any way. It
really is a joke the level of security they built into this and they have
gone totally OTT - I think almost everyone on here is bitching about
permissions and the anal way in which M$ have implemented them.

M$ are you listening to all this?

> Anyone know how to remove a program file/folder.  Seem that I who built the
> damn machine and installed the program do not have permission.
[quoted text clipped - 11 lines]
> > account and I've taken ownership.  Who then DOES have permission?
> > Microsoft?
Gordon - 22 Jun 2006 13:01 GMT
I ended up tsaking ownership of the whole root but even then I have problems.
The fact is that VISTA itself seems to b e the only thing that can do
things. Even with full ownership of all files it still tells me Permissions
are denied on Folders that just do not need to be 'special' inj any way. It
really is a joke the level of security they built into this and they have
gone totally OTT - I think almost everyone on here is bitching about
permissions and the anal way in which M$ have implemented them.

M$ are you listening to all this?

> Anyone know how to remove a program file/folder.  Seem that I who built the
> damn machine and installed the program do not have permission.
[quoted text clipped - 11 lines]
> > account and I've taken ownership.  Who then DOES have permission?
> > Microsoft?
Jimmy Brush - 26 Jun 2006 13:40 GMT
Hello,

It is helpful to remember that in Windows Vista, even though you are running
as an administrator account, every program you run is running under a
*standard user* account, and does not have administrator-level permission.
The only way a program can get administrator-level permission is if the
application automatically prompts you for permission, or if you explicitly
give that application permission.

So ... what are the actual ramifications of this when dealing with the
filesystem? Let's take a look at the default access permissions for most
folders in windows:

- A user has read access to just about everything
- A user generally cannot write to anything outside of his profile directory
- Any user can create a folder almost anywhere in the filesystem
- The owner of a folder has full control over it and its contents
- Administrators have almost full control over just about everything

So... this means, that even though you are an running in an admin account,
all your explorer windows and programs you run (having normal user
credentials) will be able to read almost any file, but will not be able to
write anything unless it is in your profile directory, or a directory that
you created or took ownership of.

So, here's the major problem:

- Folders and files from a different windows installation probably won't
allow you to write to them, even if they're YOUR files you created from a
different version of windows.

- You will need to modify their permissions to give either Everyone full
access or your user account in Vista full access. Taking ownership of them
is NOT RECOMMENDED as you may have trouble accessing them from the other
windows installation.

- Managing your files and folders are going to be a real pain ... which
brings me to

HOW DO I MANAGE MY FILES AND FOLDERS if explorer run as a standard user ?!?!

Here's how:

- Click Start
- Type: explorer.exe
- When it shows up under Applications, right-click it and click Run As
Administrator

You now have an "administrator" explorer, kind of like a root shell in that
other operating system, that will allow you to change permissions and access
files as admin, just like in the good 'ol days.

Hope this helps! :)

- JB
Gordon - 26 Jun 2006 14:19 GMT
Jimmy,

yes it helps to explain an awful lot. But surely there should be a way to
run  as an admin such that everything you run does indeed have full admin
rights - make it a setting somewhere.

What this does is ensure that I have to right-click then click run as admin
every time I want to make sure somethign works they way I hope it should.

Things like this need to be optional things that security conscious admins
can enable or at least be able to put back to running it the way it should.
I'm and admin user therefore eveything I do I want to do as an admin
user..this over-complicates it in my view.
Jimmy Brush - 26 Jun 2006 14:25 GMT
Fair enough :)

This is actually an optional setting ... this feature is called User Account
Control. You can enable/disable it here:

Control Panel -> User Accounts and Family Safety -> User Accounts -> Change
Security Settings

You will have to restart your computer after you make this change. This
change affects your entire computer, not just your account.

- JB
Gordon - 27 Jun 2006 17:03 GMT
Jimmy - I don't see 'User Accounts and Family Safety' just User Accounts  - I
went in via the Admin tools to find the local policies and edit them....

> Fair enough :)
>
[quoted text clipped - 8 lines]
>
> - JB
Jimmy Brush - 27 Jun 2006 17:09 GMT
> Jimmy - I don't see 'User Accounts and Family Safety' just User
> ccounts  - I
> went in via the Admin tools to find the local policies and edit them....

That works too :)

I assume you have set your control panel to classic mode ... in which case,
it is just User Accounts.

- JB
Gordon - 27 Jun 2006 17:04 GMT
Jimmy - I don't see 'User Accounts and Family Safety' just User Accounts  - I
went in via the Admin tools to find the local policies and edit them....

> Fair enough :)
>
[quoted text clipped - 8 lines]
>
> - JB
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.