INSTALLING ANYTHING IN WINDOWS 7 EVEN THE OS

This is from a layman person that has tried everything imaginable with security stuff
on NTFS.

The security is set by the os installer [trusted installer?]
and not the self booting manager like partition magic.

IF any of you know how to restore messed up security settings
which prevent booting, please tell us all.

WARNING:
IF YOU ARE INSTALLING THE OS [EITHER OEM OR RETAIL]
PLEASE LISTEN TO THIS:

DO NOT REDUCE OR DELETE ANY OF THE ORIGINAL SECURITY DESCRIPTORS
WHICH WERE FIRST INSTALLED WITH THE OS BY THE SETUP DISC.

YOU CAN ELEVATE THEM ALL TO FULL and you can add/delete other things

but please do not remove or reduce any of the main security descriptors.

You can replace ownership of TRUSTEDINSTALLER with ADMINISTRATORS group.

but if you try anything else you are asking for a non bootable system
requiring reinstallation of your system.

NEVER, NEVER, completely remove all security stuff.

NEVER, NEVER, keep user files on your OS partition.

You will find active programs will not be able to be changed like the PAGEFILE.
THIS CAUSES headaches when trying to change security of anything of a system nature.
You will have to find someway to close them first.

Working in the Registry you can beat some interferences
by first creating a dummy key in the area of interest.
You will find you can alter nothing until you first
create a dummy, then you can delete and do anything.

************************************************** *********************
BEFORE YOU FIRST INSTALL ANYTHING INTO YOUR OS
I RECOMMEND YOU COPY PASTE THE SETUP STUFF TO SOMEWHERE
IN YOUR C: DRIVE SO THAT STUFF INHERITS THE PROPER
SECURITY SETTINGS FROM THE OS ITSELF before installation.
************************************************** *********************

SECURITY STUFF CAUSES ME THE SINGLE BIGGEST HEADACHE
SINCE THE FILE SYSTEMS WERE CHANGED FROM FAT32
to NTFS, NTFS HAS NO SETTING FOR NO SECURITY EVEN
IF YOU OWN THE MACHINE YOURSELF AND WANT NO SECURITY
GARBAGE ON IT. IF you try to reformat the very way you want
prior to system installation. Here is what I have learned.

use Partition magic 8. CREATE ONLY XP-NTFS TYPE PARTITION
[THE OS INSTALL DISC WILL NOT CREATE A LOGICAL PARTITION]
[THE OS VISTA or 7 WILL NOT INSTALL ON ANY NTFS BEFORE VERSION 3.x]
Set the sector size for the OS to 4096 since anything larger will
stop compression features of the disc and anything smaller is slower.
On logical drives I recommend 16K partitions with EVERYONE security.
CREATE a FAT partition at the start of the drive exactly or a bit more than 100MB.
You can later make this be DRIVE B: from the OS.
CREATE what you want like [300GB NTFS VERSION 3+]
MAKE all the rest be a NTFS LOGICAL PARTITION.
If you mess up your OS it usually will not mess up
any of the LOGICAL partitions.
INSTALL your OS into the FIRST NTFS VOLUME.
WIN7, WINVISTA,WINXP are all offensively security minded.
It is only the fact it has no option for no security at install
time for the OS is offered the owner/installer that I do
not like windows.

Possibly [we the people] should force by law, every and all
PHD holders, to take that doctors oath to "do no harm"
before they can get their degree, and also be a requirement to
keep that degree for any meaningful or gainful purpose.

Afternote:
These ideas are only for privately owned/operated computers in
relatively safe geographical areas.
In a free world there is no such thing as security or safety.
So say the forefathers,
Home of the free, Land of the Brave.
If you live in a free society you must be brave because there is no safety or security
in free societies. These things are your own personal responsibility.
No man can match a group, so man have rights and not [men or groups].
[Man == all humans even the females]
Rights are to protect the individual from the groups/gangs/organizations,
not the other way around. AS a USA resident, You really should not need
all this stupid security stuff created by other people than yourself.
Microsoft has essentially a monopoly on operating systems.
I do not know how to find anything better in the USA.
You are stuck with MS even if you want something better.
Linux is horribly difficult and the OLD DOS os too limited.
Everything else is TOO expensive.
In the USA as a layman, MS_Windows is your only realistic choice.

Yellow_Stone/[BF2142] wrote:
[snipped difficult to read rant]

Thanks for sharing.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html