Discussion in 'Windows Vista Security' started by clive skinner, Mar 20, 2009.

  1. i have recently tried to access Documents and Settings but am getting
    ACCESS DENIED for some reason yet i have done NOTHING to change my admin
    rights yet there seems to be an option for EVERYONE to access it but
    admin is not allowed to and it wont let me configure it that way.


    i have deleted EVERYONE from the properties and tried to revert to normal
    ADMIN user rights but it wont let me view docs and setts folder at all
    clive skinner, Mar 20, 2009
    1. Advertisements

  2. clive skinner

    Gordon Guest

    "Documents and Settings" is NOT a folder. it's a Junction point.
    That's why you can't access it. Why are you even trying? Your data is held
    at C:\Users\{Your account}\Documents
    Windows Vista Junction Points:
    Gordon, Mar 20, 2009
    1. Advertisements

  3. clive skinner

    Malke Guest

    Gordon has answered you here and I also answered the post you made in
    another newsgroup. Next time please crosspost instead of multiposting like
    this. - multiposting

    Malke, Mar 20, 2009
  4. Not that it really matters, but just because something is a junction
    point doesn't mean you can't access it (as that article suggests).
    "Documents and Settings" is just a junction point that has user access
    turned off. There can be other junction points that a user can
    Scott Seligman, Mar 21, 2009
  5. clive skinner

    Paul Adare Guest

    Answered perhaps, but not answered with a technically correct answer as
    Scott points out, and I see the same technically incorrect answer over and
    over again, even from MVPs.
    The system generated junction points in Vista (and Windows 7) are not
    inaccessible because of the fact that they are junction points, they are
    inaccessible because they contain a DENY access control entry (ACE) for the
    Everyone group in their discretionary access control list (DACL).

    Junction points are not inherently inaccessible.
    Paul Adare, Mar 21, 2009
  6. clive skinner

    Gordon Guest

    But why would you want to? There's nothing in it!!!
    Gordon, Mar 21, 2009
  7. Huh? Junctions can absolutely point to data. And in the case of
    Documents and Settings junction, it points to the Users folder. If
    you removed the restriction preventing you from opening it, you'd have
    a longer path name that points to your user data.
    Scott Seligman, Mar 21, 2009
  8. clive skinner

    Gordon Guest

    That's the nub - look up a dictionary definition of "POINTS" as opposed to
    Gordon, Mar 21, 2009
  9. clive skinner

    Drezpc Guest

    Make sure the account you are using is part of the local administrators
    group on the computer in question. If is not, add it to the local admin
    group, then local off and back on this will update the ACL and ACE
    permissions and you will now have access to the C:\users location. You will
    receive a UAC (unless you turned it off) message, just press continue and
    you'll have access.
    Drezpc, Mar 22, 2009
  10. clive skinner

    Gordon Guest

    <sigh> In Vista "Documents and Settings" is a JUNCTION POINT - it
    doesn't contain anything that the OP could a) understand or b) do
    anything with. It's a POINTER to the Vista folder of C:\Users\{account
    name}\Documents, for the use of legacy applications that use the XP
    folder designation.
    If you have had experience with *nix then it's like a symbolic link.

    Windows Vista Junction Points:
    Gordon, Mar 23, 2009
  11. clive skinner

    random.coder Guest

    Vista's "Documents and Settings" folder points to C:\Users. There is
    another junction inside of each user folder, "My Documents" that
    points to "Documents"
    random.coder, Mar 23, 2009
  12. clive skinner

    Sam Hobbs Guest

    You are implying that there is nothing in C:\Users\{account name}\Documents
    that a user could a) understand or b) do anything with.

    Microsoft should either not show the Documents and Settings directory (the
    junction point that looks like a directory) or allow access to it. The way
    it is done is clearly extremely confusing.

    Programs written the way Microsoft recommends would not be affected by the
    change. The following VBScript produces "C:\Users\Sam\Documents" for me.

    Set WshShell = WScript.CreateObject("WScript.Shell")
    WScript.Echo WshShell.SpecialFolders("MyDocuments")

    How would a "legacy application" use "Documents and Settings"? The following
    VBScript (a slightly modified version of the sample in the FolderItems.Items
    documentation) reports that there are 0 items in my "My Documents" folder.

    fnFolderObjectItemsVB "C:\Documents and Settings\Sam\My Documents"

    function fnFolderObjectItemsVB(foldername)
    dim objShell
    dim objFolder
    set objShell = CreateObject("Shell.Application")
    set objFolder = objShell.NameSpace(foldername)
    if (not objFolder is nothing) then
    dim objFolderItems
    WScript.Echo objFolder.title
    set objFolderItems = objFolder.Items
    if (not objFolderItems Is Nothing) then
    WScript.Echo objFolderItems.Count
    end if
    set objFolderItem = nothing
    end if
    set objFolder = nothing
    set objShell = nothing
    end function
    Sam Hobbs, Mar 23, 2009
  13. These junction points created for backwards compatibility are hidden by
    default, so a user generally has to look for hidden files to see them in
    the first place.
    While I agree, I'd guess MS did a usability study on leaving them
    visible and that confused users more (Why are there two copies of all my
    documents in two different folders?, etc)

    I am curious how many applications break without these junction points.
    I'm not curious enough, however, to delete the junction points on my
    machine and see what blows up.
    Scott Seligman, Mar 23, 2009
  14. clive skinner

    Sam Hobbs Guest

    Sam Hobbs, Mar 23, 2009
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.