Permissions issue?

Discussion in 'Windows Vista Security' started by Matthew Fowler, Mar 2, 2007.

  1. I'm using Vista Ultimate and I'm unable to save files to the root drive. I
    can create folders on the root drive and save within them, however I cannot
    save a file to that drive.

    I am the administrator of the computer and it appears I have full control.
    What else could be causing this?
     
    Matthew Fowler, Mar 2, 2007
    #1
    1. Advertisements

  2. Matthew Fowler

    Jesper Guest

    I'm using Vista Ultimate and I'm unable to save files to the root drive. I
    That is by design and is a function of User Account Control (UAC) and the
    ACL on the root of the drive. The ACL permits only Administrators and System
    from writing files to the root of the drive. UAC means that even if you are a
    member of the Administrator's group you do not run as an administrator unless
    you elevate.

    If you really want to, you can launch whatever process you use to write the
    files with as an administrator and then you can write there. If you try to
    drag and drop a file there you get an elevation prompt. The recommended
    solution is to not store data there though.
     
    Jesper, Mar 2, 2007
    #2
    1. Advertisements

  3. Then how do I elevate the rights so this can be done at any time without
    having extra steps to go through.
     
    Matthew Fowler, Mar 3, 2007
    #3
  4. Matthew Fowler

    Jesper Guest

    Then how do I elevate the rights so this can be done at any time without
    If you really are adamant about storing files in the root of the C: (did I
    mention that it is generally a really bad idea?) and you do not want to
    elevate each time, you can resolve the situation by adding an access control
    list entry for your account to the root of the drive, as follows:
    1. Click the Window button:All Programs:Accessories
    2. Right-click on Command Prompt
    3. Select Run as administrator and accept the prompt
    4. Run this command: icacls c:\ /grant foo:(OI)(CI)(M)

    That will grant the user foo modify permissions on c:\. All objects (OI) and
    containers (CI) will inherit those permissions. You would need to replace foo
    with the name of your user account.

    Once you do that any application you run as user foo will be able to store
    data in the root of the C: drive. You will also have losened a default
    security setting, with all the caveats that entails.
     
    Jesper, Mar 3, 2007
    #4
  5. Yes, you mentioned this was a bad idea, however, I paid good money for my new
    laptop and I want to save some of my information on my C: drive. I'm not
    trying to hack Microsoft's software. I want the computer to do what I say to
    do.

    As far as that command prompt, it did not work. I typed exactly what you
    wrote, however I still get this message, "An unexpected error is preventing
    the operation. Make note of this error code, which might be useful if you get
    additional help to resolve this problem: Error 0x80070522: A required
    privilege is not held by the client."
     
    Matthew Fowler, Mar 3, 2007
    #5
  6. Matthew Fowler

    hermes Guest

    excuse me, but what's the relation between the money you paid for your
    PC, or laptop, what we all did (did anyone get a pc for free down here,
    let me know...), and the fact that you wanna store data at the root of
    your C drive, which does not make sens, unless your HDD is not
    partitioned. Or is it that you don't know how to partition a hard disk?
    So the real question would be to ask for help on that topic.
    I think Jesper was really kind to spend his time explaining how you
    could bypass Vista security, although he was quite aware, like I am,
    that storing data on C is an extremely bad idea.
     
    hermes, Mar 3, 2007
    #6
  7. Matthew Fowler

    hermes Guest

    one last thing, if you really want to do that, just turn UAC off. And
    reboot, it's free!
     
    hermes, Mar 3, 2007
    #7
  8. Matthew Fowler

    Paul Adare Guest

    microsoft.public.windows.vista.security news group, hermes
    This has nothing at all to do with partitioning a drive, nor did
    Jesper assert that storing data _on_ the C drive is an extremely
    bad idea. The problem here is the desire to store individual
    files at the root of the C drive, as opposed to simply creating
    folders off of the root of C (or elsewhere on the C drive.

    --
    Paul Adare
    MVP - Windows - Virtual Machine
    http://www.identit.ca
    "The English language, complete with irony, satire, and sarcasm,
    has survived for centuries without smileys. Only the new crop of
    modern computer geeks finds it impossible to detect a joke that
    is not clearly labeled as such."
    Ray Shea
     
    Paul Adare, Mar 3, 2007
    #8
  9. Matthew Fowler

    hermes Guest



    from Jesper:

    there are some possible reasons for storing files at the root of C
    without creating a folder first, one of them could be: bypassing windows
    activation process using a script file,for instance, but that was just
    an example. Otherwise most programs that need to write to the root of
    the system drive in Vista do that with no problem. Manually using a
    batch file for any purpose at the root of C is no problem either. But
    the idea of writing data directly at the root of C either comes from
    someone who's new to windows, or from someone who's trying to implement
    some very personal kinda files in Windows.
     
    hermes, Mar 3, 2007
    #9
  10. The relation is the fact that I bought a PC and I want to use it the way I
    want to use it. I can understand why Microsoft doesn't want certain things
    done to Windows, however I should not be stopped trying to save files there.
    It's not a hard concept seeing how previous Windows versions were able to do
    that.

    However, the root of the issue is UAC. Now that I know that is stopping me
    from saving a file there, I'll be able to continue on with my work.
     
    Matthew Fowler, Mar 3, 2007
    #10
  11. Matthew Fowler

    Jesper Guest

    Yes, you mentioned this was a bad idea, however, I paid good money for my
    new
    I'm not going to get into the silly arguments about this. You want to do it.
    It is your computer, and you are right, you should be able to make it do what
    you want.
    That means you do not have the right to change the permissions. You would
    get that if you do not elevate. Are you sure you ran the command prompt as an
    administrator?


    You can do this from the GUI as well. Right-click the C: in Windows Explorer
    and select Properties. Click the Security tab. Click the Edit... button and
    accept the prompt. Add the user you want, click the Modify checkbox, and
    click OK until you are back to Windows Explorer.
     
    Jesper, Mar 3, 2007
    #11
  12. Previous versions of Windows also didn't have built in firewalls and all
    the things we now take for granted as being normal.

    My sister's 1960 Volkswagon didn't have seatbelts when it was built.

    Isn't it silly that she's required to have them now when she drives the
    car on the modern freeway system? It's not a hard concept to understand
    that it's seems silly to use modern safety restraints on a modern
    highway systems isn't it?

    Things change, Matthew. And we need to understand that just because we
    did something one way years ago does not mean it is the right way now.
    Don't put blinders on and turn your back on the fact that this is the
    year 2007...and drive your computer appropriately.
     
    Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], Mar 3, 2007
    #12
  13. Sres. mi problema es con mi PC,ya que tengo instalado el Widows Vista HP y no puedo comprimir archivos en el directorio raiz.

    Si alguien me puede ayudar gracias.

    Espero respuestas

    EggHeadCafe.com - .NET Developer Portal of Choice
    http://www.eggheadcafe.com
     
    Ciro Rom?n Cobos, Mar 14, 2007
    #13
  14. Matthew Fowler

    Jimmy Guest

    I feel for you (regarding the grief you're getting about storing a file where YOU WANT), but not surprised. It is easier for people to complain then be helpful. Personally I don't know why someone would spend time claiming you should use your computer a certain way, it is yours and if you want a file there then so be it. Funny how things are changed, one moment we all do things one way then all of a sudden it's bad. Usually (and I feel confident saying this because I am a programmer and this shift happens every few months) it's someone like microsoft and everyone follows, even if they don't understand why. In short, think people, if you are going to waste this guy's time by giving him your view and no solution, then find something else to do. Otherwise be helpful your views are less important than you think. idiots...

    EggHeadCafe.com - .NET Developer Portal of Choice
    http://www.eggheadcafe.com
     
    Jimmy, Mar 29, 2007
    #14
  15. Matthew Fowler

    Mark Dunakin Guest

    EXACTLY!
    I have been going nuts for a week now and even AFTER I have turned off the
    UAC, I found I still couldn't get ALLL the Permissions I wanted.
    It's MY computer and "I" want to be able to have access to anything I want.
    I couldn't beleave Susan's reply, of "this is how it is and deal with it and
    you have to change to the "new" way and do things that way and like it"
    mentality.

    People seem to be overlooking some VERY important things taht have to do
    with this nonsense of "oversecuring" the system.
    First, I agree, you should be able to put files anywhere you want on your
    own computer whehterh others think it's a good idea or not.
    But for me this is the issues.
    I can't for the life of me get any sort of automated backups to ever REALLY
    work, since the security keeps certain things in that ghosted mode.
    And even with that, it took me all week before I was finally able to manage
    to "mostly" get full access with permissions to ALLL of the files on my
    computer, but still some I didn't get permissions for because they were "in
    use".
    But, once I got those permissions so taht I could actually for reals back up
    the hidden, protected files, then I STILL couldn't get either Vista's backup
    to back up those files nor could I use my Acronis software to do the job
    either.
    I can manually click and open the folders, which BTW, are always not only
    ghosted, but also have that shortcut arrow on them and I searched and
    searched and searched trying my best to find the REAL folders that were named
    Documents and Settings LOL
    Apparently they either really don't exist or what I suspect more is that
    they too are hidden from me somewhere so taht I can't get access to them.

    Sooo. my point about all this, is that it seems no matter what you do you
    can't ever truly get complete permissions and Control over your own computer.
    Which so far has been lame for me.
    And this is with me turning OFF the UAC too!
    And BTW, that thing gets very annoying after a while.
    I sort of feel like that PC guy on the Mac vs PC commercials where the PC
    has to constantly Agree to every little thing that happens on the computer LOL
    And he finally has to Agree that he's come to a sad realization LOL

    I of course don't want to have to come to any sort of sad realization, I
    would rather just have this thing let me be god of my own computer and not
    boss me around.

    Thanx........................md
     
    Mark Dunakin, Mar 29, 2007
    #15
  16. Matthew Fowler

    blavatsky Guest

    Windows VISTA ULTIMATE issue
    I recently encountered this problem when trying to move a file fro
    d-drive >>> to c-drive to enable a windows XP program I made usin
    Delphi 5 .

    I can't move the file there so I can't use my xp program on vista.

    I dare say that Microsoft has discovered a serious flaw in their OS an
    this is the most expedient method they have used to resolve the issue.
    We use to drive with our arms out the window but not anymore.

    It seems it will be better for me to make a work around so that m
    program can work with the file somewhere else. It would be nice i
    Microsoft was transparent about such issues so that people like mysel
    are not led up the garden path and end up wasting a lot of time
     
    blavatsky, Jun 11, 2007
    #16
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.