Vista file permission problem

[guyyardeni]

I'm trying to edit a file in a subfolder of 'Program Files' and get an
access denied error when trying to save. I'm logged in as a member of local
administrators group and effective permissions show that I have full
control.

What's going on?

Thx.

 

[mikeyhsd]

first thing that comes to mind is
is the program currently running.



(e-mail address removed)



I'm trying to edit a file in a subfolder of 'Program Files' and get an
access denied error when trying to save. I'm logged in as a member of local
administrators group and effective permissions show that I have full
control.

What's going on?

Thx.

 

[guyyardeni]

Solved it. Turns out that Vista protects the Program Files directory so even
though I was listed as an administrator and the effective permissions looks
correct, I needed to take ownership of the files, give myself rights to them
and then it worked fine.

 

[Guest]

Hello,

As Jesper pointed out, any program that you do not elevate through a
"Windows needs your permission to continue" prompt does not get to use your
group membership into administrators [among other restrictions]; non-elevated
programs, therefore, will not be able to access files in ways that you only
have access to through your group membership as an administrator.

As you found out, changing the permissions on the resource to specifically
grant you access will allow non-administrative programs to access that
resource without prompting; however, it is important to note that this will
signifigantly reduce the effectiveness of the Windows Vista security
mechanisms when applied to system folders, such as program files.


- JB

 

[Gerry Hickman]

As you found out, changing the permissions on the resource to specifically
grant you access will allow non-administrative programs to access that
resource without prompting; however, it is important to note that this will
signifigantly reduce the effectiveness of the Windows Vista security
mechanisms when applied to system folders, such as program files.

It's also a bad strategy for anyone who has to work on hundreds of
computers, and computers they don't own. We need a simple way to do
these tasks without having to change the default permissions.