Access is denied question

[Guest]

I am running xp home.
If I go to safe mode, and log in as administrator, and then try to
open C:\System Volume Information
it says "Access is denied"

If I go to command, and run cacls on that folder I get this:
C:\System Volume Information NT AUTHORITY\SYSTEM:<OI><CI>F
I see that OI means object inherit
CI means container inherit
what is the meaning of:
NT
AUTHORITY\SYSTEM
F

Is there some place that explains acls for newbies like me?

 

[Wesley Vogel]

How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default.aspx?scid=kb;en-us;309531

HOW TO: Take Ownership of a File or Folder in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421

NT Authority\System account, which is used by the operating system.

F = Full Control

This article is the same as what's in Help and Support...
Cacls
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/cacls.mspx

Yes, there is a place that explains all of this. It's called Help and
Support. Available from your Start menu. ;-) If not, Start | Run |
Type: helpctr | Click OK

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Wesley,
Thanks.
I guess that System is equivalent to Administrator?
And "NT Authority" is equivalent to my machine?

Your second URL only is applicable to XP Pro, not home.

 

[Wesley Vogel]

I guess that System is equivalent to Administrator?

And "NT Authority" is equivalent to my machine?

I can't find a good definition. NT Authority is a user with the highest
level of authority. Even higher than you with Administrator credentials.
System is a hidden member of Administrators. System (or LocalSystem) is an
identity that is used locally by the operating system and by services
configured to log on as LocalSystem.

Even if you were to boot up your machine and just walk away, the NT
Authority\System would still be busy doing all kinds of things.

Your second URL only is applicable to XP Pro, not home.

Incorrect.

How to take ownership of a file or folder in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421

APPLIES TO
• Microsoft Windows XP Home Edition
• Microsoft Windows XP Professional

[[If you are running Microsoft Windows XP Home Edition, you must start the
computer in safe mode, and then log on with an account that has
Administrative rights to have access to the Security tab.]]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[bill]

Wesley,
Thanks again.
Can you explain the following?
I log in as administrator in safe mode and try to access "System Volume
Information",
and I get the access is denied message.
As administrator, I have the following:
check "show hidden files and folders"
uncheck "hide protected operating system files"

Is there some setting I am missing?

 

[Rock]

Wesley,
Thanks again.
Can you explain the following?
I log in as administrator in safe mode and try to access "System Volume
Information",
and I get the access is denied message.
As administrator, I have the following:
check "show hidden files and folders"
uncheck "hide protected operating system files"

Is there some setting I am missing?

For that folder you still need to set access permissions for it
seperately using the security tab. Right click the folder, choose
Properties, security tab.

 

[bill]

Rock,
I don't follow. If I go to "System Volume
Information"/properties/security (safe mode, administrator)
I see the following for SYSTEM:
check Modify
check Read & Execute
check List Folder contents
check Read
check Write

And, that is the same that I see for Compaq_Owner.
And yet I can go into that folder if I login in as Compaq_Owner.
What am I missing here?
WindowsXP home version

 

[Rock]

Rock,
I don't follow. If I go to "System Volume
Information"/properties/security (safe mode, administrator)
I see the following for SYSTEM:
check Modify
check Read & Execute
check List Folder contents
check Read
check Write

And, that is the same that I see for Compaq_Owner.
And yet I can go into that folder if I login in as Compaq_Owner.
What am I missing here?
WindowsXP home version

Windows protects the System Volume Information Folder more than others
so in the standard configuration even with other's visible the contents
of SVI are not. I don't work with XP Home so I don't know for sure, but
in XP Pro under security I had to give my account full control rights to
see the contents.

 

[bill]

I don't see why the access for administrator should be LESS than
Compaq_Owner (both in safe mode).
And, when I examine the permissions for administrator and Compaq_Owner
using
properties/security, they appear to be identical.

The list of permissions in my last letter was incomplete, I should
have added:
check Full Control
for both SYSTEM and Compaq_Owner.

 

[Rock]

I don't see why the access for administrator should be LESS than
Compaq_Owner (both in safe mode).
And, when I examine the permissions for administrator and Compaq_Owner
using
properties/security, they appear to be identical.

The list of permissions in my last letter was incomplete, I should
have added:
check Full Control
for both SYSTEM and Compaq_Owner.

Sorry bill I don't know what the problem is with your system. What I do
know is that on my XP Pro system I had to specifically give it full
control for each administrator level account to see the contents of SVI
for from within that account. Each one had to be set.