ran caclc on "c:\program files" no /e on XP Home

[kurt ruby]

I inadvertantly did add the /e switch on the entire "Program Files"
directory on my WinXP Home system. Searching through Google groups, I
see there is a command for WinXP Pro to restore the settings but not
on Home. Norton AntiVirus Corporate Edition was failing to start. I
was able to get it running by manually putting the following ACL with
CACLS.exe.
c:\Program Files BUILTIN\UsersOI)(CI)F
BUILTIN\AdministratorsOI)(CI)F
NT AUTHORITY\SYSTEMOI)(CI)F
THEPOWER\KurtisOI)(CI)F
I ran CACLS.exe on another directory and see the following:
c:\downl BUILTIN\Administrators:F
BUILTIN\AdministratorsOI)(CI)(IO)F
NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEMOI)(CI)(IO)F
THEPOWER\Kurtis:F
CREATOR OWNEROI)(CI)(IO)F
BUILTIN\Users:R
BUILTIN\UsersOI)(CI)(IO)(special access
GENERIC_READ
GENERIC_EXECUTE

BUILTIN\UsersCI)(special access
FILE_APPEND_DATA

BUILTIN\UsersCI)(special access
FILE_WRITE_DATA

EveryoneOI)(CI)C

I am thinking I should have similar ACL on C:\Program Files but can't
seem to get CACLS.exe to add the other special permissions.

Anyone help me out, short of reinstalling?

Thanks...

 

[Colin Nash - [MVP Windows Hardware]]

Have you tried restoring back to a previous restore point? (Start -->
Accessories --> System Tools --> System Restore)

 

[Roger Abell [MVP]]

To fine tone the permissions you would need to use an
F8 safe mode boot and access the Security dialog in the
properties of C:\Program Files

Note that c:\Program Files normally has its own permissions,
unlike what would exist on C:\somenewdirectory

C:\>cacls "c:\program files"
c:\Program Files BUILTIN\Users:R
BUILTIN\UsersOI)(CI)(IO)(special access
GENERIC_READ
GENERIC_EXECUTE
BUILTIN\Power Users:C
BUILTIN\Power UsersOI)(CI)(IO)C
BUILTIN\Administrators:F
BUILTIN\AdministratorsOI)(CI)(IO)F
NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEMOI)(CI)(IO)F
BUILTIN\Administrators:F
CREATOR OWNEROI)(CI)(IO)F

 

[Kent W. England [MVP]]

Note that c:\Program Files normally has its own permissions,
unlike what would exist on C:\somenewdirectory

C:\>cacls "c:\program files"
c:\Program Files BUILTIN\Users:R
BUILTIN\UsersOI)(CI)(IO)(special access
GENERIC_READ
GENERIC_EXECUTE
BUILTIN\Power Users:C
BUILTIN\Power UsersOI)(CI)(IO)C
BUILTIN\Administrators:F
BUILTIN\AdministratorsOI)(CI)(IO)F
NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEMOI)(CI)(IO)F
BUILTIN\Administrators:F
CREATOR OWNEROI)(CI)(IO)F

If you use the GUI, then the above is

Administrators Full Control This folder, all subfolders and files
SYSTEM Full Control This folder, all subfolders and files
CREATOR OWNER Full Control Subfolders
Power Users Change This folder ...
Users Read This folder ...

Owner should be Administrators group, but might be the Administrator
account.