Prev: Blank page XP System Restore and Network Setup Wizard
Next: Microsoft Windows Network wont find my Workgroup and the N/W
From: John John - MVP on 9 Jun 2010 18:29
No, only the Owner and System have permissions on private folders, they
are off limit for all other users, including Administrators! To access
the files you have to seize ownership of the folders under guise of the
System account. Also, this "Make this Folder Private" option is only
available when Simple File Sharing is turned on, but the folder will
remain private as long as it isn't changed again, disabling Simple File
Sharing does not change the private status of the folder.

If you are using XP Pro disable Simple File Sharing and take a look at
and make note of the permissions on one of your folders in your profile
directory. Then enable simplified file sharing and make the folder
private. Then disable Simple File Sharing again (to access the Security
Tab) and take another look at the permissions. To remove the "private"
status enable SFS again. You can also use the CACLS command to verify
the permissions, for XP Home this is the easiest way, run calcs on the
folder then make the folder private and run the cacls command again and
compare the results, typically it will be like this:


Without Private folder:

C:\>cacls "C:\Documents and Settings\Jean-Guy"
C:\Documents and Settings\Jean-Guy NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
JGZ-HOME\Jean-Guy:F
JGZ-HOME\Jean-Guy:(OI)(CI)(IO)F
BUILTIN\Administrators:F
BUILTIN\Administrators:(OI)(CI)(IO)F

Private folder enabled:

C:\>cacls "C:\Documents and Settings\Jean-Guy"
C:\Documents and Settings\Jean-Guy NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
JGZ-HOME\Jean-Guy:F
JGZ-HOME\Jean-Guy:(OI)(CI)(IO)F


Larry will have to rely on a different solution to protect his files
while making them available on the other Windows installation.

See here for more information:
http://support.microsoft.com/kb/304040

John

Tim Meddick wrote:
> John - the way I see it (the OP's problem) is this ;
>
> I am well aware that he does not want to dismiss the current "private"
> status of the XP folders on a dual-boot system.
>
> However, as far as I am aware, making folders "private" does [should]
> *not* make those XP folders inaccessible to a user on the Win7 OS who is
> a member of the Administrators group!
>
> Members of the Administrators group, on any (previous) NT-based OS, have
> access across dual-boot systems, to *any* files and folders on drives
> belonging to their opposing OS.
>
> The OP has made sure (partly on my advice) that the folders in question
> have been granted Administrators-Group full-access while in the XP OS -
> Then, still cannot access those same folders in an Administrator-level
> user on the Win7 OS.
>
> Can you explain this anomaly, or do you think this is normal?
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "John John - MVP" <audetweld(a)nbnet.nb.ca> wrote in message
> news:OpdpeV9BLHA.1388(a)TK2MSFTNGP05.phx.gbl...
>>
>> Larry Lindstrom wrote:
>>> On 6/8/2010 12:03 PM, Tim Meddick wrote:
>>>> Security "Groups" aren't assigned SIDs - only "Users" - that's why I
>>>> stressed adding the "Administrators" Group to the user-list and NOT the
>>>> (built-in) user named "Administrator"
>>>>
>>>> Please note again the difference :
>>>>
>>>> Administrators = YES
>>>> Administrator = NO
>>>
>>> Thanks Again Tim:
>>>
>>> Still no luck.
>>
>> You can't have it both ways, Larry, private is private, either the
>> files are private or they are not. There is no "peeking" at private
>> folders and there are no varying levels of privacy, it's all or
>> nothing. From Windows 7 you would need to take ownership of the
>> folder then grant yourself adequate access rights to the objects
>> within. I can only suggest that you use standard NTFS permissions to
>> control access to the files or that you use encryption or a third
>> party solution. Be sure that you understand the risks of file loss if
>> you decide to use NTFS encryption!
>>
>> John
>
From: Tim Meddick on 9 Jun 2010 19:05
John, I keep telling you, the OP has MANUALLY REPLACED the "Administrators"
group in his WinXP installation, and granted it full-access for those
"private" folders!!

But STILL cannot access them with an user belonging to the "Administrators"
group in Win7!

==

Cheers, Tim Meddick, Peckham, London. :-)




"John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message
news:%23J6M$MCCLHA.5412(a)TK2MSFTNGP04.phx.gbl...
>
> No, only the Owner and System have permissions on private folders,

From: Larry Lindstrom on 10 Jun 2010 05:17
On 6/9/2010 4:05 PM, Tim Meddick wrote:
> John, I keep telling you, the OP has MANUALLY REPLACED the
> "Administrators" group in his WinXP installation, and granted it
> full-access for those "private" folders!!
>
> But STILL cannot access them with an user belonging to the
> "Administrators" group in Win7!
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message
> news:%23J6M$MCCLHA.5412(a)TK2MSFTNGP04.phx.gbl...
>>
>> No, only the Owner and System have permissions on private folders,
>

Thanks Again Tim and John:

First, perhaps I have my nomenclature wrong. Is "private" some
special flag or designation of a particular kind of file or folder?

Other people will occasionally be using this PC. I'd like to have
some files that only I can read or modify. I'd like these available
only "larryl" on either XP or Win7. This is the meaning I attach to the
word "Private".

I will be the only administrator of this PC, so allowing only
"administrators" access should be safe enough. I'm curious as to why I
can't do the same with "larryl" when accompanied with a location that
specifies the Win7 boot of this machine.

I'll be posting the screen shots in another post.

Thanks
Larry
From: John John - MVP on 10 Jun 2010 06:32
He also needs to replace the inheritance flag on all the files and
folders within the folder hierarchy, he has to propagate and replace
permissions entries on all child objects.

John

Tim Meddick wrote:
> John, I keep telling you, the OP has MANUALLY REPLACED the
> "Administrators" group in his WinXP installation, and granted it
> full-access for those "private" folders!!
>
> But STILL cannot access them with an user belonging to the
> "Administrators" group in Win7!
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message
> news:%23J6M$MCCLHA.5412(a)TK2MSFTNGP04.phx.gbl...
>>
>> No, only the Owner and System have permissions on private folders,
>
From: Tim Meddick on 10 Jun 2010 17:10
Agreed...

==

Cheers, Tim Meddick, Peckham, London. :-)




"John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message
news:e1GaFhICLHA.4308(a)TK2MSFTNGP04.phx.gbl...
>
> He also needs to replace the inheritance flag on all the files and
> folders within the folder hierarchy, he has to propagate and replace
> permissions entries on all child objects.
>
> John
>
>
> < clipped >

First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4
Prev: Blank page XP System Restore and Network Setup Wizard
Next: Microsoft Windows Network wont find my Workgroup and the N/W