Adding Other Boot's Computer Name to list of File Security Locations?
in [Windows XP Users]
|
Prev: Empty Startup Folder
Next: Email
From: John John - MVP on 9 Jun 2010 18:29 No, only the Owner and System have permissions on private folders, they are off limit for all other users, including Administrators! To access the files you have to seize ownership of the folders under guise of the System account. Also, this "Make this Folder Private" option is only available when Simple File Sharing is turned on, but the folder will remain private as long as it isn't changed again, disabling Simple File Sharing does not change the private status of the folder. If you are using XP Pro disable Simple File Sharing and take a look at and make note of the permissions on one of your folders in your profile directory. Then enable simplified file sharing and make the folder private. Then disable Simple File Sharing again (to access the Security Tab) and take another look at the permissions. To remove the "private" status enable SFS again. You can also use the CACLS command to verify the permissions, for XP Home this is the easiest way, run calcs on the folder then make the folder private and run the cacls command again and compare the results, typically it will be like this: Without Private folder: C:\>cacls "C:\Documents and Settings\Jean-Guy" C:\Documents and Settings\Jean-Guy NT AUTHORITY\SYSTEM:F NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F JGZ-HOME\Jean-Guy:F JGZ-HOME\Jean-Guy:(OI)(CI)(IO)F BUILTIN\Administrators:F BUILTIN\Administrators:(OI)(CI)(IO)F Private folder enabled: C:\>cacls "C:\Documents and Settings\Jean-Guy" C:\Documents and Settings\Jean-Guy NT AUTHORITY\SYSTEM:F NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F JGZ-HOME\Jean-Guy:F JGZ-HOME\Jean-Guy:(OI)(CI)(IO)F Larry will have to rely on a different solution to protect his files while making them available on the other Windows installation. See here for more information: http://support.microsoft.com/kb/304040 John Tim Meddick wrote: > John - the way I see it (the OP's problem) is this ; > > I am well aware that he does not want to dismiss the current "private" > status of the XP folders on a dual-boot system. > > However, as far as I am aware, making folders "private" does [should] > *not* make those XP folders inaccessible to a user on the Win7 OS who is > a member of the Administrators group! > > Members of the Administrators group, on any (previous) NT-based OS, have > access across dual-boot systems, to *any* files and folders on drives > belonging to their opposing OS. > > The OP has made sure (partly on my advice) that the folders in question > have been granted Administrators-Group full-access while in the XP OS - > Then, still cannot access those same folders in an Administrator-level > user on the Win7 OS. > > Can you explain this anomaly, or do you think this is normal? > > == > > Cheers, Tim Meddick, Peckham, London. :-) > > > > > "John John - MVP" <audetweld(a)nbnet.nb.ca> wrote in message > news:OpdpeV9BLHA.1388(a)TK2MSFTNGP05.phx.gbl... >> >> Larry Lindstrom wrote: >>> On 6/8/2010 12:03 PM, Tim Meddick wrote: >>>> Security "Groups" aren't assigned SIDs - only "Users" - that's why I >>>> stressed adding the "Administrators" Group to the user-list and NOT the >>>> (built-in) user named "Administrator" >>>> >>>> Please note again the difference : >>>> >>>> Administrators = YES >>>> Administrator = NO >>> >>> Thanks Again Tim: >>> >>> Still no luck. >> >> You can't have it both ways, Larry, private is private, either the >> files are private or they are not. There is no "peeking" at private >> folders and there are no varying levels of privacy, it's all or >> nothing. From Windows 7 you would need to take ownership of the >> folder then grant yourself adequate access rights to the objects >> within. I can only suggest that you use standard NTFS permissions to >> control access to the files or that you use encryption or a third >> party solution. Be sure that you understand the risks of file loss if >> you decide to use NTFS encryption! >> >> John >
From: Tim Meddick on 9 Jun 2010 19:05 John, I keep telling you, the OP has MANUALLY REPLACED the "Administrators" group in his WinXP installation, and granted it full-access for those "private" folders!! But STILL cannot access them with an user belonging to the "Administrators" group in Win7! == Cheers, Tim Meddick, Peckham, London. :-) "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message news:%23J6M$MCCLHA.5412(a)TK2MSFTNGP04.phx.gbl... > > No, only the Owner and System have permissions on private folders,
From: Larry Lindstrom on 10 Jun 2010 05:17 On 6/9/2010 4:05 PM, Tim Meddick wrote: > John, I keep telling you, the OP has MANUALLY REPLACED the > "Administrators" group in his WinXP installation, and granted it > full-access for those "private" folders!! > > But STILL cannot access them with an user belonging to the > "Administrators" group in Win7! > > == > > Cheers, Tim Meddick, Peckham, London. :-) > > > > > "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message > news:%23J6M$MCCLHA.5412(a)TK2MSFTNGP04.phx.gbl... >> >> No, only the Owner and System have permissions on private folders, > Thanks Again Tim and John: First, perhaps I have my nomenclature wrong. Is "private" some special flag or designation of a particular kind of file or folder? Other people will occasionally be using this PC. I'd like to have some files that only I can read or modify. I'd like these available only "larryl" on either XP or Win7. This is the meaning I attach to the word "Private". I will be the only administrator of this PC, so allowing only "administrators" access should be safe enough. I'm curious as to why I can't do the same with "larryl" when accompanied with a location that specifies the Win7 boot of this machine. I'll be posting the screen shots in another post. Thanks Larry
From: John John - MVP on 10 Jun 2010 06:32 He also needs to replace the inheritance flag on all the files and folders within the folder hierarchy, he has to propagate and replace permissions entries on all child objects. John Tim Meddick wrote: > John, I keep telling you, the OP has MANUALLY REPLACED the > "Administrators" group in his WinXP installation, and granted it > full-access for those "private" folders!! > > But STILL cannot access them with an user belonging to the > "Administrators" group in Win7! > > == > > Cheers, Tim Meddick, Peckham, London. :-) > > > > > "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message > news:%23J6M$MCCLHA.5412(a)TK2MSFTNGP04.phx.gbl... >> >> No, only the Owner and System have permissions on private folders, >
From: Tim Meddick on 10 Jun 2010 17:10
Agreed... == Cheers, Tim Meddick, Peckham, London. :-) "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message news:e1GaFhICLHA.4308(a)TK2MSFTNGP04.phx.gbl... > > He also needs to replace the inheritance flag on all the files and > folders within the folder hierarchy, he has to propagate and replace > permissions entries on all child objects. > > John > > > < clipped > |