Windows XP Community - XPHeads



Spyware Doctor

Cannot Access "Program Files"

microsoft.public.windowsxp.accessibility


Reply
  #1 (permalink)  
Old 02-17-2008, 10:45 AM
kenwood
 
Posts: n/a
Cannot Access "Program Files"

Recently I was asked to look at a Windows XP PC that had locked all
users but one out of the “Program Files” directory so they could not
run any programs. If you try to look at the directory contents with
“Windows Explorer” as one of those locked out users, you receive an
“Access Denied” message. All the accounts have administrative
privileges.

The one exception is the first user account that was created on the PC.
It can see the contents of the “Program Files” directory, and it can
also run programs located there. That account also has administrative
rights, but if you use that account to create a new user account with
administrative rights, that new user account also cannot access the
“Program Files”. An examination of the new account after the fact
confirms that administrative rights were granted during the creation
process.

In safe mode two accounts appear as possible logins. The user account
that works correctly and the “Administrator” account. If you login
under “Administrator” you find that it also cannot access the “Program
Files” directory. Only that one user can access the “Program Files”
directory for both safe and normal modes.

Scanning software that was run while the PC was in safe mode showed no
indication of any malware.

Any ideas short of a complete reinstall? Would the “Repair” option on
the XP install CD be of any use?


Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 02-29-2008, 07:05 PM
Rutger H.
 
Posts: n/a
RE: Cannot Access "Program Files"
Hi,

Log on as the administrator, open explorer, right click "Program Files",
click the tab "security", click "advanced", click the "Owner" tab, select
administrators, select the "Replace owner on subcontainers and object" box,
click aply. Might take a while depending on the number of files located in
program files.

If you don't see the security tab, click "Tools" -> "Folder options" -> tab
"View" -> deselect the simple file sharing (recommended) tab.

In the same security tab, although it's not a recommended method, you can
deny members of the "users" group access to the program files folder. A
better method is to create a local group, deny it permissions, add just the
users that you want to deny acces to.

For more info search support.microsoft.com for NTFS.

Hope it helped, good luck!

Rutger H.

"kenwood" wrote:

>
> Recently I was asked to look at a Windows XP PC that had locked all
> users but one out of the “Program Files” directory so they could not
> run any programs. If you try to look at the directory contents with
> “Windows Explorer” as one of those locked out users, you receive an
> “Access Denied” message. All the accounts have administrative
> privileges.
>
> The one exception is the first user account that was created on the PC.
> It can see the contents of the “Program Files” directory, and it can
> also run programs located there. That account also has administrative
> rights, but if you use that account to create a new user account with
> administrative rights, that new user account also cannot access the
> “Program Files”. An examination of the new account after the fact
> confirms that administrative rights were granted during the creation
> process.
>
> In safe mode two accounts appear as possible logins. The user account
> that works correctly and the “Administrator” account. If you login
> under “Administrator” you find that it also cannot access the “Program
> Files” directory. Only that one user can access the “Program Files”
> directory for both safe and normal modes.
>
> Scanning software that was run while the PC was in safe mode showed no
> indication of any malware.
>
> Any ideas short of a complete reinstall? Would the “Repair” option on
> the XP install CD be of any use?
>
>
>

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 03-07-2008, 09:28 AM
kenwood
 
Posts: n/a
Re: Cannot Access "Program Files"

Thanks for the reply, and my apologies for not getting back to you
sooner. The owner of that PC decided to live with the problem so I
stopped following this, and I signed up for the forum using a throwaway
email account which I do not check very often so I also did not
immediately receive the notice that you had posted a possible
solution.

I will forward this on to the user and perhaps they will have a change
of heart and at least try this. I assume that since it says you have
to be "the" adminstrator, you must do this is safe mode.

I am also not sure why you presented the last paragraph of the
solution. They never wanted to deny any user or group access, and
still don't. The problem is that all of a sudden only one user could
access Program Files when they wanted all users to be able to access
it, and could not seem to correct the problem.

If they decide to give it a try, I will report back. It is the least I
can do, and again my thanks and apologies.


=?Utf-8?B?UnV0Z2VyIEgu?= Wrote:
> Hi,
>
> Log on as the administrator, open explorer, right click "Program
> Files",
> click the tab "security", click "advanced", click the "Owner" tab,
> select
> administrators, select the "Replace owner on subcontainers and object"
> box,
> click aply. Might take a while depending on the number of files located
> in
> program files.
>
> If you don't see the security tab, click "Tools" -> "Folder options" ->
> tab
> "View" -> deselect the simple file sharing (recommended) tab.
>
> In the same security tab, although it's not a recommended method, you
> can
> deny members of the "users" group access to the program files folder.
> A
> better method is to create a local group, deny it permissions, add just
> the
> users that you want to deny acces to.
>
> For more info search support.microsoft.com for NTFS.
>
> Hope it helped, good luck!
>
> Rutger H.
>
> "kenwood" wrote:
>
> >
> > Recently I was asked to look at a Windows XP PC that had locked all
> > users but one out of the “Program Files” directory so they could

> not
> > run any programs. If you try to look at the directory contents with
> > “Windows Explorer” as one of those locked out users, you receive

> an
> > “Access Denied” message. All the accounts have administrative
> > privileges.
> >
> > The one exception is the first user account that was created on the

> PC.
> > It can see the contents of the “Program Files” directory, and it

> can
> > also run programs located there. That account also has

> administrative
> > rights, but if you use that account to create a new user account

> with
> > administrative rights, that new user account also cannot access the
> > “Program Files”. An examination of the new account after the

> fact
> > confirms that administrative rights were granted during the creation
> > process.
> >
> > In safe mode two accounts appear as possible logins. The user

> account
> > that works correctly and the “Administrator” account. If you

> login
> > under “Administrator” you find that it also cannot access the

> “Program
> > Files” directory. Only that one user can access the “Program

> Files”
> > directory for both safe and normal modes.
> >
> > Scanning software that was run while the PC was in safe mode showed

> no
> > indication of any malware.
> >
> > Any ideas short of a complete reinstall? Would the “Repair”

> option on
> > the XP install CD be of any use?
> >
> >
> >



Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 04:15 PM.


Registry Mechanic - Free Scan Now
Driver Scanner 2009 - Free Scan Now




Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.1.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74