|
Page 1 of 1 |
|
Posted: Wed, 7th Dec 2016 20:42 Post subject: NTFS permissions: need proper cmdline to batch-fix issue |
|
 |
Hi,
In order to fix an issue automatedly I need to know how to remove non-existing ACL targets from certain Folder on my external USB Disk which is NTFS formated.
I created the Disk on one PC with Windows 8.1, and I wanna copy / use the files on another PC (Win10), but I get access permission problems:
Code: | find: `./Paxsali/Downloads/Apps/MeGUI_2507_x86/allprofiles': Permission denied
find: `./Paxsali/Downloads/Apps/MeGUI_2507_x86/data': Permission denied
find: `./Paxsali/Downloads/Apps/MeGUI_2507_x86/jobs': Permission denied
find: `./Paxsali/Downloads/Apps/MeGUI_2507_x86/logs': Permission denied
find: `./Paxsali/Downloads/Apps/MeGUI_2507_x86/tools': Permission denied
find: `./Paxsali/Downloads/Apps/MeGUI_2507_x86/update_cache': Permission denied
find: `./Paxsali/Downloads/Apps/NSISPortable/App': Permission denied
find: `./Paxsali/Downloads/Apps/NSISPortable/Data': Permission denied
find: `./Paxsali/Downloads/Apps/NSISPortable/Other': Permission denied
find: `./Paxsali/Downloads/Apps/PortableApps.comLauncher/App': Permission denied
find: `./Paxsali/Downloads/Apps/PortableApps.comLauncher/Data': Permission denied
find: `./Paxsali/Downloads/Apps/PortableApps.comLauncher/Other': Permission denied
find: `./Paxsali/Downloads/Apps/RasberryPi/qemu_no image/qemu': Permission denied
find: `./Paxsali/Downloads/Apps/x264/x264-snapshot-20140904-2245-stable': Permission denied
find: `./Paxsali/Downloads/Games/MameUI/older/cmp4010_64': Permission denied
find: `./Paxsali/Downloads/Games/MameUI/older/Icons': Permission denied
find: `./Paxsali/Downloads/Games/MameUI/older/Snap': Permission denied
find: `./Paxsali/Music/Amazon MP3/Black Sabbath/Black Sabbath': Permission denied
find: `./Paxsali/Music/Amazon MP3/Necro & Kool G Rap & The Godfathers/The Pre-Kill Vol 2 [Explicit]': Permission denied
find: `./Paxsali/Music/Amazon MP3/Rodrigo Y Gabriela/Rodrigo Y Gabriela': Permission denied
find: `./Paxsali/Music/Amazon MP3/Slayer/God Hates Us All [Explicit]': Permission denied
find: `./Paxsali/Music/Amazon MP3/Slayer/South Of Heaven': Permission denied
find: `./Paxsali/Music/Amazon MP3/The Four Tops/The Definitive Collection': Permission denied
find: `./Paxsali/Music/Amazon MP3/The Notorious BIG/Life After Death [Explicit]': Permission denied
find: `./Paxsali/Music/Amazon MP3/Thundercat/Apocalypse': Permission denied
find: `./Paxsali/Pictures/3D-own/Haus': Permission denied
find: `./Paxsali/Pictures/3D-own/Werkstatt': Permission denied
find: `./Paxsali/Pictures/Mini-Me/Final/Small': Permission denied |
I studied the usage of takeown and icacls on:
http://ss64.com/nt/takeown.html
http://ss64.com/nt/icacls.html
and I've tried so far setting ownership and granting Administrators full access:
takeown /F "F:\Paxsali" /A /R /D Y
icacls "F:\Paxsali" /setowner Administratoren /T /C
icacls "F:\Paxsali" /grant:r Administratoren:(OI)(CI)F /T /C
However, it doesn't work like that and still there is some issue changing the permissions:
Quote: | F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\AviSynth: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\FFmpeg AC-3: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\FFmpeg MP2: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Flac: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\LAME MP3: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Nero AAC: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\OneClick: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\OPUS: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\QAAC: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\SelectedProfiles.xml: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Vorbis: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\x264: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\x265: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\XviD: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Aften AC-3\Aften AC-3_dp_ Aften - DVD - Good.xml: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Aften AC-3\Aften AC-3_dp_ Aften - DVD - Low.xml: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Aften AC-3\Aften AC-3_dp_ _st_scratchpad_st_.xml: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\AviSynth\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\FFmpeg AC-3\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\FFmpeg MP2\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Flac\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\LAME MP3\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Nero AAC\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\OneClick\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\OPUS\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\QAAC\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\Vorbis\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\x264\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\x265\*: Zugriff verweigert
F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\XviD\*: Zugriff verweigert |
Now, I have already identified the issue and I know how to fix this in Windows Explorer.
The issue is there are some ACL targets from the old PC that don't exist on the new one (Users, Groups, presumably):
Quote: | C:\WINDOWS\system32>icacls "F:\Paxsali\Downloads\Apps\MeGUI_2507_x86\allprofiles\FFmpeg AC-3"
S-1-5-21-2275810633-4050005295-3420586433-1000: (F)
S-1-5-21-2275810633-4050005295-3420586433-513:(Rc,S,RA)
Jeder:(Rc,S,RA)
VORDEFINIERT\Administratoren:(OI)(CI)(F)
ERSTELLER-BESITZER:(OI)(CI)(IO)(F)
ERSTELLERGRUPPE:(OI)(CI)(IO)(Rc,S,RA)
Jeder:(OI)(CI)(IO)(Rc,S,RA) |
The targets in red don't exist and that is the issue.
When you remove those targets in Security tab in Explorer after you have aquired ownership, then the granting of full access to Groups you are member of, e.g. Administrators, will work after doing that.
Image:
Now, if there are any Windows Administrators here, I'd appreciate your help.
I need to know HOW I can do THAT on the Windows commandline (as admin ofc).
I tried so far (not sure I'm on the right track here...):
icacls "F:\Paxsali" /remove S-1-5-21-2275810633-4050005295-3420586433-1000
But it seems that doesn't do anything.
Please help!!! Now! Quick! Chop Chop!
"There will be no end to the troubles of humanity, until philosophers become kings, or kings become philosophers.", Plato.
"Hyperbole will destroy us all.", Matt Dillahunty.
"The hyperbole, the demonization of the other opinion and the unwillingness to even read the opposing opinion destroys the so important political discussions necessary for the well functioning of society.", Couleur
|
|
Back to top |
|
 |
|
Posted: Thu, 8th Dec 2016 08:26 Post subject: |
|
 |
Last edited by paxsali on Thu, 4th Jul 2024 21:19; edited 1 time in total
|
|
Back to top |
|
 |
|
Posted: Sun, 25th Dec 2016 00:41 Post subject: |
|
 |
totally over kill if you ask me
just run Windows in Safeboot from the MSconfig without net ... reboot
in Safe boot there are no Admin restrictions , that lock files (you can even delete key DLL system running processes)
Then just run the "Take Ownership" trick on the folder and presto ("cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F" or more simplified with http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/ )... and its yours ... even on HDDs that are profile/privilege locked haha
the problem here was, that when you run windows as normal there is a app that checks privilege and its ruining as a process ... in safe boot its disabled (this process is named consent.exe its in SYSTEM32)
its a getto way to get other people files ... same with a system, thats admin pass protected ... on it you can do a simple net user workaround , with the virtual keyborad to remove the password
|
|
Back to top |
|
 |
|
Posted: Sun, 25th Dec 2016 01:41 Post subject: |
|
 |
|
|
Back to top |
|
 |
Page 1 of 1 |
All times are GMT + 1 Hour |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group
|
|
 |
|