Real Geek Forums > Archives > Operating Systems > Windows Vista > Windows Vista Security > Permissions

Permissions

Posted: 06-11-2006, 10:03 PM
BigNVista
Guest
Posts: n/a
 
I am trying to create a folder where I have the only permissions. I am an
administrator. I create the folder and it inherits all the permissions from
the parent. It gives the Users group read and execute permission, which I do
not want. I went in and unchecked the "inheritable permissions" box. The
Users group then goes away from the advanced screen, but when I go back to
the main properties page, they are still there. Then when I add any files or
folders to this new folder, they inherit the "read and execute" Users group
from the parent folder where I just removed the Users group. The only way I
have figured out to get around this is to add a new Users group to the folder
with deny permissions, which is supposed to override the allow permissions.
Is there an easier way to do this? I should be able to create a folder and
delete out any account I want to and have it propagate to the subfolders and
subfiles.

Thanks
--
http://www.nateandrews.com
Reply With Quote

Responses to "Permissions"

BigNVista
Guest
Posts: n/a
 
Permissions
Posted: 06-11-2006, 10:04 PM
I am trying to create a folder where I have the only permissions. I am an
administrator. I create the folder and it inherits all the permissions from
the parent. It gives the Users group read and execute permission, which I do
not want. I went in and unchecked the "inheritable permissions" box. The
Users group then goes away from the advanced screen, but when I go back to
the main properties page, they are still there. Then when I add any files or
folders to this new folder, they inherit the "read and execute" Users group
from the parent folder where I just removed the Users group. The only way I
have figured out to get around this is to add a new Users group to the folder
with deny permissions, which is supposed to override the allow permissions.
Is there an easier way to do this? I should be able to create a folder and
delete out any account I want to and have it propagate to the subfolders and
subfiles.

Thanks
--
http://www.nateandrews.com
Reply With Quote
cj
Guest
Posts: n/a
 
Permissions
Posted: 06-26-2006, 12:40 PM
Tony,
Thanks for the rapid response, apparently I wasn't very clear on my
problem.
That "irc" issue was just an example, with the real issue being, why can't I
change my permissions, and why don't I have full rights?
Reply With Quote
Bob
Guest
Posts: n/a
 
Permissions
Posted: 10-08-2006, 11:53 PM
I can understand that some people want and need this vast security, but I am
the only user running on a stand-alone graphics workstation, and even though
I am logged in with administrator rights, I am denied the right to install
some of my graphics software with the error "you need administrative rights,
blah blah blah". This being a contradiction in itself, I am forced, as
suggested, to turn off UAC and reboot the computer. This seems very
counter-productive for users such as myself if I have to keep rebooting to
turn on and off UAC, as, IMO if you have administrator rights, you should
have full control. Even Linux gives you full control when logged on with
admin rights. Just a suggestion for the final release.........let
administrator rights "be" administrator rights. Outside of that, Great job
on the OS to the MS Team!
Reply With Quote
David J. Craig
Guest
Posts: n/a
 
Re: Permissions
Posted: 10-09-2006, 12:53 AM
Get new software. The software should come with a manifest that tells Vista
it needs administrator rights to do the install. If the software is
distributed using the .msi style installers, it will just be told that admin
rights are needed and after you OK it, it will just happen automatically.
Have you asked the software provider when the update will be ready?

"Bob" <Bob@discussions.microsoft.com> wrote in message
news:1099C545-4455-411D-9502-7E43F8034B0C@microsoft.com...
>I can understand that some people want and need this vast security, but I
>am
> the only user running on a stand-alone graphics workstation, and even
> though
> I am logged in with administrator rights, I am denied the right to install
> some of my graphics software with the error "you need administrative
> rights,
> blah blah blah". This being a contradiction in itself, I am forced, as
> suggested, to turn off UAC and reboot the computer. This seems very
> counter-productive for users such as myself if I have to keep rebooting to
> turn on and off UAC, as, IMO if you have administrator rights, you should
> have full control. Even Linux gives you full control when logged on with
> admin rights. Just a suggestion for the final release.........let
> administrator rights "be" administrator rights. Outside of that, Great
> job
> on the OS to the MS Team!

Reply With Quote
Steve Riley [MSFT]
Guest
Posts: n/a
 
Re: Permissions
Posted: 10-09-2006, 01:18 AM
What you're asking for is a return to the way previous versions of Windows behaved. That is, when you're logged in as a member of the local administrators group, then anything you do also runs as local administrator -- including any malware that might happen to be on your computer.

The purpose of UAC is to let you know more about what your computer is doing and give you more control over it. In Windows Vista, when you log in as a local administrator, your actions still occur in the context of a standard user. Only when something requires administrative privileges will the UAC dialog interrupt -- and this is intentional. It's to let you know that the next thing to happen has the ability to possibly make systemwide changes to your computer. Sure, you have to give Windows permission to do such things that you initiate, but also UAC will raise the prompt if any malware is trying to do similar tasks. UAC certainly won't prevent malware from running, because you could certainly give it permission. But it does stop the silent installs of this stuff.

If you need to do a lot of work under the privileged token, then you could run an elevated command prompt or Windows Explorer. Anything you launch from inside either of these will run elevated as well, avoiding additional prompts.

See http://www.microsoft.com/technet/win...urity/uac.mspx for more information on UAC.

Steve Riley
steve.riley@microsoft.com


"Bob" <Bob@discussions.microsoft.com> wrote in message news:1099C545-4455-411D-9502-7E43F8034B0C@microsoft.com...
I can understand that some people want and need this vast security, but I am
the only user running on a stand-alone graphics workstation, and even though
I am logged in with administrator rights, I am denied the right to install
some of my graphics software with the error "you need administrative rights,
blah blah blah". This being a contradiction in itself, I am forced, as
suggested, to turn off UAC and reboot the computer. This seems very
counter-productive for users such as myself if I have to keep rebooting to
turn on and off UAC, as, IMO if you have administrator rights, you should
have full control. Even Linux gives you full control when logged on with
admin rights. Just a suggestion for the final release.........let
administrator rights "be" administrator rights. Outside of that, Great job
on the OS to the MS Team!
Reply With Quote
Bob
Guest
Posts: n/a
 
Re: Permissions
Posted: 10-09-2006, 01:46 AM
Steve, yes, as I only use "this" PC for pure "work" no websurfing or emails,
etc., I would idealy like it work like previous versions of Windows. You
mention using Windows Explorer for higher level access, that is from where I
was denied access originally when trying to run "Setup.exe" for Coreldraw
Designer12. I don't care about the "warning prompts" from UAC, its the total
denial of access issues, claiming I don't have admin rights that I am talking
about. Don't get me wrong, I love this OS, but I just find the security
scheme to be a bit overbearing.

Thanks for replying.

"Steve Riley [MSFT]" wrote:
> What you're asking for is a return to the way previous versions of Windows
> behaved. That is, when you're logged in as a member of the local
> administrators group, then anything you do also runs as local
> administrator -- including any malware that might happen to be on your
> computer.
>
> The purpose of UAC is to let you know more about what your computer is
> doing and give you more control over it. In Windows Vista, when you log in
> as a local administrator, your actions still occur in the context of a
> standard user. Only when something requires administrative privileges will
> the UAC dialog interrupt -- and this is intentional. It's to let you know
> that the next thing to happen has the ability to possibly make systemwide
> changes to your computer. Sure, you have to give Windows permission to do
> such things that you initiate, but also UAC will raise the prompt if any
> malware is trying to do similar tasks. UAC certainly won't prevent malware
> from running, because you could certainly give it permission. But it does
> stop the silent installs of this stuff.
>
> If you need to do a lot of work under the privileged token, then you could
> run an elevated command prompt or Windows Explorer. Anything you launch
> from inside either of these will run elevated as well, avoiding additional
> prompts.
>
> See http://www.microsoft.com/technet/win...urity/uac.mspx for
> more information on UAC.
>
> Steve Riley
> steve.riley@microsoft.com
>
>
> "Bob" <Bob@discussions.microsoft.com> wrote in message
> news:1099C545-4455-411D-9502-7E43F8034B0C@microsoft.com...
> I can understand that some people want and need this vast security, but
> I am
> the only user running on a stand-alone graphics workstation, and even
> though
> I am logged in with administrator rights, I am denied the right to
> install
> some of my graphics software with the error "you need administrative
> rights,
> blah blah blah". This being a contradiction in itself, I am forced, as
> suggested, to turn off UAC and reboot the computer. This seems very
> counter-productive for users such as myself if I have to keep rebooting
> to
> turn on and off UAC, as, IMO if you have administrator rights, you
> should
> have full control. Even Linux gives you full control when logged on
> with
> admin rights. Just a suggestion for the final release.........let
> administrator rights "be" administrator rights. Outside of that, Great
> job
> on the OS to the MS Team!
>
Reply With Quote
Bob
Guest
Posts: n/a
 
Re: Permissions
Posted: 10-09-2006, 02:00 AM
I see it now, from within Explorer "right click" the file and "run as
administrator". I can live with that. Thanks Steve.

"Steve Riley [MSFT]" wrote:
> What you're asking for is a return to the way previous versions of Windows
> behaved. That is, when you're logged in as a member of the local
> administrators group, then anything you do also runs as local
> administrator -- including any malware that might happen to be on your
> computer.
>
> The purpose of UAC is to let you know more about what your computer is
> doing and give you more control over it. In Windows Vista, when you log in
> as a local administrator, your actions still occur in the context of a
> standard user. Only when something requires administrative privileges will
> the UAC dialog interrupt -- and this is intentional. It's to let you know
> that the next thing to happen has the ability to possibly make systemwide
> changes to your computer. Sure, you have to give Windows permission to do
> such things that you initiate, but also UAC will raise the prompt if any
> malware is trying to do similar tasks. UAC certainly won't prevent malware
> from running, because you could certainly give it permission. But it does
> stop the silent installs of this stuff.
>
> If you need to do a lot of work under the privileged token, then you could
> run an elevated command prompt or Windows Explorer. Anything you launch
> from inside either of these will run elevated as well, avoiding additional
> prompts.
>
> See http://www.microsoft.com/technet/win...urity/uac.mspx for
> more information on UAC.
>
> Steve Riley
> steve.riley@microsoft.com
>
>
> "Bob" <Bob@discussions.microsoft.com> wrote in message
> news:1099C545-4455-411D-9502-7E43F8034B0C@microsoft.com...
> I can understand that some people want and need this vast security, but
> I am
> the only user running on a stand-alone graphics workstation, and even
> though
> I am logged in with administrator rights, I am denied the right to
> install
> some of my graphics software with the error "you need administrative
> rights,
> blah blah blah". This being a contradiction in itself, I am forced, as
> suggested, to turn off UAC and reboot the computer. This seems very
> counter-productive for users such as myself if I have to keep rebooting
> to
> turn on and off UAC, as, IMO if you have administrator rights, you
> should
> have full control. Even Linux gives you full control when logged on
> with
> admin rights. Just a suggestion for the final release.........let
> administrator rights "be" administrator rights. Outside of that, Great
> job
> on the OS to the MS Team!
>
Reply With Quote
SteveC
Guest
Posts: n/a
 
Re: Permissions
Posted: 10-09-2006, 02:35 AM
It wouldn't be so bad if Windows remembered anything. Every time I start yahoo messenger, I get asked if I should run the yahoo thingy that checks for newer versions. Whether I say yes or no, it asks me again the next time. I find that grating. I cannot move things around in my Start Menu. Every time I try, I have to give permission twice; I cannot even use the keyboard enter key because it moves around between OK and Cancel. Half the time, it won't move the item anyhow. Internet Explorer balks at forwarding a web page until I turned off Protected Mode.

There is no way we can use this OS as it is now at our school; our users won't know what to do. They panic when they get pop-ups. And it is just too complicated to do anything. I don't dare tell this to our IT guy; he hates Microsoft and Windows and wants us to go to Linux as it is. It took us raising hell to stop him from converting the servers. I have been telling him that IE 7 and Vista will make our IT jobs easier, but now I will have to say reluctantly we need to stick with XP Pro for a while longer. This UAC is driving me crazy.
"Steve Riley [MSFT]" <steve.riley@microsoft.com> wrote in message news:06923D33-D285-4CFF-B90A-5E8A3D2FE4B0@microsoft.com...
What you're asking for is a return to the way previous versions of Windows behaved. That is, when you're logged in as a member of the local administrators group, then anything you do also runs as local administrator -- including any malware that might happen to be on your computer.

The purpose of UAC is to let you know more about what your computer is doing and give you more control over it. In Windows Vista, when you log in as a local administrator, your actions still occur in the context of a standard user. Only when something requires administrative privileges will the UAC dialog interrupt -- and this is intentional. It's to let you know that the next thing to happen has the ability to possibly make systemwide changes to your computer. Sure, you have to give Windows permission to do such things that you initiate, but also UAC will raise the prompt if any malware is trying to do similar tasks. UAC certainly won't prevent malware from running, because you could certainly give it permission. But it does stop the silent installs of this stuff.

If you need to do a lot of work under the privileged token, then you could run an elevated command prompt or Windows Explorer. Anything you launch from inside either of these will run elevated as well, avoiding additional prompts.

See http://www.microsoft.com/technet/win...urity/uac.mspx for more information on UAC.

Steve Riley
steve.riley@microsoft.com


"Bob" <Bob@discussions.microsoft.com> wrote in message news:1099C545-4455-411D-9502-7E43F8034B0C@microsoft.com...
I can understand that some people want and need this vast security, but I am
the only user running on a stand-alone graphics workstation, and even though
I am logged in with administrator rights, I am denied the right to install
some of my graphics software with the error "you need administrative rights,
blah blah blah". This being a contradiction in itself, I am forced, as
suggested, to turn off UAC and reboot the computer. This seems very
counter-productive for users such as myself if I have to keep rebooting to
turn on and off UAC, as, IMO if you have administrator rights, you should
have full control. Even Linux gives you full control when logged on with
admin rights. Just a suggestion for the final release.........let
administrator rights "be" administrator rights. Outside of that, Great job
on the OS to the MS Team!
Reply With Quote
Bob
Guest
Posts: n/a
 
Re: Permissions
Posted: 10-09-2006, 04:58 PM
David, all of my software is the latest versions (2006) and I can tell you
that Solidworks, Autocad, Adobe, Corel, etc. won't provide what you think I
need unitl the official release of Vista. Elephants move slowly.

"David J. Craig" wrote:
> Get new software. The software should come with a manifest that tells Vista
> it needs administrator rights to do the install. If the software is
> distributed using the .msi style installers, it will just be told that admin
> rights are needed and after you OK it, it will just happen automatically.
> Have you asked the software provider when the update will be ready?
>
> "Bob" <Bob@discussions.microsoft.com> wrote in message
> news:1099C545-4455-411D-9502-7E43F8034B0C@microsoft.com...
> >I can understand that some people want and need this vast security, but I
> >am
> > the only user running on a stand-alone graphics workstation, and even
> > though
> > I am logged in with administrator rights, I am denied the right to install
> > some of my graphics software with the error "you need administrative
> > rights,
> > blah blah blah". This being a contradiction in itself, I am forced, as
> > suggested, to turn off UAC and reboot the computer. This seems very
> > counter-productive for users such as myself if I have to keep rebooting to
> > turn on and off UAC, as, IMO if you have administrator rights, you should
> > have full control. Even Linux gives you full control when logged on with
> > admin rights. Just a suggestion for the final release.........let
> > administrator rights "be" administrator rights. Outside of that, Great
> > job
> > on the OS to the MS Team!
>
>
>
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply
Page 1 of 2 1 2 >

« Previous Thread | Next Thread »

Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Permissions Ian M. Walker Windows Vista Administration 35 03-19-2008 02:57 AM
Administrator Permissions a symms Windows Vista Administration 22 11-17-2007 05:42 PM
Permissions and TrustedInstaller Jarmo Windows Vista File Management 5 11-24-2006 03:43 PM
Vista and XP Permissions Alex Windows Vista Administration 2 07-05-2006 12:33 AM
Special permissions Gjert Stensrud Windows Vista File Management 8 06-27-2006 11:29 AM