1

Is there a way to reset the security settings on the c:\windows folder of Win7. I have found this approach here, but formatting an copying back seems a little complex.

Any ideas?

Community
  • 1
Horst Walter
  • 159
  • 1
  • 1
  • 9

1 Answers1

0

Try using the subinacl.msi-tool. Install it in your System32-folder.

After that, run these commands in 'Run'

subinacl /subdirectories %WINDIR% /sgrant=administrators=f 
subinacl /subdirectories %WINDIR% /sgrant=system=f

(They may take a while, so have patience)

Bart De Vos
  • 17,911
  • 6
  • 63
  • 82
  • Does this completely reset the permissions to default? Seems like this only adds administrators and system as full-permission-user. What if I want to reset the whole security back to default (including removal of user-permissions that are not default)? – wullxz May 19 '11 at 10:42
  • Sgrant will add a Successfull (Allow) Audit Ace for the user and remove all existing Audit Ace for this user(or group). (Editted my post) – Bart De Vos May 19 '11 at 10:49
  • Thanks a lot for the hint. The installation and running the commands above works fine. But I am not sure, is this a full reset. E.g. to overcome some issues I have changed the ownership (of c:\windows) to my user account, but it remains this way. A full reset should set this back to TrustedInstaller. I am no professional admin, but it looks not like afull reset to my. Am I wrong? – Horst Walter May 19 '11 at 11:19
  • That's what I meant. A solution to reset permissions to pure default-permissions would be cool. – wullxz May 19 '11 at 11:30
  • Administrator & System are the defaults for the windows-installation dir. There is no 'restore-to-default-button' so this is the only way I know off. – Bart De Vos May 19 '11 at 11:36
  • Please do not get it wrong, your approach is working and so far the only (and hence best) solution. Only it is not a full reset IMHO. I have a similar issue pending at MS support, see what they come up with. I'll let you know - TiZon I really appreciate your help. – Horst Walter May 19 '11 at 13:25
  • I believe TiZon is right, there is no way to restore the permissions on Vista or later, take a look at this article: http://support.microsoft.com/kb/313222. – Lucky Luke May 19 '11 at 14:01
  • @Horst Walter no offense taken :-). I just wouldn't know what to do otherwise :-). – Bart De Vos May 19 '11 at 15:00
  • Yep, Microsoft support came back withe exactly that KB article http://support.microsoft.com/kb/313222 Thanks to all helping me on this. – Horst Walter May 20 '11 at 14:27