• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Permissions in Windows7 with files/folders from WinXP Pro

b4u

Golden Member
Hi,

I'm having an issue about permissions in Windows 7, which I would like to know if it's normal or not, how to best resolve it, and gain more knowledge about the subject.

The story goes as follows:

I had a Windows XP Pro machine, with my default user bellonging to Administrator group.

I've build a new machine, and installed Windows 7 Home Premium on it.

Then, I connected a brand new 1Tb Disk Drive to the old machine (WinXP Pro), created and formated an NTFS partition, and MOVED all my data directories to it (Pictures, Music, Movies, Documents, ...).

I disconnected the Hard Disk and connected it as a second disk on my Windows 7 machine.

Everything is there, I can access to every file.

Now, when I try to rename a directory, change a file, etc..., it asks for Administrator permission to do it. But I'm supposed to be an administrator ... but I have to confirm the action. It's annoying when working in file system, but when accessing from an application, the files are read-only and the applications cannot change them (for example, when openning a txt file with notepad, saving will open the "Save As" popup).


Now looking into the permissions on files/folders, I get the following info:

On a File:

SYSTEM <- full
Account Unknown (S-1-5-21-154....) <- full
Administrators (DESKTOP\Administrators) (group) <- full
Users (DESKTOP\Users) (group) <- read & execute

If I copy the file to somewhere else, the new file will have the following info:

SYSTEM <- full
Username (DESKTOP\Username) (user) <- full
Administrators (DESKTOP\Administrators) (group) <- full
Users (DESKTOP\Users) (group) <- read & execute


On a directory:

CREATOR OWNER <- special
SYSTEM <- full
Account Unknown (S-1-5-21-154....) <- special
Administrators (DESKTOP\Administrators) (group) <- full
Users (DESKTOP\Users) (group) <- read & execute & list

If I copy the directory (and all contents) to somewhere else, the new directory will have the following info:

Authenticated Users <- read & write & modify & list
SYSTEM <- full
Administrators (DESKTOP\Administrators) (group) <- full
Users (DESKTOP\Users) (group) <- read & execute & list


Permissions on disk drive:

Everyone <- special
CREATOR OWNER <- special
SYSTEM <- full
Administrators (DESKTOP\Administrators) (group) <- full
Users (DESKTOP\Users) (group) <- read & execute & list


So I have one solution to the problem, that would be to copy everything to another place, delete the originals and move the copies back to the original place ... that would be time-consuming and I'm sure there must be some other easier solution to it.

This situation made me thing about the subject, and some questions have arised:

1# How can I solve the situation without copying everything around? Will removing the "Account Unknown" work? Will forcing myself as owner solve it? How can I apply this changes/definitions through the entire folder/file structure on the hard disk?

2# Where are the permission info stored? In the NTFS file system, and totally independent of every bit of file data, that is, without the OS ever changing a single bit of a file?

3# Isn't supposed my user to be part of Administrators group? In user accounts, I can see "Username" as part of Administrators, as it is the only user, created during installation.

4# Where is the "Computer Management -> Local Users and Groups" console, for an advanced user management? Was it removed in Windows 7?


Thanks
 
1) yes taking ownership of the top level folder and applying it to all child folders should fix it

2) Its seperate inside the MFT$ filesystem table for ntfs volumes IIRC

3) Your are part of the administrator group, but you are not the main administrator. Its part of the security that Win7 implements. you typically run as normal user but when something need to change protected areas it will prompt you to ask if you want the change.
If you where actually a normal user you would have to type in the user admin and password to allow.

4) In Home Premium and under, its not available. On in pro and higher its there, there might be a way to get it back but I have not looked. Same thing in XP Home and Vista Home / Home Premium
 
Last edited:
Right click on your file manager (Explorer) and select Run As Administrator. And, as was suggested, right click the folder and "Take Ownership."
 
Back
Top