windows 7 and cacls errors - MSSE

[slag]

I tried to update my security essentials and it blew up with an error code
Installation Error 0x80070643



Which, according to this site, can mean a few things.
http://answers.microsoft.com/en-us/...80070643/908fad3e-f9fc-4d8a-be83-ae7d3bc48db5


So, it appears I need to run a cacls command as the last couple entries show my desktop doesn't have write access for all users.


MSI (s) (EC:C4) [15:18:44:425]: Product: Microsoft Security Client -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2902. The arguments are: ixoShortcutPropertyCreate, ,

MSI (s) (EC:C4) [15:18:44:426]: User policy value 'DisableRollback' is 0
MSI (s) (EC:C4) [15:18:44:426]: Machine policy value 'DisableRollback' is 0
Action ended 15:18:44: InstallFinalize. Return value 3.


The site listed above said I need to run a cacls command, but it doesn't run in Windows 7 anymore. IT generates this error, even running from an administrative command prompt.


C:\Windows\system32>CACLS "c:\documents and settings\all users\desktop" /t /g everyone:f

NOTE: Cacls is now deprecated, please use Icacls.


When I run this command with icacls, I get the following error:


C:\Windows\system32>ICACLS "c:\documents and settings\all users\desktop" /t /g everyone:f
Invalid parameter "and"


What do I need to do to let it accept spaces as valid characters? Normally putting it in quotes works, but not here.



/frustrated...

 

[Bubbaleone]

That command applies to windows XP. Try this Windows 7 command:

icacls "C:\Users\Public\Desktop" /grant Everyone:F /T

.

 

[slag]

That command applies to windows XP. Try this Windows 7 command:

icacls "C:\Users\Public\Desktop" /grant Everyone:F /T

.

Thanks.. how about this one?

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

It doesn't like the space between start and menu

 

[Bubbaleone]

That's interesting... did a few tests with syntax and it seems that icacls doesn't like the last directory in a command left open if there are directory names with spaces prior to it, regardless of parentheses. I tried it with this command first, which saves all the acls to C:\Programs\aclfile:

icacls "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*" /save aclfile /t


This command also functioned correctly and (as above) differs only in the \* after Programs, and all enclosed in parentheses of course:

icacls "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*" /grant Everyone:F /T

.