how to restore default permissions on all folder/ structure as XP was initailly

[newbie]

current state - missing security tab
- lost track of all the permission set pn various folders

objective - return default permissions.


I recently had to take owner ship (from within a primary
user, set as admin - from administrator) of my documents
and settings (in XP pro) as a result of some
installation, although I succedeed in the install, I cant
see or access my home/Small bz network, behind a
residential gateway.

how can I have XP pro restore my defaults permission for
accessibility on the all the folders (not system restore)

[Kent W. England [MVP]]

There is a Security Configuration snap-in that you can add to a mmc
console that allows you to import configuration templates and re-apply
them to your computer, but I can't find one of the defaults that
reconfigures the Documents and Settings folders. I suppose we could
create one. Perhaps Roger Abell has a lead to the right template file to
use? If so, he can also post instructions (or I can repeat them if
needed) for how to use the Admin Tool to import this template, analyze
it, and then reconfigure your NTFS. However, the template probably
couldn't fix existing user profiles, which is what you need to do, since
those SIDs are not yet created on a fresh system.

The alternative is to simply recreate the settings using Windows
Explorer.

My D&S Folder has the following:

Administrators Full Control
Everyone Read&Execute
Power Users Read&Execute
SYSTEM Full Control
Users Read&Execute

Administrators owns the folder and no permissions are inherited from the
root of C: All permissions apply to this folder, subfolders, and files.

Each user profile has the following:

Administrators Full Control
<user account> Full Control
SYSTEM Full Control

Administrators owns the folder and no permissions are inherited from
D&S. All permissions apply to this folder, subfolders, and files. You
may need to replace permissions on child objects from the user profile
downward, if you find that some contents are still not accessible.

The All Users profile is special, since it is shared and the other
system folders are special, but I assume you don't need to fix those.

--
Kent W. England, Microsoft MVP for Windows



"newbie" > wrote in
message ...
>
> current state - missing security tab
> - lost track of all the permission set pn various folders
>
> objective - return default permissions.
>
>
> I recently had to take owner ship (from within a primary
> user, set as admin - from administrator) of my documents
> and settings (in XP pro) as a result of some
> installation, although I succedeed in the install, I cant
> see or access my home/Small bz network, behind a
> residential gateway.
>
> how can I have XP pro restore my defaults permission for
> accessibility on the all the folders (not system restore)
>
>

[David Candy]

Setup security.inf is the standard. And it sets D&S and All Users.

--=20
http://www.g2mil.com/Apr2003.htm
http://www.sharpword.com/fascism.htm
---------------------------------------------------------------
David Candy
http://www.mvps.org/serenitymacros
---------------------------------------------------------------
"Kent W. England [MVP]" > wrote in message =
...
> There is a Security Configuration snap-in that you can add to a mmc
> console that allows you to import configuration templates and re-apply
> them to your computer, but I can't find one of the defaults that
> reconfigures the Documents and Settings folders. I suppose we could
> create one. Perhaps Roger Abell has a lead to the right template file =
to
> use? If so, he can also post instructions (or I can repeat them if
> needed) for how to use the Admin Tool to import this template, analyze
> it, and then reconfigure your NTFS. However, the template probably
> couldn't fix existing user profiles, which is what you need to do, =
since
> those SIDs are not yet created on a fresh system.
>=20
> The alternative is to simply recreate the settings using Windows
> Explorer.
>=20
> My D&S Folder has the following:
>=20
> Administrators Full Control
> Everyone Read&Execute
> Power Users Read&Execute
> SYSTEM Full Control
> Users Read&Execute
>=20
> Administrators owns the folder and no permissions are inherited from =
the
> root of C: All permissions apply to this folder, subfolders, and =
files.
>=20
> Each user profile has the following:
>=20
> Administrators Full Control
> <user account> Full Control
> SYSTEM Full Control
>=20
> Administrators owns the folder and no permissions are inherited from
> D&S. All permissions apply to this folder, subfolders, and files. You
> may need to replace permissions on child objects from the user profile
> downward, if you find that some contents are still not accessible.
>=20
> The All Users profile is special, since it is shared and the other
> system folders are special, but I assume you don't need to fix those.
>=20
> --=20
> Kent W. England, Microsoft MVP for Windows
>=20
>=20
>=20
> "newbie" > wrote in
> message ...
> >
> > current state - missing security tab
> > - lost track of all the permission set pn various folders
> >
> > objective - return default permissions.
> >
> >
> > I recently had to take owner ship (from within a primary
> > user, set as admin - from administrator) of my documents
> > and settings (in XP pro) as a result of some
> > installation, although I succedeed in the install, I cant
> > see or access my home/Small bz network, behind a
> > residential gateway.
> >
> > how can I have XP pro restore my defaults permission for
> > accessibility on the all the folders (not system restore)
> >
> >
>=20

[Kent W. England [MVP]]

That is odd. When I create a new database, import that template, and
analyze my computer, the result says that D&S is "not analyzed", so I
assume there are no settings for D&S and any subfolders.

--
Kent W. England, Microsoft MVP for Windows



"David Candy" > wrote in
message ...

Setup security.inf is the standard. And it sets D&S and All Users.

[David Candy]

Probably not worth analysising as nothing inherits from it. All Users in =
D&S IS analysised.

--=20
http://www.g2mil.com/Apr2003.htm
http://www.sharpword.com/fascism.htm
---------------------------------------------------------------
David Candy
http://www.mvps.org/serenitymacros
---------------------------------------------------------------
"Kent W. England [MVP]" > wrote in message =
...
> That is odd. When I create a new database, import that template, and
> analyze my computer, the result says that D&S is "not analyzed", so I
> assume there are no settings for D&S and any subfolders.
>=20
> --=20
> Kent W. England, Microsoft MVP for Windows
>=20
>=20
>=20
> "David Candy" > wrote in
> message ...
>=20
> Setup security.inf is the standard. And it sets D&S and All Users.
>=20
>=20

[cpu]

I have the same problem.

If I follow this, will get the defaults back in to all its sub folders?

does the file system have to be NTFS?

will the apps need the permissions beyond the installation phase?

"Kent W. England [MVP]" > wrote in message
...
> There is a Security Configuration snap-in that you can add to a mmc
> console that allows you to import configuration templates and re-apply
> them to your computer, but I can't find one of the defaults that
> reconfigures the Documents and Settings folders. I suppose we could
> create one. Perhaps Roger Abell has a lead to the right template file to
> use? If so, he can also post instructions (or I can repeat them if
> needed) for how to use the Admin Tool to import this template, analyze
> it, and then reconfigure your NTFS. However, the template probably
> couldn't fix existing user profiles, which is what you need to do, since
> those SIDs are not yet created on a fresh system.
>
> The alternative is to simply recreate the settings using Windows
> Explorer.
>
> My D&S Folder has the following:
>
> Administrators Full Control
> Everyone Read&Execute
> Power Users Read&Execute
> SYSTEM Full Control
> Users Read&Execute
>
> Administrators owns the folder and no permissions are inherited from the
> root of C: All permissions apply to this folder, subfolders, and files.
>
> Each user profile has the following:
>
> Administrators Full Control
> <user account> Full Control
> SYSTEM Full Control
>
> Administrators owns the folder and no permissions are inherited from
> D&S. All permissions apply to this folder, subfolders, and files. You
> may need to replace permissions on child objects from the user profile
> downward, if you find that some contents are still not accessible.
>
> The All Users profile is special, since it is shared and the other
> system folders are special, but I assume you don't need to fix those.
>
> --
> Kent W. England, Microsoft MVP for Windows
>
>
>
> "newbie" > wrote in
> message ...
> >
> > current state - missing security tab
> > - lost track of all the permission set pn various folders
> >
> > objective - return default permissions.
> >
> >
> > I recently had to take owner ship (from within a primary
> > user, set as admin - from administrator) of my documents
> > and settings (in XP pro) as a result of some
> > installation, although I succedeed in the install, I cant
> > see or access my home/Small bz network, behind a
> > residential gateway.
> >
> > how can I have XP pro restore my defaults permission for
> > accessibility on the all the folders (not system restore)
> >
> >
>

[Kent W. England [MVP]]

You need to check the box to apply permissions to child objects in order
for subfolders and files to be set to the inherited permissions.

Yes the file system must be NTFS as FAT32 has no permissions to set.

I don't know what you mean by the third question. That likely deserves a
new thread with some more explanation. This thread was discussing user
data folders.

--
Kent W. England, Microsoft MVP for Windows



"cpu" > wrote in message
...
> I have the same problem.
>
> If I follow this, will get the defaults back in to all its sub
folders?
>
> does the file system have to be NTFS?
>
> will the apps need the permissions beyond the installation phase?
>
> "Kent W. England [MVP]" > wrote in message
> ...
> > There is a Security Configuration snap-in that you can add to a mmc
> > console that allows you to import configuration templates and
re-apply
> > them to your computer, but I can't find one of the defaults that
> > reconfigures the Documents and Settings folders. I suppose we could
> > create one. Perhaps Roger Abell has a lead to the right template
file to
> > use? If so, he can also post instructions (or I can repeat them if
> > needed) for how to use the Admin Tool to import this template,
analyze
> > it, and then reconfigure your NTFS. However, the template probably
> > couldn't fix existing user profiles, which is what you need to do,
since
> > those SIDs are not yet created on a fresh system.
> >
> > The alternative is to simply recreate the settings using Windows
> > Explorer.
> >
> > My D&S Folder has the following:
> >
> > Administrators Full Control
> > Everyone Read&Execute
> > Power Users Read&Execute
> > SYSTEM Full Control
> > Users Read&Execute
> >
> > Administrators owns the folder and no permissions are inherited from
the
> > root of C: All permissions apply to this folder, subfolders, and
files.
> >
> > Each user profile has the following:
> >
> > Administrators Full Control
> > <user account> Full Control
> > SYSTEM Full Control
> >
> > Administrators owns the folder and no permissions are inherited from
> > D&S. All permissions apply to this folder, subfolders, and files.
You
> > may need to replace permissions on child objects from the user
profile
> > downward, if you find that some contents are still not accessible.
> >
> > The All Users profile is special, since it is shared and the other
> > system folders are special, but I assume you don't need to fix
those.
> >
> > --
> > Kent W. England, Microsoft MVP for Windows
> >
> >
> >
> > "newbie" > wrote in
> > message ...
> > >
> > > current state - missing security tab
> > > - lost track of all the permission set pn various folders
> > >
> > > objective - return default permissions.
> > >
> > >
> > > I recently had to take owner ship (from within a primary
> > > user, set as admin - from administrator) of my documents
> > > and settings (in XP pro) as a result of some
> > > installation, although I succedeed in the install, I cant
> > > see or access my home/Small bz network, behind a
> > > residential gateway.
> > >
> > > how can I have XP pro restore my defaults permission for
> > > accessibility on the all the folders (not system restore)
> > >
> > >
> >
>
>