View Single Post
  #21  
Old June 9th 10, 11:29 PM posted to alt.windows-xp,microsoft.public.windowsxp.help_and_support,microsoft.public.windowsxp.basics
John John - MVP[_2_]
external usenet poster
 
Posts: 1,637
Default Adding Other Boot's Computer Name to list of File Security Locations?


No, only the Owner and System have permissions on private folders, they
are off limit for all other users, including Administrators! To access
the files you have to seize ownership of the folders under guise of the
System account. Also, this "Make this Folder Private" option is only
available when Simple File Sharing is turned on, but the folder will
remain private as long as it isn't changed again, disabling Simple File
Sharing does not change the private status of the folder.

If you are using XP Pro disable Simple File Sharing and take a look at
and make note of the permissions on one of your folders in your profile
directory. Then enable simplified file sharing and make the folder
private. Then disable Simple File Sharing again (to access the Security
Tab) and take another look at the permissions. To remove the "private"
status enable SFS again. You can also use the CACLS command to verify
the permissions, for XP Home this is the easiest way, run calcs on the
folder then make the folder private and run the cacls command again and
compare the results, typically it will be like this:


Without Private folder:

C:\cacls "C:\Documents and Settings\Jean-Guy"
C:\Documents and Settings\Jean-Guy NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEMOI)(CI)(IO)F
JGZ-HOME\Jean-Guy:F
JGZ-HOME\Jean-GuyOI)(CI)(IO)F
BUILTIN\Administrators:F
BUILTIN\AdministratorsOI)(CI)(IO)F

Private folder enabled:

C:\cacls "C:\Documents and Settings\Jean-Guy"
C:\Documents and Settings\Jean-Guy NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEMOI)(CI)(IO)F
JGZ-HOME\Jean-Guy:F
JGZ-HOME\Jean-GuyOI)(CI)(IO)F


Larry will have to rely on a different solution to protect his files
while making them available on the other Windows installation.

See here for more information:
http://support.microsoft.com/kb/304040

John

Tim Meddick wrote:
John - the way I see it (the OP's problem) is this ;

I am well aware that he does not want to dismiss the current "private"
status of the XP folders on a dual-boot system.

However, as far as I am aware, making folders "private" does [should]
*not* make those XP folders inaccessible to a user on the Win7 OS who is
a member of the Administrators group!

Members of the Administrators group, on any (previous) NT-based OS, have
access across dual-boot systems, to *any* files and folders on drives
belonging to their opposing OS.

The OP has made sure (partly on my advice) that the folders in question
have been granted Administrators-Group full-access while in the XP OS -
Then, still cannot access those same folders in an Administrator-level
user on the Win7 OS.

Can you explain this anomaly, or do you think this is normal?

==

Cheers, Tim Meddick, Peckham, London. :-)




"John John - MVP" wrote in message
...

Larry Lindstrom wrote:
On 6/8/2010 12:03 PM, Tim Meddick wrote:
Security "Groups" aren't assigned SIDs - only "Users" - that's why I
stressed adding the "Administrators" Group to the user-list and NOT the
(built-in) user named "Administrator"

Please note again the difference :

Administrators = YES
Administrator = NO

Thanks Again Tim:

Still no luck.


You can't have it both ways, Larry, private is private, either the
files are private or they are not. There is no "peeking" at private
folders and there are no varying levels of privacy, it's all or
nothing. From Windows 7 you would need to take ownership of the
folder then grant yourself adequate access rights to the objects
within. I can only suggest that you use standard NTFS permissions to
control access to the files or that you use encryption or a third
party solution. Be sure that you understand the risks of file loss if
you decide to use NTFS encryption!

John


Ads