A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

How to get full access to all contents?



 
 
Thread Tools Display Modes
  #16  
Old December 20th 03, 11:17 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

I tried to add myself and/or another user to "Users Who Can Transparently
Access this File" and got an error
"ERSADU
Error in adding new user(s). Error code 5."
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the "Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in

Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full access

to
all
contents?













Ads
  #17  
Old December 20th 03, 11:17 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

Could the NTFS permissions denial begin to appear because of the computer
renaming?
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the "Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in

Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full access

to
all
contents?













  #18  
Old December 20th 03, 11:18 PM
Roger Abell
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

It could, but such is not normally the case.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
Could the NTFS permissions denial begin to appear because of joining a
domain?
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is

EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the "Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?















  #19  
Old December 20th 03, 11:18 PM
Roger Abell
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

code 5 is probably access failure
in this case since you do not have EFS capability to decrypt
you are not allowed to modify who can decrypt

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I tried to add myself and/or another user to "Users Who Can Transparently
Access this File" and got an error
"ERSADU
Error in adding new user(s). Error code 5."
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is

EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the "Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?















  #20  
Old December 20th 03, 11:18 PM
Roger Abell
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

You are dealing with an EFS issue it appears.
Did you try using cipher yet ?

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
Could the NTFS permissions denial begin to appear because of the computer
renaming?
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is

EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the "Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?















  #21  
Old December 20th 03, 11:18 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

The only user Name in "Users Who Can Transparently Access This File" in
"Encryption Details for" the file is "ME$(ME$@workgroup)". The "Recovery
Agent Name" is Administrator. "ME" was my computer name before renaming. The
renaming was made for joining the domain. "Workgroup" was my workgroup name.
There was not a Local user with "ME" name before joining the domain. The
error message is the same when I try to open the file under the Local
"Administrator" account. Importing a private key saved before joining the
domain haven't helped.
"Roger Abell" wrote in message
...
You are dealing with an EFS issue it appears.
Did you try using cipher yet ?

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
Could the NTFS permissions denial begin to appear because of the

computer
renaming?
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is

EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the

"Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk.

Double
click
it
and answer yes to the import prompt. REG files can be viewed

in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?

















  #22  
Old December 20th 03, 11:19 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

I encrypted the containing folder under local account "2" before renaming
the computer. The file was encrypted when was placed in the folder under
local account "2" after renaming. The Private key was saved under local
account "2" too.
"Roger Abell" wrote in message
...
You are dealing with an EFS issue it appears.
Did you try using cipher yet ?

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
Could the NTFS permissions denial begin to appear because of the

computer
renaming?
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is

EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the

"Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk.

Double
click
it
and answer yes to the import prompt. REG files can be viewed

in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?

















  #23  
Old December 20th 03, 11:19 PM
Ryan
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

seems I am having the same problem, so are many people. They say that with
Encryption, if you don't have the right certificate, you are screwed. But
there must be a way, even if we get a hacker/cracker to do it???
Please e-mail me if you solve the problem!

Ryan





"Dmitriy Kopnichev" wrote in message
...
The file is EXE.
"KJ" wrote in message
...
You are probably having a problem with Windows Media
Player, it will say this if you don't allow it to view
files instead of WinDVD or the like. Just go into your
options and say use Media Player for all and it will go
away.

-----Original Message-----
The fixes didn't help.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard

disk. Double click it
and answer yes to the import prompt. REG files can be

viewed in Notepad by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device,

path, or file. You
may
not have appropriate permissions to access the

item." when I
double-click
a
file. I'm the only owner of the computer. How to get

full access to all
contents?





.





  #24  
Old December 20th 03, 11:20 PM
Michael Solomon \(MS-MVP Windows Shell/User\)
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

I don't know if you've seen this or if it will help but you might want to
have a look at the following Knowledge Base Article:
http://support.microsoft.com/default...&Product=winxp

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Dmitriy Kopnichev" wrote in message
...
The fixes didn't help.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double click

it
and answer yes to the import prompt. REG files can be viewed in Notepad

by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or file. You

may
not have appropriate permissions to access the item." when I

double-click
a
file. I'm the only owner of the computer. How to get full access to

all
contents?







  #25  
Old December 20th 03, 11:22 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

Ok
"Ryan" wrote in message
...
seems I am having the same problem, so are many people. They say that with
Encryption, if you don't have the right certificate, you are screwed. But
there must be a way, even if we get a hacker/cracker to do it???
Please e-mail me if you solve the problem!

Ryan





"Dmitriy Kopnichev" wrote in message
...
The file is EXE.
"KJ" wrote in message
...
You are probably having a problem with Windows Media
Player, it will say this if you don't allow it to view
files instead of WinDVD or the like. Just go into your
options and say use Media Player for all and it will go
away.

-----Original Message-----
The fixes didn't help.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard

disk. Double click it
and answer yes to the import prompt. REG files can be

viewed in Notepad by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device,

path, or file. You
may
not have appropriate permissions to access the

item." when I
double-click
a
file. I'm the only owner of the computer. How to get

full access to all
contents?





.







  #26  
Old December 20th 03, 11:23 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

This is my file. I'm the only computer owner.
"Roger Abell" wrote in message
...
code 5 is probably access failure
in this case since you do not have EFS capability to decrypt
you are not allowed to modify who can decrypt

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I tried to add myself and/or another user to "Users Who Can

Transparently
Access this File" and got an error
"ERSADU
Error in adding new user(s). Error code 5."
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file is

EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the

"Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk.

Double
click
it
and answer yes to the import prompt. REG files can be viewed

in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or

file.
You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?

















  #27  
Old December 20th 03, 11:23 PM
Dmitriy Kopnichev
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

"the following people can decrypt an encrypted file.
Any user who was designated as a recovery agent" is written in the
http://support.microsoft.com/default...&Product=winxp
The user who was designated as a recovery agent is the Administrator. I
tried to decrypt the file under the Administrator account and got the same
error message "Error Applying Attributes
An error occurred applying attributes to the file:
Path:\Filename
Access is denied"
"Michael Solomon (MS-MVP Windows Shell/User)" wrote in
message ...
I don't know if you've seen this or if it will help but you might want to
have a look at the following Knowledge Base Article:

http://support.microsoft.com/default...&Product=winxp

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Dmitriy Kopnichev" wrote in message
...
The fixes didn't help.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double click

it
and answer yes to the import prompt. REG files can be viewed in

Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or file.

You
may
not have appropriate permissions to access the item." when I

double-click
a
file. I'm the only owner of the computer. How to get full access to

all
contents?









  #28  
Old December 20th 03, 11:23 PM
Michael Solomon \(MS-MVP Windows Shell/User\)
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

This sounds like a file ownership issue related to NTFS. Note, file
ownership and permissions supersede administrator rights. How you resolve
it depends upon which version of XP you are running.



XP-Home



Unfortunately, XP Home using NTFS is essentially hard wired for "Simple File
Sharing" at system level.

However, you can set XP Home permissions in Safe Mode. Reboot, and start
hitting F8, a menu should eventually appear and one of the
options is Safe Mode. Select it. Note, it will ask for the administrator's
password. This is not your administrator account, rather it is the
machine's administrator account for which users are asked to create a
password during setup.

If you created no such password, when requested, leave blank and press
enter.

Open Explorer, go to Tools and Folder Options, on the view tab, scroll to
the bottom of the list, if it shows "Enable Simple File Sharing" deselect it
and click apply and ok. If it shows nothing or won't let you make a change,
move on to the next step.

Navigate to the files, right click, select properties, go to the Security
tab, click advanced, go to the Owner tab and select the user that was logged
on when you were refused permission to access the files. Click apply and
ok. Close the properties box, reopen it, click add and type in the name of
the user you just enabled. If you wish to set ownership for everything in
the folder, at the bottom of the Owner tab is the following selection:
"Replace owner on subcontainers and objects," select it as well.

Once complete, you should be able to do what you wish with these files when
you log back on as that user.



XP-Pro



If you have XP Pro, temporarily change the limited account to
administrative. First, go to Windows Explorer, go to Tools, select Folder
Options, go to the View tab and be sure "Use Simple File Sharing" is not
selected. If it is, deselect it and click apply and ok.



If you wish everything in a specific folder to be accessible to a user,
right click the folder, select properties, go to the Security tab, click
Advanced, go to the Owner tab,
select the user you wish to have access, at the bottom of the box, you
should see a check box for "Replace owner on subcontainers and objects,"
place a check in the box and click apply and ok.

The user should now be able to perform necessary functions on files in the
folder even as a limited account. If not, make it an admin account again,
right click the folder, select Properties, go to the Security tab and be
sure the user is listed in the user list. If not, click add and type the
user name in the appropriate box, be sure the user has all the necessary
permissions checked in the permission list below the user list, click apply
and ok.

That should do it and allow whatever access you desire for that folder even
in a limited account.






--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Dmitriy Kopnichev" wrote in message
...
"the following people can decrypt an encrypted file.
Any user who was designated as a recovery agent" is written in the

http://support.microsoft.com/default...&Product=winxp
The user who was designated as a recovery agent is the Administrator. I
tried to decrypt the file under the Administrator account and got the same
error message "Error Applying Attributes
An error occurred applying attributes to the file:
Path:\Filename
Access is denied"
"Michael Solomon (MS-MVP Windows Shell/User)" wrote in
message ...
I don't know if you've seen this or if it will help but you might want

to
have a look at the following Knowledge Base Article:


http://support.microsoft.com/default...&Product=winxp

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Dmitriy Kopnichev" wrote in message
...
The fixes didn't help.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in

Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or file.

You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full access

to
all
contents?











  #29  
Old December 20th 03, 11:25 PM
Roger Abell
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

I believe that we earlier resolved that it is not an
NTFS permissions issue.
Administrator is a recovery agent only in Windows 2000.
Windows XP has no recovery agent until one is configured
or the machine is joined to an Active Directory.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
"the following people can decrypt an encrypted file.
Any user who was designated as a recovery agent" is written in the

http://support.microsoft.com/default...&Product=winxp
The user who was designated as a recovery agent is the Administrator. I
tried to decrypt the file under the Administrator account and got the same
error message "Error Applying Attributes
An error occurred applying attributes to the file:
Path:\Filename
Access is denied"
"Michael Solomon (MS-MVP Windows Shell/User)" wrote in
message ...
I don't know if you've seen this or if it will help but you might want

to
have a look at the following Knowledge Base Article:


http://support.microsoft.com/default...&Product=winxp

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

"Dmitriy Kopnichev" wrote in message
...
The fixes didn't help.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double

click
it
and answer yes to the import prompt. REG files can be viewed in

Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path, or file.

You
may
not have appropriate permissions to access the item." when I
double-click
a
file. I'm the only owner of the computer. How to get full access

to
all
contents?











  #30  
Old December 20th 03, 11:25 PM
Roger Abell
external usenet poster
 
Posts: n/a
Default How to get full access to all contents?

You may own the machine and the files may be yours,
but if it is encrypted and you cannot prove to the system
that you are supposed to be able to decrypt it then it will
not let you.

The only way to prove that you are supposed to be able
to access the EFS encrypted file is to use an account that
has loaded into it the decryption key that corresponds to
the certificate that was used to encrypt the file.

When you renamed the machine, apparently starting down
the road of denied access, something seems to have removed
that capability. When you used cipher to look at the file it
said that there was no user account allowed to decrypt it,
instead indicating the machine was allowed to decrypt it.
That, assuming you have reported accurately what you saw,
is something with which I am unfamiliar, either as to why it
got that way or how to get out of that situation.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
This is my file. I'm the only computer owner.
"Roger Abell" wrote in message
...
code 5 is probably access failure
in this case since you do not have EFS capability to decrypt
you are not allowed to modify who can decrypt

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I tried to add myself and/or another user to "Users Who Can

Transparently
Access this File" and got an error
"ERSADU
Error in adding new user(s). Error code 5."
"Roger Abell" wrote in message
...
When you look at the file's properties Security dialog
is anything checked for any group in the Deny column ?
You must highlight each group listed one at a time and
then look at what is Granted/Denied.
An account that is only in Administrators group is
actually also in other things to which there can be
NTFS Grants/Denies, like Authenticated Users,
Network, Interactive, Everyone. . . .
Not having EFS authorization appears as if it is a
NTFS permissions denial. You should use the cipher
commandline utility to examine the thumbprint info of
the file to see what accounts are allowed to decrypt it.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
How to become sure that there is no Deny for any group. The file

is
EFS
protected. But I can open other EFS protected files.
"Roger Abell" wrote in message
...
This means that you have full control and it is inherited from
some higher directory.
Are you sure that there is no Deny for some group, and if
there is make sure your account is not a member of the group.
Deny overrides a Grant.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Dmitriy Kopnichev" wrote in message
...
I'm the Owner of the file and have full access, but the

"Effective
permissions" are all checked and grayed for me.
"Kelly" wrote in message
...
Without knowing more, see if this helps:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk.

Double
click
it
and answer yes to the import prompt. REG files can be viewed

in
Notepad
by
right clicking on the file and selecting Edit.

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Dmitriy Kopnichev" wrote in message
...
Hello
I get "Windows cannot access the specified device, path,

or
file.
You
may
not have appropriate permissions to access the item." when

I
double-click
a
file. I'm the only owner of the computer. How to get full

access
to
all
contents?



















 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 08:56 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.