Vista - Re: How to Delete a System File in Windows Vista...Access Denied when in System32

03-26-2008

Why would one want to delete a system file?

Why would one want to allow malware to circumvent system file protection and
usurp a user's privilege level to alter or delete a necessary system file?

You can alter permissions for system files, but it begs the question as to
whether or not you should. Users are normally blocked out from accessing
these files in normal run mode for a very good reason: to protect the core
system from malware.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Jason" wrote in message news:egz3AL3jIHA.2396@xxxxxx

Quote:

> If you need to delete or overwrite a system file in Windows Vista, you'll
> quickly notice that you cannot delete system files, even as administrator.
> This is because Windows Vista's system files are owned by the
> TrustedInstaller service by default, and Windows File Protection will keep
> them from being overwritten.
>
> Thankfully, there's a way that you can get around this. You need to take
> ownership of the files, and then assign yourself rights to delete or
> modify the file. For this, we'll use the command line.
>
> Open an administrator command prompt by typing cmd into the start menu
> search box, and hit the Ctrl+Shift+Enter key combination.
>
> To take ownership of the file, you'll need to use the takeown command.
> Here's an example:
>
> takeown /f C:\Windows\System32\en-US\winload.exe.mui
>
> That will give you ownership of the file, but you still have no rights to
> delete it. Now you can run the cacls command to give yourself full control
> rights to the file:
>
> cacls C:\Windows\System32\en-US\winload.exe.mui /G geek:F
>
> Note that my username is geek, so you will substitute your username there.
>
> At this point, you should be able to delete the file. If you still can't
> do so, you may need to reboot into Safe Mode and try it again. For the
> filename in the example, I was able to overwrite it without safe mode, but
> your mileage may vary.
>
>
> Post Originated from http://www.VistaForums.com Vista Support Forums

07-01-2009

Jason: Thanks mate for that info. You are GREAT!

Your post help me to delete some faulty saved folder of files on my disk by Vista, which (as an administrator) I couldn't delete, because of some security issues. I've got insufficientt privileges to do that. After your commandlines I simply get rid of it.

Rick: Believe me. There are maaany situations when you need to take over Windows system files and it's not about malware, viruses or whatever. Above, it's just one exception.

Cheers guys.

Post Originated from http://www.VistaForums.com Vista Support Forums

03-26-2008	#1 (permalink)
Rick Rogers n/a posts	Re: How to Delete a System File in Windows Vista...Access Denied when in System32 Why would one want to delete a system file? Why would one want to allow malware to circumvent system file protection and usurp a user's privilege level to alter or delete a necessary system file? You can alter permissions for system files, but it begs the question as to whether or not you should. Users are normally blocked out from accessing these files in normal run mode for a very good reason: to protect the core system from malware. -- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Windows help - www.rickrogers.org My thoughts http://rick-mvp.blogspot.com "Jason" wrote in message news:egz3AL3jIHA.2396@xxxxxx Quote: > If you need to delete or overwrite a system file in Windows Vista, you'll > quickly notice that you cannot delete system files, even as administrator. > This is because Windows Vista's system files are owned by the > TrustedInstaller service by default, and Windows File Protection will keep > them from being overwritten. > > Thankfully, there's a way that you can get around this. You need to take > ownership of the files, and then assign yourself rights to delete or > modify the file. For this, we'll use the command line. > > Open an administrator command prompt by typing cmd into the start menu > search box, and hit the Ctrl+Shift+Enter key combination. > > To take ownership of the file, you'll need to use the takeown command. > Here's an example: > > takeown /f C:\Windows\System32\en-US\winload.exe.mui > > That will give you ownership of the file, but you still have no rights to > delete it. Now you can run the cacls command to give yourself full control > rights to the file: > > cacls C:\Windows\System32\en-US\winload.exe.mui /G geek:F > > Note that my username is geek, so you will substitute your username there. > > At this point, you should be able to delete the file. If you still can't > do so, you may need to reboot into Safe Mode and try it again. For the > filename in the example, I was able to overwrite it without safe mode, but > your mileage may vary. > > > Post Originated from http://www.VistaForums.com Vista Support Forums
My System Specs

07-01-2009	#2 (permalink)
3lncr n/a posts	RE: How to Delete a System File in Windows Vista...Access Denied when in System32 Jason: Thanks mate for that info. You are GREAT! Your post help me to delete some faulty saved folder of files on my disk by Vista, which (as an administrator) I couldn't delete, because of some security issues. I've got insufficientt privileges to do that. After your commandlines I simply get rid of it. Rick: Believe me. There are maaany situations when you need to take over Windows system files and it's not about malware, viruses or whatever. Above, it's just one exception. Cheers guys. Post Originated from http://www.VistaForums.com Vista Support Forums
My System Specs

Similar Threads
Thread	Forum
Can't delete a file - Access is denied to Administrator	Vista file management
why the file in system32 will be delete	Vista General
Access Denied when trying to delete virus file	Vista security
adding DLLs to windows\system - access denied	Vista security
File in System32 folder...will not delete	Vista General