"FromTheRafters" <erratic@xxxxxx> wrote in message
news:uB%23tnAihJHA.4408@xxxxxx
>
> "Tom" <DontSpamMr_tsquare@xxxxxx> wrote in message
> news:C1EBA448-8A14-4020-9E7D-EEF8E6F78122@xxxxxx
>> Interesting read. As I understand it, there are characteristics to each
>> object that the casual observer/administrator can't see, let alone
>> modify/control. >
> Yes, and access can be denied before any "permissions" are checked.
>
>> As I said above, I tried taking ownership, turning off/on protected mode
>> etc, >
> I'm not sure turning off protected mode actually removes MIC from
> other aspects of the system. It may just run IE elevated - I haven't
> looked into it. Protected mode uses MIC not the other way 'round.
Don't think that IE ran elevated with Protected Mode turned off as IE was
still unable to write new shortcuts to the "moved" folders. Recall that I
as Administrator was able to write/copy files to those folders, but IE was
not. Interestingly, turning off UAC "fixes" the problem, allowing IE to
once again write to those "moved" folders.
>
>> but was only finally able (2 hours this afternoon) to get control of my
>> Favorites chain by dragging each folder in my favorites off onto the desk
>> top, creating a new folder in the Favorites chain of a similar name and
>> then dragging the shortcut contents of the moved folders back into the
>> new folders. I'm guessing that my "user" account in creating new folders made it so that
IE had sufficient "Integrety" (medium) to then write to them as well.
>
> Sounds like an 'end run' around MIC to me. Glad you got it sorted. I'm
> thinking your favorites data became untrusted Only certain folders - What I did was copy/move files and folders off of the
thumb drive to the new Favorites folder. I trusted the folders I moved and
my problem was to somehow convince Vista to trust them too. Not sure how
Vista would react to dumping a bunch of folder/file data into a new Vista
system. I guess IE or (I haven't tried this) notepad wouldn't be able write
to/modify that data.
due to the way you tried
> to migrate it. It regained trust when you manipulated it on the desktop. Interesting that the folders were a problem and not the
shortcuts/executables.
>
> Just guessing though.
>
>> If you right-click on any folder and choose properties and security, you
>> see the Group/user names (accounts?) and each of their "Permissions".
>> The FOLDERS that I had problems with had a check mark under the
>> allow/Special Permissions for Administrators(that's me as there are no
>> other users). The folders that I had not problems with did NOT have a
>> check mark under the Allow/Special Permissions.
>>
>> Now, whatever that means - MIC? >
> Nope, permissions again. Regular permissions are like ordering a #22
> Chinese
> take-out order. Special permissions sort of lets you pick from columns A,
> B, C,
> etc...for a better custom fit.
>
> http://support.microsoft.com/kb/308419 XP stuff. Is Vista 64 the same?
>
>> Magic stuff. Will Windows 7 fix this? >
> I don't think so as it is not broken. I assume most people won't be
> migrating their data this way. But I think it its broken. Certainly not from the perspective of computer
science or secure business software, but from the perspective of the "power
user" who got used to doing things in a reasonable way and gets a little
upset when there seems to be no good reason for it to change on MY computer.
The thread above started by Kathy resonates a little for me. The link you
provided above references Windows XP where none of this was an issue, (at
least in my experience) but now with Vista, we are suddenly not so much
masters of our own hardware system.
BTW FromTheRafters, I really appreciate the discussion and attempts to
educate - hard as it is ;<)