Solved Permission Issue

[shortmantuff]

Is it bad to give yourself full control when you go to Computer(Right click)>Properties>Security tab>Edit> Click the box full control (for Authenticated Users)? Is it a security threat or anything? Right now all that is checked is Special permissions. Can I check more of these, if not check full control?

Also, is it okay to check Full control for the other options (SYSTEM, Users, etc.)?

 

[Brink]

Hello Blane,

It would be more secure to only grant individual users that you want to give full permission to that hard drive instead and leave the Authenticated Users set at default with only the Special permissions checked. Giving full permission to everything and everyone can leave a door open for malware to take advantage of if it gets on your system.

If this is for the C: drive, then be sure to leave the owner set a TrustedInstaller.

Hope this helps,
Shawn

 

[shortmantuff]

Okay. Just to be straight. Leave Authenticated Users alone, but it's okay to give Users (Name-PC\Users) Full control?

Also, what is the point of TrustedInstaller? I don't have any problems with permission. Should I still make this or just leave it as it is.

Thanks,
Blane

 

[Brink]

I would recommend leaving the owner setting alone and left set to TrustedInstaller. Changing this on the C: drive will cause access denied issues with Vista.

There are a few essential protected system resources (system files, folders, and registry keys) that are installed as part of Vista. To help prevent a application and operating system failure, these resources are protected using Windows File Protection (WFP) in such way that applications or users cannot modify these resources by default. The way this protection is implemented is by setting an Access Control List (ACL) on these resources only to allow the TrustedInstaller user to modify them. Not only can a Administrator (elevated or not) account cannot modify them, but neither can the System.

By default a user will have full permission in their user account for their user folder files. Only the administrator has access permission for all files and folders on the computer. It is best to only grant users full permission of items that they would not normally have if it is needed.

When you grant Users (Name-PC\Users) Full control, then anyone and any program running in that user account will have full control of the item you gave them access permission. This can pose a security risk if you allow full control to everyone and everything, since it will also allow malware to have full access as well.

It's best to leave these settings to default unless you just wanted to allow a individual user access to a single file or folder.

 

[shortmantuff]

Thanks. I won't mess with it.

 

[Brink]

You're welcome.