Results 1 to 13 of 13

Thread: How

  1. #1
    Senior Member
    Join Date
    Jul 2003
    Posts
    11,597
    Thanks
    763
    Thanked
    476 times in 328 posts

    How

    Can a "Limited User" on an XP Pro box set a folder so that nobody on the machine can see it, even the machine administrator?
    Whats the way around this so that the user still thinks hes johhny smart ass but the admin can see the contents of the folder?

  2. #2
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    has it been encrypted ?
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  3. #3
    Senior Member
    Join Date
    Jul 2003
    Posts
    11,597
    Thanks
    763
    Thanked
    476 times in 328 posts
    dunno, I'm guessing that the user has made the folder private or done something, dont get how tho with me being admin and them only being limited

  4. #4
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    you can always go one level up , and reset ownership on all child objects
    is it on a domain ?
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  5. #5
    Senior Member
    Join Date
    Jul 2003
    Posts
    11,597
    Thanks
    763
    Thanked
    476 times in 328 posts
    Nah just a normal box

  6. #6
    Seething Cauldron of Hatred TheAnimus's Avatar
    Join Date
    Aug 2005
    Posts
    17,164
    Thanks
    803
    Thanked
    2,152 times in 1,408 posts
    you should be able to see it, they might of set it so it won't enumerate children of a folder, but you'd still be able to see that parents folder.

    is this something someones done? If so if you give more info, might be able to help, these sorta things are normally a think outside of the box jobbie, like replacing rundll with rundIII because in some fonts capital I look like lower case l.
    throw new ArgumentException (String, String, Exception)

  7. #7
    Senior Member
    Join Date
    Jul 2003
    Posts
    11,597
    Thanks
    763
    Thanked
    476 times in 328 posts
    Basically the user has been pissing about on the pc and has made a folder in his my docs so I cant see whats in it..

    Maybe a keylogger so I can find his password and get in that way, any that arent picked up as a virus so I can log in as admin n then switch users so when he logs in I can grab it that ways?

  8. #8
    Treasure Hunter extraordinaire herulach's Avatar
    Join Date
    Apr 2005
    Location
    Bolton
    Posts
    5,618
    Thanks
    18
    Thanked
    172 times in 159 posts
    • herulach's system
      • Motherboard:
      • MSI Z97 MPower
      • CPU:
      • i7 4790K
      • Memory:
      • 8GB Vengeance LP
      • Storage:
      • 1TB WD Blue + 250GB 840 EVo
      • Graphics card(s):
      • 2* Palit GTX 970 Jetstream
      • PSU:
      • EVGA Supernova G2 850W
      • Case:
      • CM HAF Stacker 935, 2*360 Rad WC Loop w/EK blocks.
      • Operating System:
      • Windows 8.1
      • Monitor(s):
      • Crossover 290HD & LG L1980Q
      • Internet:
      • 120mb Virgin Media
    Easiest way is to change owner i reckon. have you tried it?

  9. #9
    System Suspect
    Join Date
    Aug 2004
    Location
    Kingston Upon Thames
    Posts
    427
    Thanks
    0
    Thanked
    0 times in 0 posts
    Taking ownership of the documents and settings folder and applying down to all child objects should resolve that pretty quick. You need to untick use simple file sharing from Folder options > View first though to get the Security Tab. then go advanced > Owner. Change to admin and hit replace on all subcontainers and objects

  10. #10
    Splash
    Guest
    what ^^^ he said! Basically the user has removed the administrator from permissions on the folder. Take ownership and make all his files read only. That'll learn him.

  11. #11
    Nox
    Nox is offline
    Vorsprung durch Technik
    Join Date
    Oct 2003
    Location
    Hampshire
    Posts
    2,023
    Thanks
    2
    Thanked
    2 times in 2 posts
    • Nox's system
      • Motherboard:
      • Yes
      • CPU:
      • Yes
      • Memory:
      • Yes
      • Storage:
      • Yes
      • Graphics card(s):
      • Yes
      • PSU:
      • Yes
      • Case:
      • Yes
      • Monitor(s):
      • Yes
      • Internet:
      • Yes
    not sure what limited users are able to do - would not of thought file permission changing was one of them. He may of reset the local admin password and done it that way, but basically whats been said above.

    Nox

  12. #12
    Ex-MSFT Paul Adams's Avatar
    Join Date
    Jul 2003
    Location
    %systemroot%
    Posts
    1,926
    Thanks
    29
    Thanked
    77 times in 59 posts
    • Paul Adams's system
      • Motherboard:
      • Asus Maximus VIII
      • CPU:
      • Intel Core i7-6700K
      • Memory:
      • 16GB
      • Storage:
      • 2x250GB SSD / 500GB SSD / 2TB HDD
      • Graphics card(s):
      • nVidia GeForce GTX1080
      • Operating System:
      • Windows 10 x64 Pro
      • Monitor(s):
      • Philips 40" 4K
      • Internet:
      • 500Mbps fiber
    Quote Originally Posted by Nox
    not sure what limited users are able to do - would not of thought file permission changing was one of them. He may of reset the local admin password and done it that way, but basically whats been said above.
    The user profiles are the one place where users have "full" access.

    The user created a folder in "My Documents" and removed the "inherit permissions from parent folder" option, then added themselves as an explicit user with full permission (as owner of the folder they can do this).

    Admin rights rely on inheritance from a higher level - so if the Administrators group has been removed and an explicit ACL placed on a resource, it becomes inaccessible.

    But, as already stated, you can take ownership of the folder and change the permissions to add the Administrators group back.
    ~ I have CDO. It's like OCD except the letters are in alphabetical order, as they should be. ~
    PC: Win10 x64 | Asus Maximus VIII | Core i7-6700K | 16GB DDR3 | 2x250GB SSD | 500GB SSD | 2TB SATA-300 | GeForce GTX1080
    Camera: Canon 60D | Sigma 10-20/4.0-5.6 | Canon 100/2.8 | Tamron 18-270/3.5-6.3

  13. #13
    Senior Member
    Join Date
    Jul 2003
    Posts
    11,597
    Thanks
    763
    Thanked
    476 times in 328 posts
    Ahhh, simple file sharings enabled so theres no extra security tabs..

    Wondered why I couldnt see anything lol

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •