2008 R2 CACLS - Permission Denied for a Local Admin

[peterlyttle]

Following on from a query in another forum -

http://www.tek-tips.com/viewthread.cfm?qid=1606031&page=1

Has anyone any ideas on how to get this command to execute in 2008 R2?

cacls C:\windows\system32\arp.exe /E /R BUILTIN\Users"

I get a Permission Denied even as a Local Admin. This command works on some files (non-system) and changing the permissions via the GUI also work.

Anyone any ideas?

 

[peterlyttle]

Edit, sorry the GUI doesnt allow it to work either. I think taking ownership of the file then changing the permissions then changing the ownership back may work.

 

[kmcferrin]

When you run it from the command line and are logged in as an admin, are you actually running the command-line session as an admin? If you navigate through the Start menu to the shortcut that launches that command-line session, you need to right-click on it and then select "Run as Administrator."

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[peterlyttle]

I was opening the Command prompt by going Start->Run->cmd IIRC this opens everything with Admin anyway.

 

[peterlyttle]

I resolved the issue with using -

takeown /F C:\windows\system32\arp.exe
cacls.exe C:\windows\system32\arp.exe /E /R BUILTIN\Users
icacls.exe file.exe /setowner "NT SERVICE\TrustedInstaller"

Combine this into a powershell script and it worked a treat!!

 

[kmcferrin]

I was opening the Command prompt by going Start->Run->cmd IIRC this opens everything with Admin anyway.

I don't believe it does, unless you're getting the whole screen-greyed-out-asking-you-if-you-want-to-launch-it-as-admin thing. It will still open, and most functionality will be available to you, but some things will simply fail to work unless you actually run it as admin (roughly equivalent to SUDO).

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator