Path: news.mitre.org!blanket.mitre.org!agate!newsgate.cuhk.edu.hk!logbridge.uoregon.edu!news-out.internetmci.com!newsfeed.internetmci.com!128.158.254.10!news.msfc.nasa.gov!info.usuhs.mil!cadig2.usna.navy.mil!cs.umd.edu!hecate.umd.edu!mineral.umd.edu!gotthard
From: Gotthard Saghi-Szabo <gotthard@chem.umd.edu>
Newsgroups: comp.os.ms-windows.nt.admin.security
Subject: Q:How can I restore the default permissions to the NT structure
Date: Wed, 29 Oct 1997 15:39:06 -0500
Organization: University of Maryland, College Park
Lines: 41
Message-ID: <Pine.OSF.3.95q.971029153726.2714A-100000@mineral.umd.edu>
NNTP-Posting-Host: mineral.umd.edu
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: gotthard@mineral.umd.edu

I have been following the instructions in one of the NT FAQs from
http://www.savilltech.com/ntfaq.html (see below) , with the only
exception, that I used regedt32, which I think should not make any
difference, should it? I am running NT workstation 4.0. Before reboot, I
have set the all the file and directory permissions so that SYSTEM and
administrators have full access privileges. Edited the registry, then
rebooted. Nothing happens, permissions do not change. Could you tell me,
please, the correct syntax to use?

Thanks in advance, 
Gotthard


1.Logon as administrator. 
2.The built-in SYSTEM account needs access to
the Windows NT default directories and subdirectories. To get this access,
do the following:
- In File Manager use Security/Permissions to grant the SYSTEM account
FULL CONTROL to the root directory of the NTFS volume that contains
Windows NT.
- Next, select the option to Replace Permissions on Subdirectories, which
gives SYSTEM access to the entire volume 
3.Start Registry Editor
(Regedit.exe). 
4.Go to
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager
5.Double-click the value BootExecute. 6.Under BootExecute, you may find a
few entries, such as:
autocheck autochk *
After any entries, add on a separate line:
setacl /a \DosDevices\<systemdrive>:\<winnt_root>\System32\winperms.txt
\DosDevices\<systemdrive>:
Here <systemdrive> is the drive that Windows NT is installed on and
<winnt_root> is the Windows NT root directory on that drive. 
7.Save
changes by clicking OK. 
8.Exit the registry editor and restart the
computer. 
9.On restart, the system will set security on the system files
to the norm