xp ntfs permissions erased - help!

[Poisonsnak]

So, I was fooling around like an idiot and removed all the ntfs permissions on 3 of my hard drives (not the one with my OS on it though, thank god).

If I even tried to access the drive it would say "access denied"

To try and fix it, I right clicked, went to properties, the security tab (running XP pro with simple file sharing disabled), and gave "system" and "everyone" full control. This allows me to see all the folders on the disk and what files they contain. However, when I try to access the files I get an access denied error message and it will not allow me to change permissions for the files.

If anyone has any ideas I am pretty much willing to try anything, if I have to buy some software I'm all for it, I need any help I can get so I can view these files again.

edit: I Think I may have just figured it out by using "replace permission entries on all child objects..." wow, but feel free to jump in with any advice / call me an idiot (boy do I deserve it)

[DanTheBanjoman]

The child objects option is usually the thing. If it still gives you problems you might have to take ownership of the files/folders. (and do that on child objects as well)

Oh, and you're an idiot

[Alec§taar]

NEVER, ever, remove FULL CONTROL permissions in the Access Control Lists/rights priveleges from:

• Administators Group

• YOUR local Administrator User

• SYSTEM

on NTFS rights on your disks (via Explorer.exe rightclick properties menu, security tab) that use that filesystem, OR in the REGISTRY either, via rightclick on HIVES/KEYS permissions popup menu options...

(Sure way to lock yourself out, period, & I have done it myself early on w/ NTFS filesystems &/or the Registry before... only way to learn sometimes, is making mistakes!)

* Keep this in mind, those of you that start experimenting w/ security @ these 2 levels!

APK

P.S.=> Leaving them @ FULL POWER, in both areas, usually 9/10 times allows you to get back into your rig (logging on as your LOCAL ADMINISTRATOR USER, to fix it), & make alterations to rights/acl's as needed, to "get it right", eventually... especially when you're still learning/experimenting! apk

[Poisonsnak]

Hehe thanks for the quick replies, I was away all weekend but just tried some things and I'm back in action.

Problem cause:

If you ever happen to select multiple folders (or in my case hard disks) and go to the security tab, windows will helpfully say "you know these objects have different security settings, would you like to reset them?" and you might, like me, say "sure" and find that what windows does is REMOVE all permissions for everyone.

Now in this situation the wrong thing to do (which I did) would be to hit cancel and assume that it "cancels" what you have done (why would I think that?), when in fact it just closes the window and leaves you out in the cold.

Problem solution:
It's just as dan pointed out: take ownership of everything (make sure to select "replace owner on subcontainers and objects"), set permissions as you see fit, and then replace permission entries on all child objects. If you don't take ownership of everything first I found that it would give you access to all folders (including a listing of their contents) but you could not access the files themselves.

[Completely Bonkers]

Aweful experience isn't it! Congratualtions on getting your files back. Also, you are lucky this didnt happen on your OS drive... because if you did... and you now had all files to FULL CONTROL... your security would be a real mess up.

I (unfortunately) did this... and decided a reinstall was quick than a manual repair... since exactly WHICH files are SYSTEM/ SERVICE/ ADMIN/ Other users / part of a group etc.

On data drives its much easier to fix.