Windows 10: How to reset Icacls access denied permissions back to Admin.

Hi, I've recently run an icacls command prompt, icacls %windir%\system32\config\*.* /inheritance:e as a workaround for the SeriousSam exploit. How do I reset or revert back the icacls default permissions to administrator rights?

:)

 

Understanding 'Access Denied' so that permissions can be reverted - icacls and takeown

• Before taking ownership of files and folders I would like to understand how to view the current permissions so that they may be reverted.
  
• I am reciving an 'Access Denied' message to view or save permissions with elevated command prompt for location: C:\ProgramData\Microsoft\Windows\SystemData in Windows 10 enviroment.
  
• It looks like that I may need to take ownership first, then can view the permissions, and use something like icacls 'reset' command to fix it afterwards.
  

If I try to view permissions:

If I try to save an ACL file:

In the answer to 'Understanding how to use Icals & Takeown' the owner of the folder was NT SERVICE\TrustedInstaller which may infact may be a standard in Windows 10, though I am only guessing.

Should I just use takeown, and icals, find out the permissions and then use the reset command.

Likewise with the ACL, one would need to take ownership before creating, or is there a work around?

Reading:

• SU - Understanding how to use Icals & Takeown to make changes and reset in Windows 10
  
• SU - Create List of Access Denied Files & Folders
  
• SU - Setting Deny Permissions with ICACLS on “This Folder”
  
• SU - Is there a way in which I can use takeown to apply ownership to every directory on the drive?
  
• SU - Takeown grant permission
  
• SU Can I revert changes from the TAKEOWN and ICACLS commands?
  
• Howtogeek - Reverse take ownership
  
• Faqforge - Take Ownership of a File or Folder by Command in Windows
  
• Microsoft - ICACLS setowner and GRANT operation appears to be causing some existing perms on subfolders to be removed. Why
  
• Itprotoday - Removing a User or Group’s Permissions
  
• SS46 - Takeown
  
• SS64 - Icacls
  

 

Permission denied as admin

Hi,

It's possible that you haven't taken ownership of the folder that you're trying to delete. So we can better assist with you with successfully taking ownership of the folders you want to delete, we'd like to ask the following questions:

• Which Windows version are you using? Type winver on the search bar and press Enter to find out.
  
• Have you made any recent changes on your device prior to the issue?
• What have you done so far to resolve the issue?

Meanwhile, we suggest that you follow the steps provided by Anup Karkal in this
thread.

Let us know if you need further assistance.

 

Understanding 'Access Denied' so that permissions can be reverted - icacls and takeown

How to view permissions of Accessed Denied Folder in Windows 10

See - SO How do you run CMD.exe under the Local System Account?

Reading:

• SO - How do you run CMD.exe under the Local System Account? Solution
  1
  
• SO - How do you run CMD.exe under the Local System Account? Solution
  2
  
• Understanding how to use Icals & Takeown to make changes and reset
  in Windows 10