Windows 10: Using C++, Want to remove not deny Write permission alone from a user trustee with Full...

I want to implement a c++ program to remove "Write" permission alone for a user trustee with "Full Control" permission over a folder in windows NTFS drive. I tried to use the SetEntriesInAcl function from the aclapi.h API, but I failed to to because REVOKE_ACCESS AccessMode removing the trustee itself. I want to remove Write access that is I don't want to set deny or allow access type. Help and suggest me how to achieve it.Note : I also tried the below method which I don't want. Since it is not a correct solution for my need. I used "SET_ACCESS" as grfAccessMode, "GENERIC_READ GENERIC

:)

 

File permissions for another user

Still no joy. Test User can still write to the file. *Sad
This are the steps I have done;

1. Created file in User account
2. Copied file to Test User account
3. Signed into Test User account
4. Right click file
5. Properties > Security > Edit > Add Test User > Allow Read > Deny Write > Advanced > Change Owner to Administrators > To Remove User account had to disable inheritance which removed all accounts except Test User and Administrator
6. Test User can still write to the file!!

Still stuck. Test User still has full control of the file, he can write, modify, cut, copy, paste in fact as if the permissions had not been changed. *Confused
Administrators permissions

 

cannot write to memory keys in windows 10

Hello,

To isolate this concern, we suggest that you follow the steps below:

• Open File Explorer.
• Go to Local Disk (C.
• Right-click on Users.
• Choose Properties.
• Go to Security tab.
• Under Group or user names, highlight the user account that you want to have a
  Write permission.
• To change permissions, click on Edit.

Please post back with the result for further assistance.

 

Folder Permissions Remove System

Hi,

Thank you for posting your query in Microsoft Community.



Let me answer your query on Windows 10.

Please be informed that you cannot remove the system entry, However you can add/remove permission for a particular user.

The Group or user name section lists all the accounts on the computer. If you want to prevent a user to accessing the folder, you may deny/remove all permission for that particular user.

The system account and the administrator account (Administrators group) have the same file privileges, but they have different functions. The system account is used by the operating system and by services that run under Windows.

I suggest you not to remove permissions for SYSTEM entry.

Hope the information helps, do reply if you need further assistance.



Thank you.