Microsoft KB Archive/817950

= PRB: WinPE Default Permissions for NTFS Volumes are Incompatible with Windows 2000 =

Article ID: 817950

Article Last Modified on 10/13/2004

-

APPLIES TO


 * Microsoft Windows Preinstall Environment (WinPE) 32-bit

-



SYMPTOMS
After installing a Microsoft Windows 2000 operating system using the Windows Preinstall Environment CD, users may experience problems while accessing the hard disk during normal use.

Specifically, they may be unable to create directories, modify files, or other similar tasks.

This may be especially true with domain accounts. Local accounts may not exhibit this behavior.



CAUSE
Although you are installing Windows 2000, the Windows Preinstall Environment CD sets default permissions on the root of the NTFS volume that are not compatible with Windows 2000.

The default permissions that are set are valid for Microsoft Windows XP and Windows Server 2003. Following are the permissions:

C:\ BUILTIN\Administrators:(OI)(CI)F

NT AUTHORITY\SYSTEM:(OI)(CI)F

CREATOR OWNER:(OI)(CI)(IO)F

BUILTIN\Users:(OI)(CI)R

BUILTIN\Users:(CI)(special access:)

FILE_APPEND_DATA

BUILTIN\Users:(CI)(IO)(special access:)

FILE_WRITE_DATA

Everyone:R

By contrast, the default permissions for Windows 2000 are:

Everyone:(CI)(OI)F



WORKAROUND
To set the root permissions correctly, run the Cacls.exe utility on the root directory of the partition immediately after formatting it. For example:

FORMAT C: /FS:NTFS /V:Vol_Label /Q /Y

CACLS.EXE C:\ /p Everyone:F

WINNT32.EXE



STATUS
This behavior is by design.



MORE INFORMATION
You can obtain the Cacls.exe utility from any computer that is running Windows XP Professional. The utility is located in the \Windows\System32 directory and is self-contained; no other programs or libraries are required.

Keywords: kbprb KB817950

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.