Not quite. You can create a separate process with "explorer /separate". This works great in XP with runas for creating an explorer window under a different security context. It still works in Vista/7/2K8 to create a separate process, but it still gets created without admin group in the token.
From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, February 21, 2011 7:36 AM To: NT System Admin Issues Subject: RE: Windows 2008 R2 - Default NTFS Permissions on new drive You can't actually do a run-as for Windows Explorer. There is only a single process per login, so the run-as doesn't work as expected. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Monday, February 21, 2011 8:26 AM To: NT System Admin Issues Subject: RE: Windows 2008 R2 - Default NTFS Permissions on new drive Not consciously no - should it be just to access a hard drive? I did try running Windows Explorer with "Run as Administrator" and I still got access denied. From: James Rankin [mailto:kz2...@googlemail.com] Sent: 21 February 2011 13:24 To: NT System Admin Issues Subject: Re: Windows 2008 R2 - Default NTFS Permissions on new drive UAC turned off? On 21 February 2011 13:19, Paul Hutchings <paul.hutchi...@mira.co.uk<mailto:paul.hutchi...@mira.co.uk>> wrote: Just starting to roll out some 2008 R2 based VM's. I've created a couple of new partitions on one of them, and thought I'd lock the permissions down to the local Administrators group and SYSTEM, but I'm finding that logged onto the server console with an account that clearly is in the local Administrators group I can't access the root of the newly created drives, I simply get "Access Denied". Of course because the account is in the Administrators group it can format the drives and access them quite happily with the default permissions in place. I suspect I'm missing something obvious but I'm not sure exactly what - any suggestions please? Thanks, Paul ________________________________ MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." IMPORTANT: This email is intended for the use of the individual addressee(s) named above and may contain information that is confidential, privileged or unsuitable for overly sensitive persons with low self-esteem, no sense of humour or irrational religious beliefs. If you are not the intended recipient, any dissemination, distribution or copying of this email is not authorised (either explicitly or implicitly) and constitutes an irritating social faux pas. Unless the word absquatulation has been used in its correct context somewhere other than in this warning, it does not have any legal or no grammatical use and may be ignored. No animals were harmed in the transmission of this email, although the kelpie next door is living on borrowed time, let me tell you. Those of you with an overwhelming fear of the unknown will be gratified to learn that there is no hidden message revealed by reading this warning backwards, so just ignore that Alert Notice from Microsoft. However, by pouring a complete circle of salt around yourself and your computer you can ensure that no harm befalls you and your pets. If you have received this email in error, please add some nutmeg and egg whites, whisk and place in a warm oven for 40 minutes. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
