Read Only and Access Rights

File Attributes Win98 | File Attributes XP HE | File Attributes XP Pro | To Assign User Rights | User rights | Best Practices/Permissions | Runas Command

Full Read & Write Access Required:

File Attributes Windows 98

Win98's View - Details view can be set to display file attributes, such as whether or not a file is read-only, 'hidden,' a system file, or a file with the attribute bit set. To enable this feature, click on a folder, choosing "View" and then "Folder Options." On the multi-tabbed dialog box that appears, click the "View" tab. Check "Show file attributes in Detail View" and press "OK."

File Attributes XP Home Edition

Locate the file or folder for which you want to set. You can see the Choose Details... menu only while in Windows Explorer, not within My Computer.

View | Choose Details...

Check Attributes

File Attributes XP Pro

Locate the file or folder for which you want to set. You can see the Choose Details... menu only while in Windows Explorer, not within My Computer.

In Windows Explorer or My Computer:

To set, view, change, or remove special permissions for files and folders

  1. Open Windows Explorer, and then locate the file or folder for which you want to set special permissions.
  2. Right-click the file or folder
  3. click Properties
  4. click the Security tab.
  5. Click Advanced, and then do one of the following:
To Do this
Set special permissions for an additional group or user
  • Click Add.
  • In Name, type the name of the user or group
  • then click OK.
View or change special permissions for an existing group or user
  • Click the name of the group or user and then click Edit.
Remove an existing group or user and its special permissions

Click the name of the group or user and then click Remove.

If the Remove button is unavailable

  • Clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box
  • click Remove,
  • and skip the next two steps.
  1. In the Permissions box, select or clear the appropriate Allow or Deny check box.
  2. In Apply onto, select the folders or subfolders you would like these permissions to be applied to.
  3. To configure security so that the subfolders and files will not inherit these permissions, clear the Apply these permissions to objects and/or containers within this container only check box.
  4. Click OK and then, in Advanced Security Settings for FolderName, click OK.

Important

Notes

For more information about permissions on other objects, see Permissions.

To display the Security tab:

To Assign User Rights

To assign user rights for your local computer,
add workstations to domain, etc.:

  1. Open Local Security Settings
  2. click Start
  3. click Control Panel
  4. double-click Administrative Tools
  5. double-click Local Security Policy.
  6. In the console tree...
  7. Security Settings | Local Policies | User Rights Assignments
  8. In the details pane, double-click the user right you want to change.
  9. Or select the item, UserRightsAssignments Properties, click Add.
  10. [right-click file or use Properties button]
    properties
  11. Add the user or group and click OK.

Best practices
Permissions

User rights

Use the runas command to start programs as an administrator

Runas

Allows a user to run specific tools and programs with different permissions than the user's current logon provides.

Syntax

runas [{/profile|/noprofile}] [/env] [/netonly] [/smartcard] [/showtrustlevels] [/trustlevel] /user:UserAccountName program

Parameters

/profile
Loads the user's profile. /profile is the default.
/no profile
Specifies that the user's profile is not to be loaded. This allows the application to load more quickly, but it can also cause a malfunction in some applications.
/env
Specifies that the current network environment be used instead of the user's local environment.
/netonly
Indicates that the user information specified is for remote access only.
/smartcard
Indicates whether the credentials are to be supplied from a smartcard.
/showtrustlevels
Lists the /trustlevel options.
/trustlevel
Specifies the level of authorization at which the application is to run. Use /showtrustlevels to see the trust levels available.
/user:UserAccountName
Specifies the name of the user account under which to run the program. The user account format should be user@domain or Domain\User.
program
Specifies the program or command to run using the account specified in /user.
/?
Displays help at the command prompt.

Remarks

Examples

To start an instance of the command prompt as an administrator on the local computer, type:

runas /user:localmachinename\administrator cmd

When prompted, type the administrator password.

To start an instance of the Computer Management snap-in using a domain administrator account called companydomain\domainadmin, type:

runas /user:companydomain\domainadmin "mmc %windir%\system32\compmgmt.msc"

When prompted, type the account password.

To start an instance of Notepad using a domain administrator account called user in a domain called domain.microsoft.com, type:

runas /user:user@domain.microsoft.com "notepad my_file.txt"

When prompted, type the account password.

To start an instance of a command prompt window, saved MMC console, Control Panel item, or program that will administer a server in another forest, type:

runas /netonly /user:domain\username "command"

domain\username must be a user with sufficient permissions to administer the server. When prompted, type the account password.

Formatting legend

Format Meaning
Italic Information that the user must supply
Bold Elements that the user must type exactly as shown
Ellipsis (...) Parameter that can be repeated several times in a command line
Between brackets ([]) Optional items
Between braces ({}); choices separated by pipe (|). Example: {even|odd} Set of choices from which the user must choose only one
Courier font Code or program output

Revised 02/Aug/2011

Back to the Home Page.
Back to the Home Page.