Share via


Windows 10 Authenticated user removed in C drive

Question

Saturday, September 1, 2018 6:36 PM

HI 

I just accidentally removed authenticated user access in C drive. I am the administrator. I am not able to access the C drive now. Please help 

All replies (14)

Saturday, September 1, 2018 8:03 PM

Hi dhanamjayan,

As an admin on the computer, you have the rights to "take ownership" of the C:\drive which gives you Full Control see the "Takeown" command.

Are you able to log on as local administrator?

If not, boot the computer with a gparted linux live CD and mount your C drive and set permissions manually - BEFORE you try this though, please mount your Hdd somewhere and pull all personal files and data to another location!!!

Charlie Coverdale

Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.


Sunday, September 2, 2018 1:20 AM

I am able to log in as a local administrator, but I am not able to open C drive or PowerShell(admin). I accidentally removed the authenticated users in the security tab. When I try to open C drive it says C is not accessible. Access is Denied.


Sunday, September 2, 2018 4:17 AM

Hi dhanamjayan, 

you may try something.. download psexec

/en-us/sysinternals/downloads/psexec

from another machine, open the prompt and move to psexec folder, and run the following command:

psexec \pcWithCUnitProblem -s cmd

if the prompt opens, type c:\windows\system32\icacls C:\ /grant "Authenticated Users":(OI)(CI)M


Sunday, September 2, 2018 4:33 AM

i am not able to run psexec. I want to give access to authenticated users. I accidentally removed the access to authenticated users. I am not able to open C drive.


Sunday, September 2, 2018 5:17 AM

Ok, but can't your run psexec from ANOTHER computer?


Sunday, September 2, 2018 6:07 AM

don't have another PC. is there any other way


Sunday, September 2, 2018 7:03 AM

Hello,

Do you've System Restore points created earlier? If yes, use them to restore back.

Regards.

Microsoft MVP (Windows and Devices for IT)

Windows Insider MVP

Windows Help & Support [www.kapilarya.com]


Sunday, September 2, 2018 7:59 AM

Click start > run and type gpedit.msc

Edit a new policy and set File System permissions.

/en-us/previous-versions/windows/it-pro/windows-server-2003/cc782533(v=ws.10)

Charlie Coverdale

Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.


Sunday, September 2, 2018 10:41 AM

I don't have restore points.


Sunday, September 2, 2018 10:42 AM

Not able to open gpedit.msc. I am using windows 10 OS


Sunday, September 2, 2018 11:26 AM

What CAN you open? If you cant open any window, then you cant do much... How about regedit?

You will need to either repair your OS from a boot media or mount your Hdd somewhere else, copy your stuff off and reformat / reinstall

Charlie Coverdale

Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.


Sunday, September 2, 2018 2:53 PM

I cannot open regedit.  I removed authenticated user access of C drive accidentally so don't have any permission now to access the files in C drive or run programs.


Sunday, September 2, 2018 6:57 PM

Download a bootable Linux ISO (i have used gparted for various things).

Boot from that and fix the permissions on C:\ and C:\Windows\System32.

Once done, reboot and logon as Local Administrator - you will be able to run CMD prompt.

Once you have launched an admin cmd prompt, run:

sfc / scannow

then

DISM.exe /Online /Cleanup-image /Restorehealth

Information about these commands found at the link below.

https://support.microsoft.com/en-gb/help/929833/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system

Charlie Coverdale

Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.


Sunday, September 2, 2018 7:06 PM

Here is a post where your exact scenario has been discussed.

https://answers.microsoft.com/en-us/windows/forum/windows_10-security-winpc/accidentally-denied-access-to-authenticated-users/e8c41435-20b1-4b44-8021-693039649963

You must still be able to run programs as you have local admin rights (you can clearly run a browser). Fine you may not have rights to open and read documents, but you can launch Task Manager, click File > run and type cmd and hit enter.

After that it is just a matter of running TAKEOWN and ICACLS...

Charlie Coverdale

Disclaimer: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights.