windows 7 - "You have denied full permission to Support" Log Me In Rescue Error
2014-04
Damo
I have the same issue as posted here (http://community.logmein.com/t5/Rescue/Denied-Full-Permissions-Citrix-Session/m-p/88036/highlight/true#M2919) but the fix doesn't seem to work. I have also asked this question on their forums.
We have a PC product that we distribute. This is a Windows 7 Embedded PC with our software on.
We want to use rescue to support our customers if they have an issue, however we've have had to use Team Viewer instead because when we attempt to use our rescue account we get the following error in the customer applet
"You have denied full permission to Support"
We're using PIN code sessions.
No prompt appears to grant permission following the download of the rescue application, as soon as the technician clicks Launch Remote Control, this message appears immediately.
In the admin centre, I changed the running mode to standard and disable run as a windows service, however the issue remains.
What else I can do to resolve the issue?
saurabhj
I made a very dumb mistake and I am hoping there is a way to fix this without having to boot in through a Linux Live CD and extracting the data.
My user login to my Windows 7 system is: John John is part of the Administrator's group.
I have a folder called "C:\Users\John"
I tried to make this folder accessible to ONLY John (and deny from all other Administrators) by going to the Folder, Right Click > Secturity tab and then selecting all the checkboxes under "Deny" while having selected the "Administrators" group.
As a result, I cannot access this folder from any of the accounts: "John" and "Administrator" as both of them belong to the Administrators groupd and deny permissions out-weigh the "Allow Permissions"
Is there any way I could revert this back? Thanks a million!
William Hilsum
The easiest thing to do is to put in your Windows disk (or get to any command prompt, if you can logon as administrator) and then go to the command prompt and type:
`cacls c:\users\john /t /e /g Administrators:f`
This should give the administrators group full control over the folder.
If you can logon as Administrator, you should also be able to do it from the GUI by going into advanced and replacing file permissions, however, it is much easier using the above at the command prompt.
techie007
If you've given "John" full permissions, and then denied the Adminsitrators group, perhaps simply remove John from the Administators group.
That way the deny won't affect him, but "John" still has full permissions, so he can remove the deny.
Then make John an admin again.
8088
Because the user John can no longer even load its own profile, since it's denied access, you'll have to log in from another account. Try logging into another Administrator account. Then, go change the permissions. Even though the administrator account is denied access, it may still be able to change the permissions. If not, you can try using the admin account to take ownership of the file.
To take ownership, log in as an admin. Browser to where the folder is. Go to the security dialog, and click "Advanced". Go to the "owner" tab, and click "Edit". Select who to set the owner to - you'll have to set either the logged in user or the administrators group as the owner. Once you've taken ownership, revert the security privileges. Then, log back in as John (which should work now), use John to take ownership (so that John owns his own files).
Finally, what you want to do is uncheck all of the "allow" boxes for the administrators group, but you don't want to "deny" access to it, since as you found out, that overrides "allow" access. Un-allowing is usually preferable to denying.
