Switch to full style
Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Tool to change ownership of a folder

July 27th, 2024, 6:06

I have recovered data from a hard disk having administrator locked folder. Customer has formatted OS and now access to this folder is denied
I have tried to manually change access rights but could not make it
I have also tried Take ownership Pro but it failed.Is there any other software to change access rights of a folder.

Re: Tool to change ownership of a folder

July 28th, 2024, 19:22

Use command prompt to do it and post any error messages you get

Re: Tool to change ownership of a folder

July 28th, 2024, 23:41

Zero Alpha wrote:Use command prompt to do it and post any error messages you get


Nothing works to even copy these files .This is not simple case . I have created vhdx & experimenting to change ownership SID with the help of lots of forums & MS experts.
So far no success.

Re: Tool to change ownership of a folder

July 29th, 2024, 0:09

Have you tried ...

https://en.wikipedia.org/wiki/Cacls

Re: Tool to change ownership of a folder

July 29th, 2024, 5:19

fzabkar wrote:Have you tried ...

https://en.wikipedia.org/wiki/Cacls


Thank you fzabkar
I have not tried Cacls but have tried similar tools listed on the link. But even after successfully processing files still remain locked.

Re: Tool to change ownership of a folder

July 29th, 2024, 12:10

There may be a way to hack the permissions using a disc editor (DMDE). I confess that I don't understand most of the following, though.

For example, this is the $MFT record for the empty "ESD" directory on one of my drives:

Code:
LBA:311051032          vol.sec:311048984 Clus:38881123 sec:0 (MFT 901008)
[-] File #    901008 (20)
     magic ("FILE")   FILE
     fixups offset 0x 30
     fixups count     3
     LSNlo 0x         034EA02C
     LSNHi 0x         0000003C
     seq. number      20
     hlink number     1
     attrs offset     38
     flags            3
     used size        336
     record size      1024
     basefileref      0
     [0x24] 0x        0
     basefileref seq. 0
     next attribute # 3
     [0x2A] 0x        0
     file #           901008
     fixup 0x         04EA
[-] #0              $STANDARD_INFORMATION
     Attr. type 0x  10
     Attr. length 0x60
     Non-resident   0
     Attrname len   0
     Attrname ofs 0x0
     Flags 0x       0000       -- --
     Attr. number   0
     Data Size      72
     Data Offset 0x 18
         created           2020-10-21 03:21:02.061
         modified          2020-10-21 04:01:33.772
         changed           2020-10-21 04:01:33.772
         accessed          2024-03-19 23:42:07.097
         attrs             -------------i-- ----------------
         Max versions      0
         Version           0
         Class Id          0                                      <-----------------------
         Owner Id          0                                      <-----------------------
         Security Id       11736                                  <-----------------------
         Quota Charged     0
         USN               29677933368
[-] #2              $FILE_NAME
     Attr. type 0x  30
     Attr. length 0x60
     Non-resident   0
     Attrname len   0
     Attrname ofs 0x0
     Flags 0x       0000       -- --
     Attr. number   2
     Data Size      72
     Data Offset 0x 18
         directory         5           (5    )
         created           2020-10-21 03:21:02.061
         modified          2020-10-21 03:21:02.061
         changed           2020-10-21 03:21:02.061
         accessed          2020-10-21 03:21:02.061
         allocated         0
         size              0
         attrs             -------------i-- ------------D---
         reparse           0
         name len          3
         posix             3
         name              ESD
[-] #1              $INDEX_ROOT
     Attr. type 0x  90
     Attr. length 0x50
     Non-resident   0
     Attrname len   4
     Attrname ofs 0x18
     Flags 0x       0000       -- --
     Attr. number   1
     Data Size      48
     Data Offset 0x 20
     Attr. name     $I30
          0         (0    ) END MARK
         Hex
         0000: 00 00 00 00 00 00 00 00  10 00 00 00 02 00 00 00  ................
           FFFFFFFFh End Mark

Re: Tool to change ownership of a folder

July 30th, 2024, 1:44

That's wonderful research fzabkar
I have pro version & will get assistance from dmitry as well.
In a twist to this case I have identified actual issue with the folder which is not as i assumed.
Files in this folder are encrypted by EFS ( I thought since OS was win 11 EFS might not be the reason )
Unfortunately since OS was installed on SSD which is now formatted chances of recovering key are slim (had it been CMR disk I would have recovered data easily)
Thanks for providing your thoughts & insight which is always such a helpful.
Post a reply