Changing Permissions in hosts file different to Window 7 - don't understand how to

Discussion in 'Windows 8' started by Sayonara0, Aug 21, 2012.

  1. Sayonara0

    Sayonara0 MDL Novice

    Aug 1, 2009
    43
    4
    0
    Hello
    In Windows 7 I've added some entries to the hosts file and used this method to protect the file:


    9. Save the modified version of the Hosts file, and exit the editor.
    10. Right-click "hosts" again.
    11. Click "Properties".
    12. Click on the "Security" tab.
    13. Click "Advanced".
    14. Click "Advanced Security Settings".
    15. Click on the "Permissions" tab.
    16. Select "SYSTEM"
    17. Uncheck "Include inheritable permissions from this object parent".
    •A notice will pop up: click "Copy"
    18. Click "Edit".
    19. Select "SYSTEM".
    20. Click "Edit".
    21. Deny the following attributes:

    Read Attributes
    Read Extended Attributes
    Create Files / Write Data
    Create Folders / Append Data
    Write Attributes
    Write Extended Attributes
    Change Permissions
    Take Ownership

    22. Click "OK".
    23. Repeat step #21 for the "Administrators" group.

    In Windows 8 this is different, and I cannot figure out how to do it. I was able modify /add the hosts file with Notepad, but not for changing the permissions. Can anyone explain me?
     
  2. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    6,812
    1,996
    210
    I nthink you'll need to take Ownership of the file to be able to change some of the properties. Even not sure that will be enough.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. manojmat

    manojmat MDL Novice

    Jul 24, 2009
    31
    10
    0
  4. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    6,812
    1,996
    210
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,773
    1,085
    60
    #6 Mr Jinje, Aug 21, 2012
    Last edited by a moderator: Apr 20, 2017
  6. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    6,812
    1,996
    210
    With the Apps I posted, you could add or deny to take the Take Ownership to Context Menu. That is usefull for just run from a USB Stick to change some permissions. The apps will not installed.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. lunario

    lunario MDL Senior Member

    Aug 5, 2012
    379
    45
    10
    same with mines they are just 2 reg files one install other uninstall ;)
     
  8. jazzar

    jazzar MDL Novice

    Aug 11, 2012
    49
    4
    0
    Guys LOL its very easy to change permission of any file on windows 8,

    I wont use screeshots because im lazy atm:

    1- right click on file

    2- properties

    3- security tab

    4- advanced

    5- you see at top owner by someone other than you (system)

    6- click change

    7- advanced

    8- find now

    9- double click on users

    10- click ok/apply

    11- Now go to permissions tab and make sure you are added as a principle if not add same procedure as before

    12- Click apply

    13- now you're returned into security tab click on edit

    14- your username edit all full control

    15- apply/ok

    16- Enjoy.
     
  9. lunario

    lunario MDL Senior Member

    Aug 5, 2012
    379
    45
    10
    yes but im even more lazy and take ownership in context menu makes it 1 click ;)
     
  10. Sayonara0

    Sayonara0 MDL Novice

    Aug 1, 2009
    43
    4
    0
    Thank you for all your answers! Just hadn't time to test it. I will report later how it worked for me!
     
  11. Sayonara0

    Sayonara0 MDL Novice

    Aug 1, 2009
    43
    4
    0
    So, I installed Take-Ownership.reg now. Now I wanted to edit the hosts file again, clicked on Properties, Security, Advanced - and I can see myself listed as owner - that's fine.
    Now, how can I change the advance perrmissions (see my first post) hosts.jpg for SYSTEM and ADMINISTRATORS?
    When I click on SYSTEM (see picture, right window), I can only see the permissions, but I cannot change them.
     
  12. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    6,812
    1,996
    210
    Did you run the editor (Notepad etc.) elevated as Administrator? That's what you have to do, if not you couldn't change something.

    Edit: I had tested with the Apps I posted above and not the reg files, and that were worked well.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. Sayonara0

    Sayonara0 MDL Novice

    Aug 1, 2009
    43
    4
    0
    Yes, I did run the editor as Administrator. I was able to edit the file, and Windows Defender is disabled on my system due to another AV Software installed.
    I'm just not sure how to do the following for SYSTEM and ADMINISTRATORS :

    Deny the following attributes:

    Read Attributes
    Read Extended Attributes
    Create Files / Write Data
    Create Folders / Append Data
    Write Attributes
    Write Extended Attributes
    Change Permissions
    Take Ownership
     
  14. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,773
    1,085
    60
    #15 Mr Jinje, Aug 22, 2012
    Last edited by a moderator: Apr 20, 2017
  15. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    6,812
    1,996
    210
    One more thing: If your Windows 8 isn't activated, you couldn't change something!

    I use an Windows 8 Enterprise Evaluation 90 days version which is fully activated and ALL is working. On an other Windows 8 Pro using to run on Virtual Box, I could not change that settings too.

    And just off topic: May MS let us run unactivated for some time without Grace Period because of the limitation that we could use Windows 8 fully without proper activation?!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. Sayonara0

    Sayonara0 MDL Novice

    Aug 1, 2009
    43
    4
    0
    Thank you for your advices. Icacls would be fine, but still don't really understand by which command line I may deny those special permissions for "SYSTEM" and "ADMINISTRATORS".

    I have read the illustrated instructions in the link above, but I keep getting lost there. I could manage changing the regular permissions, but not those special one. This was much easier in Windows 7.

    W8 is activated.
     
  17. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    6,812
    1,996
    210
    If your Windows 8 is activated it really shouldn't be any problem!

    I done that testing on both activated W8 Enterprise and unactivated W8 Pro, first were working very well using the software I posted while the second didn't. That were because not to be activated!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. Sayonara0

    Sayonara0 MDL Novice

    Aug 1, 2009
    43
    4
    0
    Can you give me an example how the command line with icacls should be, for denying SYSTEM and ADMINISTRATORS to C:\Windows\System32\drivers\etc\hosts the following attributes:

    Read Attributes
    Read Extended Attributes
    Create Files / Write Data
    Create Folders / Append Data
    Write Attributes
    Write Extended Attributes
    Change Permissions
    Take Ownership