Hello In Windows 7 I've added some entries to the hosts file and used this method to protect the file: 9. Save the modified version of the Hosts file, and exit the editor. 10. Right-click "hosts" again. 11. Click "Properties". 12. Click on the "Security" tab. 13. Click "Advanced". 14. Click "Advanced Security Settings". 15. Click on the "Permissions" tab. 16. Select "SYSTEM" 17. Uncheck "Include inheritable permissions from this object parent". •A notice will pop up: click "Copy" 18. Click "Edit". 19. Select "SYSTEM". 20. Click "Edit". 21. Deny the following attributes: Read Attributes Read Extended Attributes Create Files / Write Data Create Folders / Append Data Write Attributes Write Extended Attributes Change Permissions Take Ownership 22. Click "OK". 23. Repeat step #21 for the "Administrators" group. In Windows 8 this is different, and I cannot figure out how to do it. I was able modify /add the hosts file with Notepad, but not for changing the permissions. Can anyone explain me?
I nthink you'll need to take Ownership of the file to be able to change some of the properties. Even not sure that will be enough.
With the Apps I posted, you could add or deny to take the Take Ownership to Context Menu. That is usefull for just run from a USB Stick to change some permissions. The apps will not installed.
Guys LOL its very easy to change permission of any file on windows 8, I wont use screeshots because im lazy atm: 1- right click on file 2- properties 3- security tab 4- advanced 5- you see at top owner by someone other than you (system) 6- click change 7- advanced 8- find now 9- double click on users 10- click ok/apply 11- Now go to permissions tab and make sure you are added as a principle if not add same procedure as before 12- Click apply 13- now you're returned into security tab click on edit 14- your username edit all full control 15- apply/ok 16- Enjoy.
Thank you for all your answers! Just hadn't time to test it. I will report later how it worked for me!
So, I installed Take-Ownership.reg now. Now I wanted to edit the hosts file again, clicked on Properties, Security, Advanced - and I can see myself listed as owner - that's fine. Now, how can I change the advance perrmissions (see my first post) for SYSTEM and ADMINISTRATORS? When I click on SYSTEM (see picture, right window), I can only see the permissions, but I cannot change them.
Did you run the editor (Notepad etc.) elevated as Administrator? That's what you have to do, if not you couldn't change something. Edit: I had tested with the Apps I posted above and not the reg files, and that were worked well.
Yes, I did run the editor as Administrator. I was able to edit the file, and Windows Defender is disabled on my system due to another AV Software installed. I'm just not sure how to do the following for SYSTEM and ADMINISTRATORS : Deny the following attributes: Read Attributes Read Extended Attributes Create Files / Write Data Create Folders / Append Data Write Attributes Write Extended Attributes Change Permissions Take Ownership
One more thing: If your Windows 8 isn't activated, you couldn't change something! I use an Windows 8 Enterprise Evaluation 90 days version which is fully activated and ALL is working. On an other Windows 8 Pro using to run on Virtual Box, I could not change that settings too. And just off topic: May MS let us run unactivated for some time without Grace Period because of the limitation that we could use Windows 8 fully without proper activation?!
Thank you for your advices. Icacls would be fine, but still don't really understand by which command line I may deny those special permissions for "SYSTEM" and "ADMINISTRATORS". I have read the illustrated instructions in the link above, but I keep getting lost there. I could manage changing the regular permissions, but not those special one. This was much easier in Windows 7. W8 is activated.
If your Windows 8 is activated it really shouldn't be any problem! I done that testing on both activated W8 Enterprise and unactivated W8 Pro, first were working very well using the software I posted while the second didn't. That were because not to be activated!
Can you give me an example how the command line with icacls should be, for denying SYSTEM and ADMINISTRATORS to C:\Windows\System32\drivers\etc\hosts the following attributes: Read Attributes Read Extended Attributes Create Files / Write Data Create Folders / Append Data Write Attributes Write Extended Attributes Change Permissions Take Ownership