Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to reset the security settings on the c:\windows folder of Win7. I have found this approach here, but formatting an copying back seems a little complex.

Any ideas?

share|improve this question
up vote 0 down vote accepted

Try using the subinacl.msi-tool. Install it in your System32-folder.

After that, run these commands in 'Run'

subinacl /subdirectories %WINDIR% /sgrant=administrators=f 
subinacl /subdirectories %WINDIR% /sgrant=system=f

(They may take a while, so have patience)

share|improve this answer
Does this completely reset the permissions to default? Seems like this only adds administrators and system as full-permission-user. What if I want to reset the whole security back to default (including removal of user-permissions that are not default)? – wullxz May 19 '11 at 10:42
Sgrant will add a Successfull (Allow) Audit Ace for the user and remove all existing Audit Ace for this user(or group). (Editted my post) – Bart De Vos May 19 '11 at 10:49
Thanks a lot for the hint. The installation and running the commands above works fine. But I am not sure, is this a full reset. E.g. to overcome some issues I have changed the ownership (of c:\windows) to my user account, but it remains this way. A full reset should set this back to TrustedInstaller. I am no professional admin, but it looks not like afull reset to my. Am I wrong? – Horst Walter May 19 '11 at 11:19
That's what I meant. A solution to reset permissions to pure default-permissions would be cool. – wullxz May 19 '11 at 11:30
Administrator & System are the defaults for the windows-installation dir. There is no 'restore-to-default-button' so this is the only way I know off. – Bart De Vos May 19 '11 at 11:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.