My Windows 11 pc has been reporting some unusual permissions errors recently, including but not limited to the permissions incorrectly ordered warning. I think the system drive’s root permissions have been changed somehow. How can I reset them?
Would it make sense to run CACLS C: /S with the SDDL from a machine that is working correctly?
On the troubled machine, I run CACLS and get this:
PS C:> cacls c:
c: <Account Domain not found>(special access:)
SYNCHRONIZE
FILE_READ_DATA
FILE_EXECUTE
FILE_READ_ATTRIBUTES
<Account Domain not found>(special access:)
SYNCHRONIZE
FILE_READ_DATA
FILE_EXECUTE
FILE_READ_ATTRIBUTES
BUILTINAdministrators:(ID)F
BUILTINAdministrators:(OI)(CI)(IO)(ID)F
NT AUTHORITYSYSTEM:(ID)F
NT AUTHORITYSYSTEM:(OI)(CI)(IO)(ID)F
NT AUTHORITYAuthenticated Users:(ID)C
NT AUTHORITYAuthenticated Users:(OI)(CI)(IO)(ID)C
BUILTINUsers:(ID)R
BUILTINUsers:(OI)(CI)(IO)(ID)(special access:)
GENERIC_READ
GENERIC_EXECUTE
Or the SDDL version
PS C:> cacls c: /s
c: "D:(A;;0x1000a1;;;S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176)(A;;0x1000a1;;;S-1-15-3-65536-1171677023-2469935273-3317266010-2937768231-83730487-3606222557-2674643231-2098219660)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1301bf;;;AU)(A;OICIIOID;SDGXGWGR;;;AU)(A;ID;0x1200a9;;;BU)(A;OICIIOID;GXGR;;;BU)"
