Removing Permissions to an NTFS Partition May Prevent Startup

 Last reviewed: September 19, 1997
Article ID: Q109076
The information in this article applies to:
  • Microsoft Windows NT operating system version 3.1
  • Microsoft Windows NT Advanced Server version 3.1

SYMPTOMS

If Windows NT is located on an NTFS partition and all permissions to the root directory and the subdirectories on that partition for all groups and users are removed, Windows NT will not be able to reboot properly.

CAUSE

The Everyone group includes all users, including the Administrators. In NTFS, because denials are applied before the grants of permissions, if you deny permissions to the Everyone group and it happens to be the only set of permissions, then in essence, no one, not even the System or Administrator, has access to the file.

RESOLUTION

To work around this problem, do the following:

  1. Start the computer from the Windows NT Setup disk 1.

  2. Select Repair.

  3. Use the Emergency Repair Disk to select the Unsecure System Files option to be able to start Windows NT.

    This resets the permissions so that the system can access the files to start.

After you start Windows NT, take ownership of all files and reset the permissions so you can access the files.

MORE INFORMATION

Steps to Reproduce Problem

  1. In File Manager, choose the root directory, and then select Security, Permissions.

  2. By default, the Everyone group has full control to the entire hard drive. Usually, Everyone will be the only entry in the box. Remove Everyone from the list.

  3. Choose OK. A warning message appears saying that nobody will be able to access the files. The warning does not tell you that you will not be able to start Windows NT.

    Now you won't be able to see any files on the hard drive.

  4. Log off and log on again. Windows NT accepts the password, no errors appear, but there will be no Program Manager Shell. Windows NT tries to run the Program Manager shell, but because there are no permissions to run the .EXE file, it does not run.

  5. You can log on as anyone, but only a blank screen appears.

If you try to restart Windows NT, the following error message appears: 

   STOP: 0xC000021A {Fatal System Error}

   The session manager initialization system process terminated
   unexpectedly with a status of 0x0000022. The system has been shutdown.

Additional query words: prodnt shutdown reboot logon
Keywords : ntsecurity kbusage
Version : 3.1
Platform : winnt

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: September 19, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.