Fix Permissions Changes Preventing Windows From Booting (Windows 7 / Vista)

Fix Permissions Changes Preventing Windows Vista or Windows 7 From Booting


Permissions problems often result in Windows loading to a black screen with a cursor and then not loading any further.

​
​
XPPermissions1.png



Permissions changes can result in Windows not being able to boot. The changes may result from user error or from a virus/malicious item. If you know you changed permissions prior to the problems starting, proceed to step 2. Otherwise, start with step 1. to remove malicious items prior to fixing the permissions.


Scan for Viruses Offline:

Run Windows Defender Offline to check for viruses/malicious items. You may also want to read through Free bootable antivirus rescue CDs for other malicious item removal tools that run outside Windows. If you want further help from our security experts, start a thread in the Security Arena.​


Access a Command Prompt Outside Windows:

Access a Command Prompt using the Windows Install Disc:​
​
  1. Insert the Windows Installation Media and restart your system.
    • Before you can use the installation media, configure your BIOS for the proper boot order. The installation media should be the first option in the boot menu, i.e. your CD/DVD drive or USB drive.

    • Refer to your system manual for steps to enter the BIOS and change boot order settings. Most system manuals can be found online through the system manufacturer (Dell, HP, etc.) or motherboard manufacturer (Gigabyte, ASUS, etc.).

    • If you cannot find your installation media, please contact your system manufacturer (Dell, HP, etc.) to replace missing recovery discs or contact Microsoft to replace a missing retail copy. If you were not provided with installation media, you may need to purchase a retail copy from an online or local store.
  2. Press a key when given the message to Press any key to boot from CD or DVD...

  3. You'll see a screen that says Windows is loading files...; this may take a few minutes depending on the speed of your DVD drive or USB drive.

  4. Choose your installation options and click Next.

    RO3_zpsc570a7eb.png


  5. Choose Install Now.

    RO4-Copy_zpsd38cbf0f.png


  6. Press Shift + F10 when the installer loads.

​
​
Access a Command Prompt from the Windows System Recovery Options:​
​
Access the Windows Recovery Options and then select Command Prompt.​
​
​



Reset Permissions:

  1. Once you have a command prompt available, check the directory structure of each drive as follows. In the example below, drives c:, d:, and e: are checked, but you may need to check other drives on your system. The drive will not be X: since that is the virtual drive stored in memory for the Windows installation files.

    Code: 
    dir c:
dir d:
dir e:

    The example below shows the Windows directory on drive c:

    ​
    dirCommand2_zps50213f93.png


  2. Change to the drive containing your Windows directory; the drive is C: on the example system:

    Code: 
    C:

  3. Set up your permissions for your Windows directory:

    Code: 
    icacls Windows /t /c /grant "NT SERVICE\TrustedInstaller":(F)
icacls Windows /t /c /grant SYSTEM:(M)
icacls Windows /t /c /grant SYSTEM:(F)
icacls Windows /t /c /grant Administrators:(M)
icacls Windows /t /c /grant Administrators:(F)
icacls Windows /t /c /grant Users:(RX)
icacls Windows /t /c /grant Users:(GR,GE)
icacls Windows /t /c /grant "CREATOR OWNER":(F)

  4. Set up your permissions for your Program Files directory:

    Code: 
    icacls "Program Files" /t /c /grant "NT SERVICE\TrustedInstaller":(F)
icacls "Program Files" /t /c /grant SYSTEM:(M)
icacls "Program Files" /t /c /grant SYSTEM:(F)
icacls "Program Files" /t /c /grant Administrators:(M)
icacls "Program Files" /t /c /grant Administrators:(F)
icacls "Program Files" /t /c /grant Users:(RX)
icacls "Program Files" /t /c /grant Users:(GR,GE)
icacls "Program Files" /t /c /grant "CREATOR OWNER":(F)

  5. Set up your permissions for your Program Files (x86) directory if you have 64bit Windows:

    Code: 
    icacls "Program Files (x86)" /t /c /grant "NT SERVICE\TrustedInstaller":(F)
icacls "Program Files (x86)" /t /c /grant SYSTEM:(M)
icacls "Program Files (x86)" /t /c /grant SYSTEM:(F)
icacls "Program Files (x86)" /t /c /grant Administrators:(M)
icacls "Program Files (x86)" /t /c /grant Administrators:(F)
icacls "Program Files (x86)" /t /c /grant Users:(RX)
icacls "Program Files (x86)" /t /c /grant Users:(GR,GE)
icacls "Program Files (x86)" /t /c /grant "CREATOR OWNER":(F)

  6. Set up your permissions for your Users directory:

    Code: 
    icacls Users /t /c /grant SYSTEM:(F)
icacls Users /t /c /grant Administrators:(F)
icacls Users /t /c /grant Users:(RX)
icacls Users /t /c /grant Users:(GR,GE)
icacls Users /t /c /grant Everyone:(RX)
icacls Users /t /c /grant Everyone:(GR,GE)
Info

The icacls commands may take some time to complete depending on the size of your directories and the programs installed. Please be patient.

 
Last edited:
Click to expand...
Hey,

I realize this was written back in 2012 but hopefully you will see this message. I've been having issues with windows booting to a black screen with pointer and thankfully I found your guide. "Icacls commands may take some time" is the understatement of the day when there are 30 of them to run. My DOS is very rusty but I'm wondering if you can run multiple lines of this at once recovery command prompt? Would it just be "COMMANDA & COMMANDB & COMMANDC"? i.e.

icacls Windows /t /c /grant SYSTEM:(M) & icacls Windows /t /c /grant SYSTEM:(F)

Is this inadvisable?

Any help you can provide is hugely appreciated. Thanks again for the guide.

Cog
 
Last edited by a moderator:
Just wanted to say a massive thank you to the OP.....!!! I'm also bumping a very old topic but the steps laid out worked flawlessly on a Windows 7 x64 machine. I'm so glad I found this thread as was literally about to give up and wipe it after spending many hours with it.

What prompted me to get here was a Microsoft forum where someone also posted some useful commands using 'cacls'. But I think because it used the group 'Everyone' and that group may not have existed on my machine it didn't work properly (when I rebooted the login screen would be flashing and no where to enter password etc.)

In regards to the guy above me, I'm only about 3 years late with my help but there is a trick to paste all the commands in via notepad to make it more manageable. Copy the command lines from this thread in a .txt file and save to a USB stick, insert said USB stick into the problem machine. On your CMD window type 'notepad'. Now open the .txt file you saved.

Copy each block of commands and paste them in - Now with a bit of luck it should automatically do all the work (you might need to hit Enter on the last one in each block).

Stupidly I created this problem myself by plugging the OS drive into a different machine (Windows 10) externally to browse the files... I guess Windows 7 didn't like me doing that, but I had the last laugh!!!

Knowledge is power, share it well !

Thanks again :)
 
CognitiveCog said:
Hey,

I realize this was written back in 2012 but hopefully you will see this message. I've been having issues with windows booting to a black screen with pointer and thankfully I found your guide. "Icacls commands may take some time" is the understatement of the day when there are 30 of them to run. My DOS is very rusty but I'm wondering if you can run multiple lines of this at once recovery command prompt? Would it just be "COMMANDA & COMMANDB & COMMANDC"? i.e.

icacls Windows /t /c /grant SYSTEM:(M) & icacls Windows /t /c /grant SYSTEM:(F)

Is this inadvisable?

Any help you can provide is hugely appreciated. Thanks again for the guide.

Cog
Click to expand...

I changed my permission and Windows would no longer boot up. I came across this forum which I used and it worked! There is a trick to make this go faster. You can run multiple commands at one time by separating your commands with &&. For example
Code: 
icacls Windows /t /c /grant SYSTEM:(M) && icacls Windows /t /c /grant SYSTEM:(F)

Notice the space after the first one and no space before starting the first one. I don't know if it'll help anybody else but this trick saved me a lot of time sitting around waiting to enter the next command.

Apparently the : ( symbols with out the space makes a frown face. In my example please refer to the first to commands.
 
Last edited by a moderator:
I know this post is literally mamy years ago , and the last response was 3years ago , but please does this work for windows 10 ?
 
The tutorial is for windows 7, windows 10 could be different.
Yes, you can try tweaking.com.
But a best option could be a repair installation (also known as in-place upgrade).
 
I mean my windows 10 is having the same issue as the windows 7, permissions have been changed with tweaking . Which have caused the black screen. Can i still try this ?
 
I sadly tried but i says that you cant do it because the windows must be booted :/ i will try the win 7 solution, if it works thats a great news if it doeesnt work then i will try something (if still not , before my last solution is a reinstall/clean install i will see with a professional in Morocco probably he can help me)
 
If it doesn't i will try to find a command for it or check another computer to see what should the permissions be for Windows folder and others folders. But this issue is literally similar to mine
 
Okay i checked another computer permissions and i compared with the commands of that post and you know what they are similar so thats mean the commands for windows 7 will certainly work for my computer
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top