Windows 24H2 issues with commands performed in Command Prompt with elevated privileges

pjduplooy · Nov 13, 2024

Hi Guys.

I have recently updated to Windows 11 24H2 from 23H2. (This also happens on a clean install of 24H2 with the device formatted).

I have to perform certain tasks in a Command Prompt with elevated privileges, especially after the install of new Nvidia Drivers, where I have to delete certain files in C:\Windows\System32\lxss\lib, and then create symlinks in that folder - This is for use in WSL.

The problem I have is that 24H2 does not allow me to perform the actions of deleting and symlinking. (As stated this is in Command Prompt with elevated privileges).

In Windows 11 23H2 this is possible.

After I rolled back from Windows 11 24H2 to 23H2, it worked again. I thought doing a clean install of Windows 11 24H2 might resolve the issue, but it did not.

I have tried using a standard sudo, (no changes to settings), but that also did not work.

The error that I get in all the scenarios is "Access Denied.

Could you please assist me in fixing this?

Regards.

spapakons · Nov 13, 2024

I think you must first take ownership of the specific folder and all subfolders and files, probably current owner is TrustedInstaller, you must change that to Administrators group. Then you have to modify access rights of that folder and all subfolders and files to give full access to the Administrators group. Now your actions should complete successfully. Maybe this wasn't necessary in 23H2, but probably in 24H2 Microsoft enhanced security. To do these, right-click on the folder, select Properties and go to the Security tab. Click Advanced and proceed from there.

pjduplooy · Nov 13, 2024

Thanks a million. I suspected as much. Will upgrade again later and give feedback

Ghot · Nov 13, 2024

pjduplooy said:
Thanks a million. I suspected as much. Will upgrade again later and give feedback

Hello @pjduplooy and welcome to ElevenForum.

Add Take Ownership to Context Menu in Windows 11

This tutorial will show you how to add Take Ownership to the context menu of all files, folders, and drives for all users in Windows 10 and Windows 11. This will allow you to be able to instantly take ownership of a file, folder (and all contents), or drive (and all contents) by changing the...

www.elevenforum.com

Add "Reset Permissions" to Context Menu in Windows 11

This tutorial will show you how to add or remove the "Reset Permissions" context menu to reset effective permissions of files and folders back to their default inherited permissions in Windows 10 and Windows 11. On NTFS and ReFS volumes, you can set security permissions on files and folders...

www.elevenforum.com

_______________________________________________________________________________________________________________________________

Here's some other things that you may find useful...

Quickie Eleven Forum Setup Guide for new Members

Quickie Interface tour... Quickie set up... At the top right, click on your name, then choose "Preferences". Then go through everything on the left side. Quickie navigation... Click Forums and choose a subforum, OR... Click Forums, then New Posts or What's New Ranks, Trophies...

www.elevenforum.com

Macrium Reflect, AOMEI Backupper and Hasleo Backup Suite - GUIDES

How to use backup software... 1. When everything is working perfectly... make a full Windows backup. 2. Then, if something breaks... restore from the latest backup. 3. Then... try "whatever you were doing" a different way. If it still breaks Windows, then... go to step #2. 4. Repeat...

www.elevenforum.com

Windows 11 Tweaks - Leader Board.

These are tweaks I've seen asked for... many times. They are collected here for easy access. All of these and more can be found in the Eleven Forum Tutorials section. Make sure to read the "notes" in the various tutorials. At the bottom of the first post in all the "tutorials", there are...

www.elevenforum.com

Dronix · Nov 13, 2024

pjduplooy said:
I have to perform certain tasks in a Command Prompt with elevated privileges, especially after the install of new Nvidia Drivers, where I have to delete certain files in C:\Windows\System32\lxss\lib, and then create symlinks in that folder - This is for use in WSL.

The problem I have is that 24H2 does not allow me to perform the actions of deleting and symlinking. (As stated this is in Command Prompt with elevated privileges).

Could you please post an example of a team that should complete the task you set so that I can experiment with it.

pjduplooy · Nov 13, 2024

Hi Dronix. I do not understand your request.

Ghot · Nov 13, 2024

pjduplooy said:
Hi Dronix. I do not understand your request.

Translation... Post an example of something you tried, that didn't work on 24H2.
So, he can experiment and see if he can find a solution.

Like one of the exact commands you tried.

Dronix · Nov 13, 2024

pjduplooy said:
I do not understand your request.

An example of a task defined on the command line.

pjduplooy · Nov 13, 2024

C:
cd \Windows\System32\lxss\lib
del libcuda.so
del libcuda.so.1
mklink libcuda.so libcuda.so.1.1
mklink libcuda.so.1 libcuda.so.1.1

Dronix · Nov 13, 2024

pjduplooy said:
C:
cd \Windows\System32\lxss\lib
del libcuda.so
del libcuda.so.1
mklink libcuda.so libcuda.so.1.1
mklink libcuda.so.1 libcuda.so.1.1

I don't know if I fully understood you, but I made a small bat file and a small video of how it works.

@echo off
:: Created by Dronix7 13.11.2024 UpDated 13.11.2024
mode con:cols=70 lines=8 & echo.
:: ============================== Checking Administrator Rights =============================
call :StartAdmin
:: ==========================================================================================
cd /d %SystemRoot%\System32\lxss\lib
del libcuda.so
del libcuda.so.1
echo.
pause
:: ==========================================================================================
echo.
mklink libcuda.so libcuda.so.1.1
mklink libcuda.so.1 libcuda.so.1.1
echo.
pause
:: == If the File Is Running Without Administrator Rights, then Run it as an Administrator ==
:StartAdmin
reg query "HKU\S-1-5-19\Environment" >nul 2>&1
if not %errorlevel% EQU 0 (
cls
powershell.exe -windowstyle hidden -noprofile "Start-Process '%~dpnx0' -Verb RunAs"
echo Запуск от Имени Администратора...
exit
)
cls & goto:eof
:: ==========================================================================================

And a short video

The finished bat file - Example.bat

pjduplooy · Nov 13, 2024

Hi guys. Thanks for all the help. Before I wanted to try all your suggestions, I opened one of my WSL Instances, and got this error:

wsl: Access is denied.
Error code: CreateInstance/CreateVm/ConfigureNetworking/HNS/E_ACCESSDENIED
wsl: Failed to configure network (networkingMode Nat), falling back to no networking.

Reverting back to 23H2

Skeptic Mike · Nov 13, 2024

pjduplooy said:
I have to perform certain tasks in a Command Prompt with elevated privileges, especially after the install of new Nvidia Drivers, where I have to delete certain files in C:\Windows\System32\lxss\lib, and then create symlinks in that folder - This is for use in WSL.

The problem I have is that 24H2 does not allow me to perform the actions of deleting and symlinking. (As stated this is in Command Prompt with elevated privileges).

As you observed you do not have permissions to do this. However, with administrative rights, you have backup and restore privileges available to you.

if you save the following two line vbscript, and run it from an elevated command prompt it will spawn a new cmd window which has the privileges enabled.

Code:

Set Process = GetObject("winmgmts:{impersonationLevel=impersonate, (backup, restore)}!\\.\root\cimv2:Win32_Process")
Process.Create "cmd", Null, Null, ProcessID

You can then run your batch script.

Having restore privileges makes window ignore the permissions on files and folders. So you can make changes which don't require reading or writing file content. If you need to do that there's a command line utility robocopy which has a /b option which allows you to read and write anywhere. It's available in all recent versions of windows.

This saves you from messing with permissions. - Providing you're comfortable with command line programs.

Mike

LesFerch · Nov 13, 2024

Have you tried running your commands in Cmd as TrustedInstaller? You can do that using PowerRun, AdvancedRun, or my free Right-Click Tools.

hdmi · Nov 13, 2024

Skeptic Mike said:
As you observed you do not have permissions to do this. However, with administrative rights, you have backup and restore privileges available to you.

if you save the following two line vbscript, and run it from an elevated command prompt it will spawn a new cmd window which has the privileges enabled.

Code:

Set Process = GetObject("winmgmts:{impersonationLevel=impersonate, (backup, restore)}!\\.\root\cimv2:Win32_Process") Process.Create "cmd", Null, Null, ProcessID

You can then run your batch script.

Having restore privileges makes window ignore the permissions on files and folders. So you can make changes which don't require reading or writing file content. If you need to do that there's a command line utility robocopy which has a /b option which allows you to read and write anywhere. It's available in all recent versions of windows.

This saves you from messing with permissions. - Providing you're comfortable with command line programs.

It works, but the new cmd window won't let you change the owner back to TrustedInstaller (i.e., with
icacls "C:\Path\To\File\Or\Folder" /setowner "NT SERVICE\TrustedInstaller") after you took ownership of a file/folder (i.e., with
takeown /f "C:\Path\To\File\Or\Folder"). So, to work around that problem, you can edit your vbscript code:

Code:

Set Process = GetObject("winmgmts:{impersonationLevel=impersonate, (backup, restore, takeownership)}!\\.\root\cimv2:Win32_Process")
Process.Create "cmd", Null, Null, ProcessID

When in doubt, to be able to see the owner of a file/folder via the command line, you can run this:

Code:

powershell -noprofile -executionpolicy bypass -command (get-acl "C:\Path\To\File\Or\Folder").owner

Taking ownership lets you easily conveniently use File Explorer as opposed to use robocopy with the /b option. I know that a lot of people simply never bother to change it back to TrustedInstaller after they took ownership to modify the content. Personally, I, always prefer to change it back.

XxXxX · Nov 14, 2024

if you open 'task manager'
r/click the start menu on this menu its about 7th up from the bottom.

when task manager opens at the top is 'run new task' click that.

in the command window write >> cmd << for the command prompt
or >> powershell << for the windows powershell

make sure to TICK ''create this task with administrative privileges"
then click OK or press ENTER.

this will open the command prompt or powershell as admin bypassing any restrictions.

this happened to me but suddenly after the last updates its now back to normal.
best of luck, Steve ..

pjduplooy · Nov 14, 2024

Hi. Thank you for all your suggestions.

I fixed this with Skeptic Mike's Visual Basic Script.

I have learnt a lot about Windows and its peculiarities the last two days.

Happy camper now!!

Thanks guys!!

Windows 24H2 issues with commands performed in Command Prompt with elevated privileges

Member

My Computer

Well-known member

My Computers

Member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Jack of all trades – master of none

My Computers

Well-known member

My Computers

Member

My Computer

Similar threads