Hi all!


I'm having a problem with a Windows 7 Professional VM.


I'm trying to "lock down" the permissions of some files (cmd.exe, ftp.exe, etc)


For example, I modify the permissions for C:\Windows\System32\cmd.exe so that only SYSTEM and Administrators have full access. I removed Users, Owner, etc from the list.


Then, if I try to run cmd.exe, I get this message: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."




Which is confusing, to say the least. I gave the Administrators group (of which I'm a part of) full access: read, write, execute, etc yet I still can't run the executable. I tried adding other groups such as Users and INTERACTIVE, and THEN it works. However, that defeats the purpose, because then anyone can access the file, which I don't want.




If anyone can shed some light on this issue, I'd greatly appreciate it.




Thanks!
Pedro