ZTree.com  | ZEN  | About...  

 Index   Back

[ZEP] Handle Bypass Traverse Checking paths   [ZEP]

By: Ben Kent       
Date: Nov 27,2020 at 23:54

This is a re-request of this https://www.ztw3.com/forum/forum_entry.php?id=114541
But now with a real world example that people should be able to reproduce, and could find useful.

Run this on Windows 10 in Powershell
Get-AppxPackage | Where-Object {$_.InstallLocation -like 'C:\Program Files\WindowsApps\*'} | Select-Object InstallLocation

Copy one of the paths to the clipboard
ZTree
; (Treespec)
Paste the path in
ZTree beeps
Navigate to "C:\Program Files\WindowsApps"
Access Denied! is shown

Because the permissions on "C:\Program Files\WindowsApps" block listing the directory for users.
Looking at the icacls report it looks like BUILTIN\Users has list this folder only rights, which means listing the directory should work, looking at the permissions in the GUI there is a (Exists WIN://SYSAPPID) condition, not seen those before.
Doing a websearch finds https://www.tenforums.com/general-suppor...cess-c-program-files-windowsapps.html
For those who are interested in conditional permission AKA Dynamic Access Control (DAC) see this from 2015 https://d12vzecr6ihe4p.cloudfront.net/me...l-beyond-classic-ntfs-permissions.pdf


But that is an aside, because if dir the copied path works, and paste the path into Windows Explorer address bar works.
Then ZTree should be able to do so as well.

Yes I could run ZTree as Administrator, but I prefer to not do that.



ZEP
Please enable Treespec and Ctrl-Zlist to navigate through directories that require the use of Bypass Traverse Checking.

For the navigate through directories, they probably should be marked with "รท" (division sign), on the left of the tree.


Thanks
Ben

173 views      
 

Messages in this Thread

 
95,371 Postings in 12,032 Threads, 350 registered users, 55 users online (0 registered, 55 guests)
Index | Admin contact |   Forum Time: May 7, 2021 - 6:16 pm UTC  |  Hits:39,363,277  (10,144 Today )
RSS Feed