如何在C＃中更改System32中文件夹的权限？

Question

I need to programmatically remove "create file" and "create directory" permissions on a directory inside System32 directory for a group "NT AUTHORITY\\\\INTERACTIVE" .

To do this, I wrote following code:

        string windir = Environment.GetEnvironmentVariable("systemroot");
        string redirectionFolder = (windir + "\\System32\\Tasks2");
        MessageBox.Show(redirectionFolder);
        FileSystemAccessRule Tasks = new FileSystemAccessRule("NT AUTHORITY\\INTERACTIVE", FileSystemRights.CreateDirectories | FileSystemRights.CreateFiles, AccessControlType.Deny );
        DirectorySecurity dirSecurity = new DirectorySecurity(redirectionFolder, AccessControlSections.Group);
        dirSecurity.AddAccessRule(Tasks);
        Directory.SetAccessControl(redirectionFolder, dirSecurity);

When I run this code on a folder C:\\Tasks2 , it works.

But when I run it on C:\\Windows\\System32\\Tasks2 , I get the System.IO.DirectoryNotFoundException exception. Running the app as administrator doesn't help.

What can I do in order to change permissions of a directory inside System32 directory in C#?

Answer 1

Assuming that C:\\Windows\\System32\\Tasks2 really does exist, the most likely explanation is that you are being caught out by the file system redirector . You have a 32 bit process and the file system redirector converts system32 into SysWOW64 . And so whilst you think you are looking for C:\\Windows\\System32\\Tasks2 , you are actually looking in C:\\Windows\\SysWOW64\\Tasks2 .

Compile your program as 64 bit. Or use C:\\WINDOWS\\SysNative .