
If these privileges have been granted and enabled in the access token of the backup application process, it can then call CreateFile to open your file or directory for backup, specifying the standard READ_CONTROL access right as the value of the dwDesiredAccess parameter.

The SE_BACKUP_NAME and SE_RESTORE_NAME access privileges were specifically created to provide this ability to backup applications.

However, TreeSize is able to scan such folders, if you are logged in as administrator or as a user that has the right to perform backups (This option can be changed at "Control Panel > Administrative Tools > Local Security Policy" and with the user editor of Windows).Īn in-depth look into the access rights can be found in If an administrator tries to access a folder in the Windows Explorer to which the owner denied any other users reading access, an "Access Denied" error message will be displayed. That way one can even deny administrators to access files and folders. One can grant or deny other users or groups certain rights. The way users can access files and folders can be restricted. TreeSize reads the data through the NTFS backup API (see ). I really would like to know how Treesize is managing to list folders, sub-folders, and files that my account does not have access to. I tried to do this with a script that I wrote it C# however if I try and do a Directory.getDirectories() and Directory.GetFiles() but even if I run my program as admin (right click run as admin) it will just give access denied command in the Catch block. If I try this in explorer, I will get access denied. I cannot open the files but I can see their names and go into subfolders.

However if I search an area my admin account does not have access to (there are a few) it will work fine and show me all the info for the files, folder, size, modified and creation dates. Now I run this program on an account that has admin privileges and when I lunch it give the user account control pop up. Treesize pro is a program that will scan an area (C:\, Īsdrive\home, etc.) and give you a tree-view as well as other information on the area. I have an issue with a program that I’m running on one of my work machines.
