In Windows 7 and above (maybe Vista), UAC comes to play when trying to assign permissions to files and folders via the security tab in file/folder properties. If I am a member of local administrators group and this group has full access to a folder, but the local users group does not have modify access to the same folder, I am offered an elevation of my privileges signified by the shield on the edit button (or change permissions button and other places). However, if local users group has the right to modify the folder I do not get this option and all ACL editing is done with user level privileges. This is a problem when trying to reset inheritance on/ACL on all child objects of a folder that users have the modify rights to. I am aware that I can start elevated command prompt and reset ACLs using command line, but is there a GUI way of doing this?
Can I force the properties window to start elevated, or at least force the security tab to offer me an elevation?
The only two ways I found are 1. killing explorer.exe and starting it as administrator or 2. lowering UAC to 0. Neither of Which, as you can imagine is ideal.
Edit: To clarify, my question came out of following problem. I needed to give all local users full access to a folder and all of its sub folders. So I went to security tab->edit (at which point it elevated) and gave users full control. However this did not propagate to all sub-folders. So my plan was to go back to security tab, advanced, change permissions and replace permissions on all child objects. But since local users already had full access to the root folder, no elevation was offered and the replace action failed on sub-folders that local users did not have full access to. Is there an easy way around this?