Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to assign permissions to a regular user to access a physical device/drive on Windows?

The idea is to bypass "error: Cannot open the raw disk '\.\PhysicalDrive1'. Otherwise, it looks like I might have to disable UAC and run everything as an Administrator, which isn't ideal!

share|improve this question

The question should be re-phrased as:

Why would a regular user want to use raw device to boot a VM?

You should ask the person to create a virtual hard disk to boot a VM, not use an existing Windows operating system to boot a VM. That could cause damage or disk corruption to the current OS.

Please ask the person to create a virtual hard disk in the user's My Virtual Machines folder.

share|improve this answer

In short you can't easily. Here's why:

Using PowerShell we can get the ACLs for a physical "raw" disk drive:

PS C:\> []::GetAccessControl("\\.\PHYSICALDRIVE1") | Format-List

Path   :
Owner  : BUILTIN\Administrators
Access : Everyone Allow  ExecuteFile, ReadAttributes, ReadPermissions, Synchronize
         NT AUTHORITY\RESTRICTED Allow  ExecuteFile, ReadAttributes, ReadPermissions, Synchronize
         NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;;FX;;;WD)(A;;FX;;;RC)(A;;FA;;;SY)(A;;FA;;;BA)

So only SYSTEM and Administrators have permissions that allow write access to the drive defeating your initial request.

There seem to be third party tools (such as User-mode Raw Disk Access) that work around this but it doesn't seem to be something that Microsoft were intending to support on fixed (non-removable) disks. See for Microsoft's take.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .