Viewing Access Permissions of a RAW Device

Display the current access permissions of a Windows RAW device.

The rawaccess utility must be run as an admin user. This is not the same as having admin privileges. This can be done by right-clicking Command Prompt and selecting Run As Administrator. "Administrator:" appears in the window title bar when running as an administrator.

The permission_types comply with the Microsoft Access Control Entry (ACE) for Windows. For more information please see http://msdn.microsoft.com/en-us/library/windows/desktop/aa374899(v=vs.85).aspx

  1. Open the Command prompt window running as an administrator.
  2. Type rawaccess followed by the RAW device letter:
    rawaccess filename
    Where:
    • filename – the Windows universal namespace filename path to the RAW device in one of the two formats:
      • \\.\logical_drive_name
      • \\.\physical_device_id
    • logical_drive_name – the partitioned letter used to represent the disk partition (for example: \\.\D:).
    • physical_device_id – the name assigned by the Window device manager. These names can be looked up using the Disk Manager in the control panel (for example: \\.\PhysicalDisk1).
    1.  Allow Exec  to \Everyone (Well Known Group)
    2.  Allow All   to NT AUTHORITY\SYSTEM (Well Known Group)
    3.  Allow All   to BUILTIN\Administrators (Alias)
    4.  Allow Exec  to NT AUTHORITY\RESTRICTED (Well Known Group)