Access to CD/DVD Drive is Denied through Windows 7 Explorer (Permission Problem)

windows-7 windows-explorer permissions dvd

77,096

Solution 1

Well, it turns out that I was right; it was indeed the missing Properties key in HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}. It took several steps to fix, but actually not that long overall (especially compared to the three or so weeks I’ve been living with and working around the problem).

Grabbed a an offline copy of the SYSTEM hive from my previous installation of Windows-7 (the backup in %systemroot%\System32\Config\RegBack has the same problem)
Mounted it in my current copy (> reg load hku\z system)
Ran Regedit and navigated to HKU\z\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}
Opened the permissions dialog for the Properties key, ignoring the errors and warnings about not being allowed to view permissions for the key
Switched to Owner tab and set permission to myself
Switched to main tab and added myself to the ACL and assigned full-control
Refreshed and successfully viewed the Properties key and its contents
Exported the key to a .REG file
Unmounted the backup SYSTEM hive (> reg unload hku\z)
Edited the .REG file to change the key (HKEY_USERS\z -> HKEY_LOCAL_MACHINE)
Imported the updated .REG file
Navigated to HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318} in the registry
Opened permissions dialog for Properties (no errors this time)
In Owners tab, switched owner from myself to the virtual user SYSTEM
In main tab, removed myself from permissions list and made sure SYSTEM has full access (iirc, it already did)
Refreshed, unable to view key anymore (that’s good), closed Regedit
Opened Device Manager
Uninstalled optical (CD/DVD) drives
Rebooted
Inserted a disc to test, observed that it loaded without suddenly turning into a hard-disk, opened the disc in Explorer successfully.

It works correctly now (I can watch a DVD without having to rip it to the hard-drive or running the player in administrator mode, or I can install a game or program without having to open an admin command-prompt to install or even copy the whole disc to the HD).

I guess my instincts were correct from the start. If I had the time—um, at the time—I would have rolled up my sleeves and dug into that inaccessible key like I usually do. Thanks to harrymc for insisting on the key being accessible and pushing me to copy it.

(I’m still not sure what caused the problem in the first place. I do recall that there were other issues with the optical drives just before the key got deleted—Device Manager had kept marking them with an error/warning—and I recall trying various ways to forcibly uninstall the drives in an attempt to get Windows to detect and reinstall them correctly. It stands to reason that one of the forced uninstallations somehow managed to delete the key; it didn’t exactly improve the situation. On the bright side, the drives are no longer marked with warnings in Device Manager.)

Solution 2

This behavior is very puzzling, so all I can offer are some hints and more questions.

It would help to know whether the CD/DVD drive is shared. If it is, maybe unsharing can help.

Second, whether you have a CD-burning software installed, such as Nero. You might try to uninstall such software to see if this makes a difference.

Third, run gpedit.msc and check Computer Configuration / Administrative Templates / System / Removable Storage Access. Verify that "CD and DVD: Deny read access" is disabled or not configured. In effect, all the options should be not configured.

You might also try to see what happens with "sfc /scannow" as described in
How to Repair Windows 7 System Files with System File Checker.

The last resort is following How to Do a Repair Install to Fix Windows 7, which will refresh your Windows files without requiring the reinstallation of applications.

Some anti-virus scans might also be useful.

Solution 3

Today there was one 13-byte file on a CD I couldn't read on windows 10 home. However after creating a ISO-file (using BurnAware), I was able to extract it from there (using WinRAR).

77,096

Synetech

Sadly, I’ve become soured by the SE network. It started great, but went downhill. Some mods are too aggressive/bias, policies are arbitrarily/capriciously/selectively applied, and some users treat the sites as MMOGs, “rep-whoring”, copying others’ work, and posting random guesses to game the system by abusing and exploiting auto-bounty assignment. I care(d) about the integrity of the site, so I feel anywhere that allows such disreputable behavior isn’t somewhere worth staying. My OCD not withstanding, I won’t be contributing much here anymore and will find somewhere else to help people. I apologize to all of the people I would have helped here in the future. Press the chemise key to continue… 😈 Images As a visual-learner, I often add images to my posts to make them more effective. Sometimes I take photos, sometimes I create them with software, sometimes I find them through Google Images or Wikipedia. Mod I’ve been asked hey bro, y u no b mod? get u POWR! impr0ve site (or some other variation). I had considered it and was even tempted to run a few times, but I just have too much to do already, so I can’t take on that kind of commitment when I know I won’t be able to do as good a job as I’d like, or as Sweet Brown would say, ain’t nobody got time fo’ dat. Besides, as the behavior of the other mods became more and more apparent, I realized that it would be pointless.

Updated on September 17, 2022

Comments

Synetech over 1 year

A while ago I started having trouble with my optical drives. Both of them keep showing up in Explorer as CD/DVD drives on boot, but as soon as I put a disc in either one, it suddenly turns into a hard-drive—“local disk” is displayed in the Type column, though the File System column remains UDF/CDFS. (I though that maybe it was a permission issue on the registry key in HKLM\System\CurrentControlSet..., but I’m not so certain because of the next test.)

Here’s a screencast of My Computer; when I put in a disc, the DVD drive magically turns into a hard-disk and cannot be opened.

When I try to open a disc (of any type), I get an access denied error message. If I open an elevated command-prompt, I am able to access the files. Also, if I kill Explorer and run it from an elevated command-prompt (thus giving Explorer elevated permissions), then I can access the files from Explorer.

I’ve tried uninstalling and reinstalling the devices without success. The security dialog indicates that there are none set for the drives (no owner and no permissions). I tried setting the owner, but am only able to do so if there is a disc in it (it complains if it is empty), but the settings do not stick (if I immediately open the security dialog after setting it, it is empty again). I tried setting permissions, but that gives an error.

I’ve included a screencap-flowchart of the security dialog of one of the drives below.

I suspect that the problem is with the registry entries related to optical drives in HKLM\SYSTEM\CurrentControlSet. For example, the Properties subkey in HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318} is conspicuously absent. Worse, I cannot figure out what should be in it or import one from a backup hive because the Properties subkeys in …\Class have some sort of “super-admin” permissions—I cannot even view the permissions or owner on these! It does say however that I can change them, but I don’t know what account owns or has permissions for them (my guess would be TrustedInstaller—or something).

(Yes, I made sure that there are no upper- or lower-filters, and yes, I ran sfc. I also made sure that in the policy editor, “devices: restrict CD-ROM...” and “removable storage access” are not set.)

Does anyone know what the owner and permissions are supposed to be for optical drives and how to reset them?
- Admin over 13 years
  
  I know you checked "Devices: Restrict CD-ROM..." but did you also check Computer Configuration | Administrative Templates | System | Removable Storage Access?
- Admin over 13 years
  
  Yup; those are also all “not configured”.
- Admin over 13 years
  
  Does it work okay with UAC disabled? (after a restart)
- Admin over 13 years
  
  @kez, yes, not surprisingly it does work, though is not correct or a solution (it has the same effect as starting Explorer from an elevated command-prompt). I suspect that there is something wrong with the permissions on the registry keys in HKLM\System related to the optical drives.
harrymc over 13 years

I can see from your answer to KJGraphics that the drive is unshared, so don't bother replying on this.
harrymc over 13 years

Same to gpedit.msc (from the deleted answer to Patrick S.)
Synetech over 13 years

Like I’ve said in the original question, I have already checked the policies and the upper and lower filters and run SFC (which only works for files, not the registry). It’s not a virus–or a tumor! :-D I am not interested in doing a repair install; that’s all I ever see for any difficult questions (even in the Microsoft Answers forums by “MSMVPs”); I’d rather dig in and fix a problem than just run away and do the “easy thing”—as though reconfiguring all of the settings all over again would be easy.
harrymc over 13 years

In the comments you say that it works with UAC off or with an elevated Explorer. Does it mean that you can then see the contents of the DVD even though it still appears as "Local disk"?
harrymc over 13 years

2. Also you haven't answered to my question about Nero or such.
harrymc over 13 years

3. In the gpedit.msc part of my answer, you might try to set everything to Disabled, rather than not configured.
Synetech over 13 years

1. Yes, like originally said, I can see and access the files using administrator access (in whatever way that access is used). 2. No, no Nero etc.; like I said, the Upper- and Lower-Filters are clear. 3. Not Configured means default, which is supposed to work; it should need to be specifically set. 4. No registry cleanup apps at all. I’m almost certain that it is because of the missing HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-1‌1CE-BFC1-08002BE1031‌8}\Properties key.
harrymc over 13 years

Registry access to Properties is easy : in another computer do regedit, right-click the Properties key and select Permissions, click Advanced, change to yourself in Owner tab, Apply, then in Permissions tab add all permissions. Now you can export the whole class and import it to your computer. It should work with whatever owner. But create first a restore point on both computers, just in case.
Synetech over 13 years

But how do I find out who is supposed to be the owner in the first place so that I can restore the owner after importing it? I can only change it, not view it.
harrymc over 13 years

I don't think you can or need to reset the owner to that hidden account. I believe it can still work with whatever owner. To be sure, I have suggested taking a restore-point, which you can restore-to at least on the source computer. The target computer will stay with Administrator as owner, and I believe that this will work. If not, then restore back.
Synetech over 13 years

What you suggested won’t work. I have a copy of the registry hives from my previous installation of Win7, so a couple of weeks ago, I tried accessing the Properties keys from the old (and offline) SYSTEM hive and it was not possible (access denied).
harrymc over 13 years

This can work in spite of the frightening "access denied" message. Click OK on the message, then right-click on Properties and follow as per my advice above.
Synetech over 13 years

I tried giving myself permission, but it failed. I tried setting myself as the owner (it didn’t complain), but when I try exporting, it says the branch is not found.
harrymc over 13 years

You should do it in the order : 1) become owner and click Apply, 2) give permissions.
Synetech about 13 years

Duh. :-) See; proof that multi-tasking things like texting and driving (or working on a computer and watching a movie) doesn’t work well. Anyway, there is indeed some data in the Properties key (two values). Not surprisingly though exporting the data has not fixed it yet. I’m going to try rebooting, then unintsalling the optical drives, then rebooting again, and hopefully it will work. Incidentally, it looks like the owner of those inaccessible keys is the virtual user SYSTEM.
harrymc about 13 years

It also looks as if your bounty has evaporated into thin air.
Synetech about 13 years

Yup, apparently that’s one of SE’s stupid and arbitrary rules.
100rabh about 13 years

@Synetechinc. Bounty "evaporated" because you didn't award it and there were no other qualifying entries.
Synetech about 13 years

@Sathya, I know; that’s what makes it so stupid.
100rabh about 13 years

@Synetechinc. Not sure what's stupid about that. You put in the bounty, you should be following it up. Plus you get notifications & emails about bounty expiring
Synetech about 13 years

@Sathya, You can’t follow up on nothing. If no answers solve a problem, the bounty was unhelpful and so should be returned once expired. What if there were no answers whatsoever? The bounty still evaporates? Notifications are only relevant if you get an answer to the question
100rabh about 13 years

@Synetechinc. What if there were no answers whatsoever? The bounty still evaporates? -> Yes. so should be returned once expired -> Have a look at meta.stackexchange.com/q/56298/133693
harrymc about 13 years

@Synetech inc.: I do not agree about no answers, as mine did put you on the right track. Your own answer contains the detailed procedure, but it is based on my contribution. It is normal in such cases to award the bounty to the answer that put you on the right track, as a thank-you for the time spent on your problem.
Synetech about 13 years

@harrymc, A few of your comments prodded me to continue with what I was doing; hence I up-voted the relevant comments. It’s not my fault that no rep is award to comments; I have voiced my opinion in the relevant Meta threads. Your answer however was not helpful (you yourself said you can only offer more questions), and contained things that I had already addressed in my question. In any case, it was not until after the bounty expired that I finally managed to successfully fix it with the idea I had from the start. Do you expect a bounty to be awarded prematurely just because it is expiring?
harrymc about 13 years

@Synetech inc.: Whatever you like. It's your rep.
Admin over 12 years

Your method works very well. I also imported "HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-‌11CE-BFC1-08002BE103‌18}" from a previous backup and everything came back to normal. One question remains: what triggered the problem ? Gil
Synetech over 12 years

You had the same problem? I’m glad I could help. I too saw the pages referencing that CLSID, but they did not help because I was not missing the CD/DVD drive, I just could not open it. I don’t know what could have caused it; it doesn’t help that it was quite a while ago, so I could never remember all the things that went on in my system back then.
Murali Sundaram over 11 years

Thanks for such detailed instructions about how to give yourself permissions to the Properties key :)
Synetech over 10 years

I’m glad I could help fix it, but why did you create the two extra values? That should not be necessary; should get created automatically when the drivers are re-installed. Did you make sure to check the permissions?