microsoft / microsoft/winget-pkgs

Access denied when trying to start globally installed syncthing as a normal user

Open
#136,036 3 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Issue-Bug Needs-Attention
Dominant language
No language data
Stars
11.1k
Forks
9.7k
Avg merge
1h 32m
Merged PRs (30d)
376

Description

Brief description of your issue

Cannot run syncthing under normal user when installed with --scope machine

Steps to reproduce

As admin: winget install syncthing.syncthing --scope machine
As normal user I run command: syncthing

Expected behavior

syncthing must start under normal user.

Actual behavior

Access is denied.

Environment
C:\Program Files\WinGet\Packages>icacls Syncthing.Syncthing_Microsoft.Winget.Source_8wekyb3d8bbwe
Syncthing.Syncthing_Microsoft.Winget.Source_8wekyb3d8bbwe NT SERVICE\TrustedInstaller:(I)(F)
                                                          NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)
                                                          NT AUTHORITY\SYSTEM:(I)(F)
                                                          NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
                                                          BUILTIN\Administrators:(I)(F)
                                                          BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
                                                          BUILTIN\Users:(I)(RX)
                                                          BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
                                                          CREATOR OWNER:(I)(OI)(CI)(IO)(F)
                                                          APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(RX)
                                                          APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(OI)(CI)(IO)(GR,GE)
                                                          APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(RX)
                                                          APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(OI)(CI)(IO)(GR,GE)

Successfully processed 1 files; Failed processing 0 files
-----------------------------------------------------------------------------------------------------------------------
C:\Program Files\WinGet\Packages\Syncthing.Syncthing_Microsoft.Winget.Source_8wekyb3d8bbwe>icacls Syncthing.Syncthing_Microsoft.Winget.Source_8wekyb3d8bbwe

C:\Program Files\WinGet\Packages\Syncthing.Syncthing_Microsoft.Winget.Source_8wekyb3d8bbwe>icacls syncthing-windows-amd64-v1.27.2
syncthing-windows-amd64-v1.27.2 GD07\Administrator:(I)(F)
                                GD07\Administrator:(I)(OI)(CI)(IO)(F)
                                BUILTIN\Administrators:(I)(F)
                                BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
                                NT AUTHORITY\SYSTEM:(I)(F)
                                NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)

Successfully processed 1 files; Failed processing 0 files
-----------------------------------------------------------------------------------------------------------------------

Windows Package Manager v1.6.3482
Copyright (c) Microsoft Corporation. All rights reserved.

Windows: Windows.Desktop v10.0.19045.3930
System Architecture: X64
Package: Microsoft.DesktopAppInstaller v1.21.3482.0

Winget Directories
-----------------------------------------------------------------------------------------------------------------------
Logs                               %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\Diag…
User Settings                      %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\sett…
Portable Links Directory (User)    %LOCALAPPDATA%\Microsoft\WinGet\Links
Portable Links Directory (Machine) C:\Program Files\WinGet\Links
Portable Package Root (User)       %LOCALAPPDATA%\Microsoft\WinGet\Packages
Portable Package Root              C:\Program Files\WinGet\Packages
Portable Package Root (x86)        C:\Program Files (x86)\WinGet\Packages
Installer Downloads                %USERPROFILE%\Downloads

Links
---------------------------------------------------------------------------
Privacy Statement   https://aka.ms/winget-privacy
License Agreement   https://aka.ms/winget-license
Third Party Notices https://aka.ms/winget-3rdPartyNotice
Homepage            https://aka.ms/winget
Windows Store Terms https://www.microsoft.com/en-us/storedocs/terms-of-sale

Admin Setting                             State
--------------------------------------------------
LocalManifestFiles                        Disabled
BypassCertificatePinningForMicrosoftStore Disabled
InstallerHashOverride                     Disabled
LocalArchiveMalwareScanOverride           Disabled

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing winget install syncthing.syncthing --scope machine as an administrator, then run syncthing as a normal user. Review the reported icacls output and the Windows Package Manager version and environment details. Done means a machine-scoped installation starts successfully for a normal user without access-denied errors.

Written by the indexing model from the issue text.

Assessment

Domain
cli, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.