Hello,
I ran SFC /SCANNOW after I mistakenly tinkered with Permissions in my C: drive, and it said Windows Resource Protection found corrupt files but was unable to fix some of them.... After skimming the CBS.log (which is 48962 lines long), most of the errors I found goes like "errorreporting faults" or "/ReportArchive is not owned".
My first mistake was that I accessed the admin user folder from my Standard user account (all Local machine). Since I want to undo the permanent access, I removed the standard user's permission to the admin user folder, after which many error messages appeared and all I can do is press OK or Continue. Then, as an Administrator user account, I attempted to undo my mistakes in permissions and noticed "Authenticated Users" in the permissions of my C: drive. I removed the permission of Authenticated Users from the C: drive, and checked the "Replace all child object permission entries with inheritable permission entries from this object".
I would like that Standard Users (all in Local machine) cannot install or write folders/files outside their Users folder without Administrator permission.
I hope you will offer me some advice. If you need some log files please tell me. Many thanks!