When creating a new file in the root directory of the disk partition, it prompts "Error 0x80070522: The client does not have the required privileges." Abnormal problem resolution

Original link: https://www.itylq.com/create-file-error-0x80070522.html

Release date: 2024-11-13 Migration time: 2026-03-21

1 Problem description

I encountered a strange problem. In the root directory of the disk partition (such as drive D), I can create a new folder normally, but when I create or copy files to the root directory, an error 0x80070522 will be prompted: The client does not have the required privileges. As shown in Figure 1 below.

Check the Disk Security tab to make sure it is not a problem with insufficient user or user group permissions (during testing, adding and granting full control permissions to the Everyone user group still prompts an error).

2 Reason Analysis

There are many reasons for this problem. The more common ones include improper modification of disk permissions, destructive modification and deletion of system files/folders by virus programs, etc. Once these high-risk operations trigger the underlying security mechanism of Windows, the system's security protection of disks, folders, and files will be significantly enhanced, to the point that it may even interfere with the normal use of users.

The reason why files cannot be created in the root directory of the disk is that Mandatory Integrity Control (MIC), one of the underlying security mechanisms of Windows, is at work. Under normal circumstances, the default integrity level of disks, folders, and files is "Medium". After the defense mechanism is triggered, it will be automatically adjusted to the "High" or "System" level. An abnormal phenomenon occurs where processes with a low security level cannot access other objects.

3 Solutions

Run cmd as administrator and enter the following command:

icacls D: /setintegritylevel M[edium]

::"D:" can be replaced with any drive letter or folder path that cannot create files normally and prompts 0x80070522 error;

::Integrity levels include: L[ow], M[edium], H[igh], S[ystem], you can enter a complete word or the first letter of the word is capitalized

4 Expand knowledge

Mandatory integrity control and integrity level are not permission concepts in the traditional sense (such as read, write, execute, etc.), but are security control attributes, which will also affect the actual application of permissions. That is, as mentioned in the "Problem Description" of this article, even if a user has full control permissions on a certain disk partition, folder, or file, if the user's process integrity level is lower than the integrity level of the file, then the user still cannot create or write files.

Each object on the Windows system (user process, disk, folder, file, device, etc.) has its own integrity level, similar to the concept of a firewall zone. Only objects with a high integrity level can access/call objects with a low integrity level.

---

This article was moved from WordPress to MkDocs