Re: For those of you who have disabled UAC while using user/admin, you don't have full admin rights -- <VBG>!


"Paul Montgumdrop" <Paul@xxxxxxxxxxxxxxx> wrote in message
news:Oww7mE9IJHA.456@xxxxxxxxxxxxxxxxxxxxxxx
Zaphod Beeblebrox wrote:
"Paul Montgumdrop" <Paul@xxxxxxxxxxxxxxx> wrote in message
news:u2oCkz8IJHA.4428@xxxxxxxxxxxxxxxxxxxxxxx
Zaphod Beeblebrox wrote:
"Gordon" <gordonbparker@xxxxxxxxxxxxxxxxx> wrote in message
news:uvwC7M1IJHA.3424@xxxxxxxxxxxxxxxxxxxxxxx
"Paul Montgumdrop" <Paul@xxxxxxxxxxxxxxx> wrote in message
news:O%23%23WPK1IJHA.4600@xxxxxxxxxxxxxxxxxxxxxxx
You don't have full rights as user/admin in some situations like
on the C:\Programs Files or C:\Windows folder with UAC enabled or
disabled, and I suspect some other folders that are *protected*
from you.

I also suspect in some situation in dealing with the registry, it
is protecting itself too.

You don't even have full rights as admin if you're using that
hidden admin account on Vista too.

Vista is protecting itself from *you*. :-P
Eh?
Looks like he is referring to Windows restricting access to certain
parts of the system to the Trusted Installer user. Old news, and
of course you can take ownership as an administrator so you have
control either way, if not explicit permissions out of the box.

No that is NOT what I am talking about.

So then perhaps you could explain, as no one seems to know but you.


Perhaps you will start reading the other posts of mine in this thread.

I would, but until this morning I had your posts on ignore since you
were only contributing to the noise level in the group, not signal /
content level. But I started to see through replies to your posts that
this might have changed, so I unblocked you. I'm hoping it wasn't a
mistake.


Why should I repeat myself?

If you don't want to, then don't. It won't bother me, I was only
looking for a clarification to what you meant since I couldn't undestand
you.

What does the Trusted Installer user have to do with anything for one
as user/admin that cannot go to certain folders and do security
settings or even add a user to the folder?

Some folders are owned by Trusted Installer, and have permissions
specific to that user that prevent other users from changing them. The
only way around this is to take ownership of the folder, then make the
changes. What circumstance would prompt the need to do this, I don't
know. I've never needed to do so.


Heck on XP as user/admin, I could even goto the System account and
change permissions for System on mentioned folders. I can't do the
same thing on Vista.

Probably related to the above. Vista's security is considerably
tightened in certain folders.

You explaine that to me. Why can't I do it as user/admin.

See above. In Vista, an admin user doesn't have permissions to do
everything they did in previous verions of Windows, but still has the
ability to take ownership and change permissions. You'll have to be a
bit more specific for me to be able to comment further. Unless of
course you already have, and don't want to repeat yourself.

--
Zaphod

Arthur: All my life I've had this strange feeling that there's something
big and sinister going on in the world.
Slartibartfast: No, that's perfectly normal paranoia. Everyone in the
universe gets that.


.

Relevant Pages

  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • RE: ISA 2004 REPORT FAILURE
    ... Did as you suggested and turned auditing on for the system and folders ... that is setting the wrong permissions of the folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 REPORT FAILURE
    ... the ISA Reports still fail because ... I can change the permissions manually ... on the ISALogs and ISASummaries folders ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Personal Media Drive
    ... > much more knowledgeable about Windows than I am. ... You restrict access by assigning permissions to drives, folders and files. ...
    (microsoft.public.windows.mediacenter)
  • Re: Administrator/User security issues
    ... i have setup all the accounts, ... folders for testing the security. ... permissions but the admin. ...
    (microsoft.public.windowsxp.security_admin)
Loading