Re: Administrator Privileges

From: Mark L. Ferguson (marfer_mvpREMOVE_at_hotmail.com)
Date: 12/09/04


Date: Wed, 8 Dec 2004 18:35:32 -0600

I think you will have to take ownership in one way or another

HOW TO Take Ownership of a File or Folder in Windows XP:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q308421

CACLS is a command line utility that will do that.. See the help for the
syntax

-- 
Mark L. Ferguson (NOT an MS-MVP)
marfers notes for windows xp 
http://www.geocities.com/marfer_mvp/chatNotes.htm
.
"roitodd" <roitodd@discussions.microsoft.com> wrote in message 
news:1FA993E1-2676-4C28-BACB-F835C10AC2D0@microsoft.com...
> There was no specific backup made before this problem arose. Nevertheless, 
> I
> ran the procedure and it didn't sovle the problem.
>
> I am not sure what you mean in your second paragraph about CACLS, but I
> should not this is not a problem of a few files; its the entire hardrive 
> and
> administrative profile for Administrator.
>
> I should also note that I believe the changes were actually made under
> another administrator user ID called Owner, which I can not log into right
> now (I have another posting for that issue).
>
> Any further ideas? Thank you so much.
>
> "Mark L. Ferguson" wrote:
>
>> If you made a backup of the system files, you can reset security from 
>> those.
>> HOW TO Reset Security Settings Back to the Defaults:
>> http://support.microsoft.com/default.aspx?kbid=313222
>>
>> It's likely you have some damage to the ACL of your files. I would try 
>> using
>> CACLS, instead of the GUI interface to permissions, to reset the files in
>> question.
>> -- 
>>
>> Mark L. Ferguson (NOT an MS-MVP)
>> marfers notes for windows xp
>> http://www.geocities.com/marfer_mvp/chatNotes.htm
>> ..
>> "roitodd" <roitodd@discussions.microsoft.com> wrote in message
>> news:F94E66AB-E4A7-4700-9ED2-A17185F6535C@microsoft.com...
>> > Mark,
>> >
>> > I am experiencing a similar problem.
>> >
>> > There was some messing around of Group Policyby by my son. This setting 
>> > is
>> > set as you say, to Administrators group, but my Administrator account 
>> > has
>> > no
>> > rights to do most anything.  I take complete control over a directory 
>> > and
>> > all
>> > rights apparently, but I can not even delete a simple text file.
>> >
>> > Effectively, this has shut me down, because even if I create another 
>> > user
>> > account in the adminstrator group, it wont even let me login in with 
>> > that
>> > user; it wont create the user directory under Documents and
>> > Settings.....Im
>> > stuck.
>> >
>> >
>> > "Mark L. Ferguson" wrote:
>> >
>> >> It sounds like a Policy setting. If you are a member of a Domain, you
>> >> will
>> >> have to check that GPO.
>> >>
>> >> In XP Pro edition, run GPEDIT.MSC, and look for a policy setting.
>> >>
>> >> If you are blocked from running GPEDIT, try the default 
>> >> "Administrator"
>> >> account to do it
>> >>
>> >> To Logon as Default Administrator on Pro Edition, from Welcome screen,
>> >> press
>> >> Ctrl-Alt-Delete, Twice , type "Administrator" and use a blank password
>> >>
>> >> Off hand, I remember one policy setting that might be doing it.
>> >>
>> >> Go to Start/Run, and type : GPEDIT.MSC Local Computer Policy> Computer
>> >> Configuration> Windows Settings> Security Settings> Local Policies>
>> >> Security
>> >> Options> System Objects: Default owner for objects created by members 
>> >> of
>> >> the
>> >> Administrators Group. Set this to "Administrators group" instead of
>> >> "Object
>> >> Creator".
>> >>
>> >> -- 
>> >>
>> >> Mark L. Ferguson
>> >> marfers notes for windows xp
>> >> http://www.geocities.com/marfer_mvp/chatNotes.htm
>> >> ..
>> >> "Gary" <Gary@discussions.microsoft.com> wrote in message
>> >> news:407B3130-5E91-4660-A940-0E0CDEDA75F4@microsoft.com...
>> >> >I have a really bizzarre situation.  I installed SP2 on my machine 
>> >> >and
>> >> >my
>> >> > administrator account became a partial administrator.  Logged on as
>> >> > administrator, I could not uninstall software, I could not use 
>> >> > restore
>> >> > point
>> >> > and dedicated network files would not synchronize because I do not 
>> >> > have
>> >> > the
>> >> > proper privileges.
>> >> >
>> >> > I uninstalled SP2 and I still can't use restore point.  Network 
>> >> > files
>> >> > that
>> >> > are assigned to everyone will synchronize.  Network files that are
>> >> > assigned
>> >> > to my account will not synchronize - I am being deined access 
>> >> > because I
>> >> > do
>> >> > not have the proper privileges.  However I can access all files 
>> >> > without
>> >> > a
>> >> > problem when I am logged on to the network.
>> >> >
>> >> > I have created a new network administrator account to no avail. 
>> >> > I've
>> >> > spoken
>> >> > with our IT people - they have never seen this before.
>> >> >
>> >> > Any help???
>> >> >
>> >> > Thx!
>> >>
>> >>
>> >>
>>
>>
>> 


Relevant Pages

  • Re: IBM says AMD dead in 5yrs ... -- Microsoft Monopoly vs. IBM monopoly
    ... those virii are not relying on anything inherent in Windows. ... >>administrator failing to put a password on the administrator account for ... >>Outlook Express, a Web browser other than Internet Explorer, and using a ...
    (comp.os.vms)
  • Re: Administrator account logon
    ... MS-MVP Windows XP/ Windows Smart Display ... >>the Administrator account on the new Windows XP logon ... >>for Enable Administrator Account ... MS-MVP Windows XP/ Windows Smart Display ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password Protected Screen Saver and Administrative Password
    ... the console is routinely locked by administrator ... is to give them a local administrator account, ... There are versions of winexit.scr available for windows 2000 and 2003 ... > release a server password protected screen-saver ...
    (Focus-Microsoft)
  • [Full-Disclosure] Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows l
    ... Windows XP home edition hides the administrator account and disables access ... Subject: Vulnerability in IBM Windows XP: default hidden Administrator ... > In previous versions of Windows, the install would allow you to ...
    (Full-Disclosure)
  • Re: Administrator Privileges
    ... > set as you say, to Administrators group, but my Administrator account has ... >> In XP Pro edition, run GPEDIT.MSC, and look for a policy setting. ... >>> administrator account became a partial administrator. ... >>> and dedicated network files would not synchronize because I do not have ...
    (microsoft.public.windowsxp.help_and_support)

Loading