Broken Admini Rights

From: Mark L. Ferguson MVP (marfer_mvp_at_hotmail.com)
Date: 06/17/04


Date: Thu, 17 Jun 2004 07:44:38 -0700

It might be an "Ownershiop" problem, rather than an Admin
rights thing. (but logging on as default "Administrator"
will allow elevating any other account)

HOW TO Take Ownership of a File or Folder in Windows XP:
support.microsoft.com/default.aspx?scid=KB;EN-US;Q308421

I would guess you are probably set to the default
ownership type for admins, and need to set then to share
ownership. Go to Start/Run, and type : GPEDIT.MSC Local
Computer Policy> Computer Configuration> Windows
Settings> Security Settings> Local Policies> Security
Options> System Objects: Default owner for objects
created by members of the Administrators Group. Set this
to "Administrators group" instead of "Object Creator".

Mark L. Ferguson MVP

>-----Original Message-----
>Apparently my Admin rights are bent or broken. FYI -
I'm running
>XP Pro MCE 2004 on a fairly new HP zd7180 notebook. All
had been
>working weel until several weeks ago. (Then I went out
of town, so
>didn't do much to try to correct, other than what
follows.)
>
>I first noticed a problem severla weeks ago when I could
not
>download the Guide. I also could not run my Retrospect
backup
>program (external Maxstor 160 GB HD, configures as 2
80GBs, one as
>backup for the internal 80GB HD, othere as "play
space". Error
>message is that Retrospect culd not load since I needed
to have
>Administraotr rights - which I have!
>
>Based on HP Support, I tried an OS repair. About 10
min. into
>the process, Windws reported a COM+ error, but it then
proceeded to
>go through the rest of the repair. Still no rights
restored.
>
>Aso unable to install fix from Microsoft for MCE
(Q815487) but
>all other updates and patches have been applied
successfully.
>
>Latest sympton was when trying to set up a dial up
connection (I
>normally use cable) from my vacation site, I got an
error saying the
>bob@nospam.org <bob@nospam.org>Wizad could not open the
phonebook
>file. I was able to go to the command prompt to turn
off the hidden
>and read only attributes on the phonebook (.pbk) files,
I could then
>create the dialup connection fine onthe exposed files.
>
>I have scanned and rescanned for viruses, and have used
the
>several antispyware programs, and everything comes out
clean.
>
>I am assuming (could be making as a-- of me) that
somehow my
>rights over hidden and read only files is not working
properly (When
>I try to turn on display of these files through Control
Panel, it
>doen't take.) I even went so far as to delete me as a
user, and
>receate my account with Admin level, but no help.
>
>Can anyone give me any fixes (short of re-formatting HD
and
>reinstalling everything - OS, applicatins, patches, and
backup data
>files)? Are there placed in the registry to look for
rights/symptoms
>that might hold clues or fixes??
>
>
>--
>Nat
>.
>



Relevant Pages

  • Re: New Organizational Unit for a new remote office.
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... EVERY DOMAIN ADMIN IN THE FOREST ...
    (microsoft.public.win2000.active_directory)
  • Re: New Organizational Unit for a new remote office.
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... * This posting is provided "AS IS" with no warranties and confers no rights! ... EVERY DOMAIN ADMIN IN THE FOREST ...
    (microsoft.public.win2000.active_directory)
  • Re: Server access and control
    ... > A local admin on a DC is basically a god in the forest. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > That's the main difference between administrators and domain admins. ... One of these servers is a DC server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Giving admins Local Admin to DCs not Domain Admins
    ... out permissions over the whole domain. ... Althought I can give the users PowerUser or LocalLogon rights via ... Can you with Server 2003 give a user just local admin to a DC ... but there's no such thing as local administrators ...
    (microsoft.public.security)
  • Re: Help -- Admin has no file rights!
    ... you need to take ownership of the files and then ... > For some reason neither my local admin account or any domain admin can ... > access a group of folders on a certain folder.. ... How can I reset rights on all folders\files so admin has rights ...
    (microsoft.public.win2000.advanced_server)