admin and owner

[garik]

I am owner and the only user a computer with windows xp. How can I manage to
start the computer as Administrator but not as the owner or some user?

 

[Jim]

I am owner and the only user a computer with windows xp. How can I manage
to start the computer as Administrator but not as the owner or some user?

Your status as owner has no meaning to XP. Your status as only user merely
means that you only logon to a particular account.

Now, when you say "start the computer", do you mean booting the computer?
If so, XP does not use a particular account for this purpose.

If, however, you say "start the computer" to mean logging onto it, you do so
through some account. You can setup XP to automatically logon to an account
of your choice after the startup phase
ends. Or, you can set xp up to present you with a choice of accounts to use.

I am also the owner and only user of my computers. However, I have chosen
to create three accounts for my use. I follow the principle that computer
users should always use an account with the bare minimum of privileges.
Thus, I have an account which is a member of the administrators group (and
most definitely not the built in administrator account), an account which is
a member of the users group, and an account which is a member of the Backup
Operators group.

Jim

 

[garik]

Sorry, I asked wrong question and as a result I made you to waste your time.
All theory you wrote I know. So let me be correct and give you an example.
If I look in my Control Panel I find there two accounts: Me\ Computer
admistrator and Guest that is off. The computer login uses automatically the
first one. One day I tried to setup Microsoft Photostory on my computer.
After some time the procedure ended because it can't write something to some
folder because I have no right for it. How can it be if I am a genuine
Administrator? I did not put the real name for folder because there were
analogical results with another programs and even with upgrades of programs
that worked for years (Microsoft Office).
Or, there is the folder Documents\My Pictures (My Videos) - not My
Documents. When I try to open it, I read that it is "unacceptable, access
denied". Again, How can it be if I am a real Administrator?
And now I can repeat my previous question: How can I manage to start login
of my computer as the real Administrator?

 

[Jim]

Sorry, I asked wrong question and as a result I made you to waste your
time. All theory you wrote I know. So let me be correct and give you an
example.
If I look in my Control Panel I find there two accounts: Me\ Computer
admistrator and Guest that is off. The computer login uses automatically
the first one. One day I tried to setup Microsoft Photostory on my
computer. After some time the procedure ended because it can't write
something to some folder because I have no right for it. How can it be if
I am a genuine Administrator? I did not put the real name for folder
because there were analogical results with another programs and even with
upgrades of programs that worked for years (Microsoft Office).
Or, there is the folder Documents\My Pictures (My Videos) - not My
Documents. When I try to open it, I read that it is "unacceptable, access
denied". Again, How can it be if I am a real Administrator?
And now I can repeat my previous question: How can I manage to start login
of my computer as the real Administrator?

It is a permissions problem. For example, no user, including any member of
the administrators group, can access \system volume information\ because the
permissions do not permit such.
However, a member of the administrators group can always allow access by
themselves or any other user through the use of CACLS.
In short, being a member of the administrators group does not allow access
to all files and folders. Such accounts can, however, give themselves that
right.

The permissions on that folder allow full access by NT AUTHORITY\SYSTEM..
This is the alias for Windows XP.
There is no entry for the administrators; hence without additional work they
have no access.

You run CACLS with cmd.exe/

Jim

 

[garik]

Thank you for your patience but you write about theory and I know that
theory. You did not answer my questions and do not help me to solve my
problems. Or you claim that even the computer Administrator has no right to
some folders or registry on his computer? BTW I tried CACLS trying to make
permission to a folder for me and nothing happend. I used command: cacls
c:\documents and settings\All users\documents\my music /t /g George:F. Is
there any mistake in it? The problem was solved very simply using Sharing
panel in Properties of the my mysic folder. The more so I think CACLS won't
help to solve the problem with the last Microsoft Upgrades of Microsoft
Office when I got the following: setup cannot open the registry key...
Verify that you have sufficient permissions to access the registry.

 

[Jim]

Thank you for your patience but you write about theory and I know that
theory. You did not answer my questions and do not help me to solve my
problems. Or you claim that even the computer Administrator has no right
to some folders or registry on his computer? BTW I tried CACLS trying to
make permission to a folder for me and nothing happend. I used command:
cacls c:\documents and settings\All users\documents\my music /t /g
George:F. Is there any mistake in it? The problem was solved very simply
using Sharing panel in Properties of the my mysic folder. The more so I
think CACLS won't help to solve the problem with the last Microsoft
Upgrades of Microsoft Office when I got the following: setup cannot open
the registry key... Verify that you have sufficient permissions to access
the registry.

I know for a fact that only the operating system can access \system volume
information\ by default. On my systems, the only entry for permissions on
this folder is for NTAUTHORITY\SYSTEM.
I know for a fact that I could not access that folder using an account which
is a member of the administrators group until I set the folder permissions
to allow my account access.
These are just examples.
Have you discovered the name of the folder which setup could not write, and
have you inspected the permissions for that folder? Unless you can answer
these questions, we are wasting time.
It is a fact that permissions can be set on registry keys. But, as far as I
know, CACLS is not the tool for setting permissions on registry keys.
Have you discovered the name of these keys which setup could not change, and
have you inspected the permissions for those keys?
As for the question about the switches for CACLS, surely you can determine
what each one does.
Jim

 

[garik]

OK, that is the full message from installing program:
Error 1402. Setup cannot open the registry key
HKEY_LOCAL_MASHINE\Software\Classes\giffile\shell\Open\ddeexec. Verify that
you have sufficient permissions to access the registry.

 

[garik]

OK, that is the full message from installing program:
Error 1402. Setup cannot open the registry key
HKEY_LOCAL_MASHINE\Software\Classes\giffile\shell\Open\ddeexec. Verify
that you have sufficient permissions to access the registry.

And let me add answers on your other questions that I left out earlier,
sorry. This one especially:Yes, the names of the keys you may see in the above sentences. Yes, I
inspected their permissions and found out that there were no permissions
there at all. So I gave full permissions to Administrator, me and All Users.
As a result I had the same answer that is written above starting with the
Error 1402.