Admin question

[Len Cuff]

I need to log on as the 'real' administrator on a Vista box to change
some file permissions/access. Anyone know how this can be done?

cheers,
Len

 

[AlexB]

You are not the administrator and will never be. Administrator is an
***object***.
You can temporarily give yourselves rights to perform some operations as if
you were Administrator, yes. Your power still will be limited. Actually you
do not need more than that.

In order to do what you want you will have to open "Local Users And Groups"
GUI (either typing lusrmgr.msc in Windows\system32\ -- do not forget to open
Command Prompt as "run as Administrator" - take a notice!!!) or if you have
Home or Home Premium you should go thru Control panel> System and
Maintenance>Administrative Tools>Computer Management>Local Users and Groups.

Open up thumbnail Groups, open up Group "Administrators" (nb: it is plural)
and you will see the object "administrator" in there. Add yourselves to this
group. Close the GUI.

To change some permissions/access: Go to that folder, left
click>>Properties>>Security tab>>Edit>>Add>>type in your name>>Close that
window, Check checkbox "Full Control">>Apply>>OK.
Now you will have the right to do what you want in this folder and ALL its
subfolders. You will never be denied any access. You should exercise this
power judiciously and on a limited basis.

For some tasks you may consider removing other users from that folder like
"everyone", etc. It is a separate story.

 

[Bob]

I need to log on as the 'real' administrator on a Vista box to change
some file permissions/access. Anyone know how this can be done?

cheers,
Len

Yes.

 

[AlexB]

Buddy, you are an ultimate troll. You are a master of stating the obvious.
You must earn an entry in the Guinea Pig's Book of World Records for your
laconical entries.

 

[Len Cuff]

Hi Len,

This will show you how to enable the real built-in Administrator
account so you can logon to it.

http://www.vistax64.com/tutorials/67567-administrator-account.html

Shawn

Ok thanks all. I now have an administrator account which I can log
into BUT I still cannot get full control of some folders - Program
Files for instance? This is just a box I am playing with so I'm not
bothered if it all goes bad on me. What I was trying to achieve was to
give the admin account FULL control of the entire C drive but it
refuses to work on certain folders? Anyone know how to achieve what I
want?



cheers,
Len

 

[Len Cuff]

The "lack" of full access to certain folders, such as "Program Files"
is a security measure to help prevent installed programs from corrupting
themselves or others. Generally, programs are supposed to write data to
the user folders (like Documents, Pictures, etc).

If you're thinking about "folders" such as "Documents and Settings" or
"AppData", they are not really folder, but are Junction Points" that
serve no real purpose to you as a user. They are there for
backwards-compatibility only and are really special shortcuts to their
Vista opposites that pre-Vista programs use.

Recommendations from Microsoft:

- Use NTFS ACLs to protect junction points from inadvertent deletion.
- Use NTFS ACLs to protect files and directories targeted by junction
points from inadvertent deletion or other file system operations.
- Never delete a junction point using Explorer, a del /s command, or
other file system utilities that walk recursively into directory
trees. These utilities will affect the target directory and all
subdirectories. Instead, use the utilities described below to delete
junction points.
- Use caution when applying ACLs or changing file compression in a
directory tree that includes NTFS Junction Points.
- Do not create namespace cycles with NTFS or DFS junction points.
- Place all your junction points at a secure location in a namespace
where you can test them out in safety, and other users will not
mistakenly delete them or walk through them.In the above, "ACL" is "Access Control List", which is exactly what
you'll be modifying when you chance security and ownership of
files/folders.

Further Reading (on Wikipedia): 'NTFS junction point - Wikipedia, the
free encyclopedia' (http://en.wikipedia.org/wiki/NTFS_junction_point)

I am trying to test a batch file which needs to write to the Program
Files folder. Even if I run it as administrator it still fails with a
denied access message?

cheers,
Len

 

[AlexB]

You cannot take complete control of the entire C: drive under any
circumstances in Vista and I believe even in XP it is impossible. There are
system files in there. Why do you want to do it in the first place? Does not
smell an honest intention at all. How many people around here are looking
for it? One or two a week.

You are saying your system is just a "box" and you have no respect for it.
Does it mean that it is a guinea pig for you to hack the system and see how
you can do it for others? Normal people never face the task that is yours.

That MIC idiot (who I suspect is MICHAEL) gave you an equally idiotic
advice. He is trying to popularize an idea that Vista is very difficult, UAC
is cra*p and people should get rid of it. Then his Trojans he apparently
planted across the land will restart sending him information. The idiot did
not realize that you may be in a competing organization, so to speak. It
seems he has not been able to solve the problem either. Beware.

 

[MICHAEL]

You cannot take complete control of the entire C: drive under any
circumstances in Vista and I believe even in XP it is impossible. There are
system files in there. Why do you want to do it in the first place? Does not
smell an honest intention at all. How many people around here are looking
for it? One or two a week.

You are saying your system is just a "box" and you have no respect for it.
Does it mean that it is a guinea pig for you to hack the system and see how
you can do it for others? Normal people never face the task that is yours.

That MIC idiot (who I suspect is MICHAEL) gave you an equally idiotic
advice. He is trying to popularize an idea that Vista is very difficult, UAC
is cra*p and people should get rid of it. Then his Trojans he apparently
planted across the land will restart sending him information. The idiot did
not realize that you may be in a competing organization, so to speak. It
seems he has not been able to solve the problem either. Beware.

There are times when I'm reading your drivel that I think your blather
must just be a joke.... surely, someone can't be so ignorant.

Unfortunately, I've come to believe that you're just one
big doltish dingleberry. We should take pity on you, but
a good beat down would probably do your pudden-head
more good.


-Michael

 

[Bob]

Add "Take Ownership" to right-click menu in Vista
http://www.petri.co.il/add-take-ownership-context-menu-vista.htm

 

[Len Cuff]

I need to log on as the 'real' administrator on a Vista box to change
some file permissions/access. Anyone know how this can be done?

cheers,
Len

First of all I am not doing anything I shouldn't be!! I am a Unix Sys
Ad and we are rolling some Vista boxes out as well. I am just
'playing' with a grotty old 1Gig Duron box just to see what can and
can't be done. Simple question and certainly nothing dishonest!! I
really don't know where that one came from!!



cheers,
Len

 

[AlexB]

You, annelid has shown your "expertise" time and again. Just yesterday you
advised a person who needed to change a system sound to "hack your
computer."

You are a criminal type plus an incompetent. A very poisonous combination.

Unfortunately, I've come to believe

I want to assure you I don't give a damn what you believe in. I know you
believe in scam.

 

[MICHAEL]

You, annelid has shown your "expertise" time and again. Just yesterday you
advised a person who needed to change a system sound to "hack your
computer."

You are a criminal type plus an incompetent. A very poisonous combination.


I want to assure you I don't give a damn what you believe in. I know you
believe in scam.

Poor baby, I didn't mean to hurt your little feelings...
well, not too much.

Take care, douche.


-Michael

 

[Bob]

You don't know where what came from?

First of all I am not doing anything I shouldn't be!! I am a Unix Sys
Ad and we are rolling some Vista boxes out as well. I am just
'playing' with a grotty old 1Gig Duron box just to see what can and
can't be done. Simple question and certainly nothing dishonest!! I
really don't know where that one came from!!



cheers,
Len