Administrator on Vista

[Vipin]

Hi,
I read that the built -in administrator account is disabled on beta2.
Why is it so?

Thanks,
Vipin

 

[Alan Simpson]

I don't recall that account being disabled in any builds so far, does anyone
else? You can get to it in safe mode.

 

[Vipin]

But I don't see administrator account anywhere , neither in the user
accounts and nor in the login screen? I want to login to Vista as built-in
administrator and not using a account created during Vista's Install which
is part of Administrator's group. One of the articles on the vista technet
site says it is disabled in beta2

 

[Mark D. VandenBeg]

It isn't disabled. Vista does not have an Administrator account the same
way that XP did. If your goal is to not have the GSOP (Grey Screen Of
Pause) interrupting your mood, disable UAC.

 

[Vipin]

ok, just the administrators group to which accounts can be added.

 

[Jimmy Brush]

Hello,

The built-in administrator account is disabled to prevent people from using
it, except in an emergency. By default, you can log in to the administrator
account only from safe mode.

The intent here is to enforce the best security practice of least privileged
access, where you only run programs with the mimimum privileges they need to
get the job done.

With UAC enabled, Members of the administrators group run programs with only
standard user privileges. When they want to invoke their administrator
powers, the system either asks them for permission or they right-click a
utility and click Run As Administrator. (This is different behavior than the
run as... command in XP).

In contrast, programs ran when logged in as Administrator are always given
full admin powers.

- JB

Vista FAQ
http://www.jimmah.com/vista/

 

[Mark D. VandenBeg]

Would you be able to post the link to the TechNet article to which you
refer? I am unable to find it.

 

[Vipin [MVP]]

Read the "Windows Vista Beta 2 Updates" section here:-
http://www.microsoft.com/technet/WindowsVista/library/f72d606c-ad66-403b-be70-3d59e4e5c10f.mspx

 

[Vipin [MVP]]

The built-in administrator account is disabled to prevent people from
using it, except in an emergency. By default, you can log in to the
administrator account only from safe mode.

But, how do I know the password of that account because I never configured
it during install time? During install, all it asks is to create a user
account in the administrator's group.

 

[Jane C]

The password for the inbuilt Administrator account is blank

 

[Mark D. VandenBeg]

Thank-you.

Read the "Windows Vista Beta 2 Updates" section here:-
http://www.microsoft.com/technet/WindowsVista/library/f72d606c-ad66-403b-be70-3d59e4e5c10f.mspx

 

[Raven Mill]

<< Built-in Administrator Account is Disabled by Default on New
Installations...
The built-in Administrator account is disabled by default in Windows Vista
Beta 2. If Windows Vista determines during an upgrade from Windows XP that
the built-in Administrator is the only active local administrator account,
Windows Vista leaves the account enabled and places the account in Admin
Approval Mode. >>

You have to understand the way it works now...and this is also only if you
have updated Beta2...

As far as *I* can see it, it simply disables the Administrator account
within the user settings from control panel and such. It is quite easy to
go in and UNcheck the "disable this account" box in the Computer Maintenance
settings.

I've never really been great with the settings there, and I had the same
questions when I first installed Beta2. Because I was having problems with
something that I just didn't understand at the time. (Working with
JUNCTIONS) If you are marked as an administrator, You ARE the
administrator. Am I correct in my thinking that way?

I'm more of a hardware person than a security person...

 

[Patrick Dickey]

<< Built-in Administrator Account is Disabled by Default on New
Installations...
The built-in Administrator account is disabled by default in Windows Vista
Beta 2. If Windows Vista determines during an upgrade from Windows XP that
the built-in Administrator is the only active local administrator account,
Windows Vista leaves the account enabled and places the account in Admin
Approval Mode. >>

You have to understand the way it works now...and this is also only if you
have updated Beta2...

As far as *I* can see it, it simply disables the Administrator account
within the user settings from control panel and such. It is quite easy to
go in and UNcheck the "disable this account" box in the Computer
Maintenance settings.

I've never really been great with the settings there, and I had the same
questions when I first installed Beta2. Because I was having problems
with something that I just didn't understand at the time. (Working with
JUNCTIONS) If you are marked as an administrator, You ARE the
administrator. Am I correct in my thinking that way?

I'm more of a hardware person than a security person...

Not necessarily (the if you are marked as an Administrator, you are the
Administrator comment). UAC adds another layer of protection to the scene
now. So, even the Computer Administrators are more or less limited users.
It doesn't seem to make sense, but in all honesty it does. A limited user
has two layers of protection (you have to provide Administator credentials
(or the credentials of a Computer Administrator, if you will) then clicking
on the "Run as Administrator" box that appears), whereas the "Computer
Administrator" only has to click on the "Run as Administrator" box.

It's a half-way method of doing su in Linux/Unix. However, Microsoft hasn't
refined it as much as the *nix distros have. But, that's coming also. In
the internal builds, UAC/UAP is supposedly less intrusive then it is in our
builds (including the TechBeta builds). So, time will tell.

HTH



--
Patrick Dickey.

smile... someone out there cares deeply for you.
http://www.microsoft.com/protect
http://update.microsoft.com
http://www.pats-computer-solutions.com

 

[Patrick Dickey]

But, how do I know the password of that account because I never configured
it during install time? During install, all it asks is to create a user
account in the administrator's group.

As Jane pointed out, it's blank. However, you CAN go into Safe Mode, log in
as the Administrator (with a blank password) and set one. There's a catch
though....

When you click the "Run As Administrator" box or right click and select
that, you aren't prompted for the Administrator password. This is because
you are logged in as a Computer Administrator. In effect it's like this....

In normal use, you are only a standard user. But, when you click the "Run
As Administrator" option, you are actually unlocking YOUR Administrative
powers -- not using the built in Administrator account. Imagine the "Run As
Administrator" option as a key that unlocks a padlock on some tool that you
don't normally use (or as the ignition key for a car). Not as a costume
that you put on for a few moments.

HTH



--
Patrick Dickey.

smile... someone out there cares deeply for you.
http://www.microsoft.com/protect
http://update.microsoft.com
http://www.pats-computer-solutions.com

 

[iam bennu]

I had the same probem and this helped me:

Vista Administrator account: accessing


right click on "computer" and click on manage.
click on "local users and groups", click on "users", click on
"administrator" and right click, click on properties. toggle the box marked
"account is disabled". this should clear this box. now close all windows.
in control panel click on "administrative tools", now click on "local
security policy". Local Policies/Security Options in :interactive logon:"
enable "Do not display last
last user name"

In Vista the Administrator account is the only one really that I have been
able to tell that really has full access. the get to some places you just
have to run apps as Administrator. But at least you will be able to get into
the account when you need to.

iam bennu

http://iamARTevolutions.net

 

[Guest]

Administrator IS certainly disabled in my machine. On entering Safe Mode I
am prsented with Administrator and Username. If i select Adminstrator I get
the message 'Adminstrator is disabled....'. If in normal mode I try to create
an account named Adminstrator I am told I cannnot because an account of that
name already exists (although it doesn't appear in the Users list).

Uguru (an ABIT program) keeps asking m to sign in as Administrator and click
on something. Me being an administrator is not good enough for Uguru
apparently - hence my interest in a user of that name.

 

[Guest]

I cannot log in as Administrator in Safe Mode because it is disabled. Nor can
I use the instructions listed above to enable it as I never get to see 'Local
Security Settings' - that does not appear in Aministrative Tools.

 

[Vipin]

So if I understand right, when I use the "Run as administrator" for a
program , I get the same privelleges when run in built-in administrator
account.