Administrator Privileges

[Guest]

I have a really bizzarre situation. I installed SP2 on my machine and my
administrator account became a partial administrator. Logged on as
administrator, I could not uninstall software, I could not use restore point
and dedicated network files would not synchronize because I do not have the
proper privileges.

I uninstalled SP2 and I still can't use restore point. Network files that
are assigned to everyone will synchronize. Network files that are assigned
to my account will not synchronize - I am being deined access because I do
not have the proper privileges. However I can access all files without a
problem when I am logged on to the network.

I have created a new network administrator account to no avail. I've spoken
with our IT people - they have never seen this before.

Any help???

Thx!

 

[Mark L. Ferguson]

It sounds like a Policy setting. If you are a member of a Domain, you will
have to check that GPO.

In XP Pro edition, run GPEDIT.MSC, and look for a policy setting.

If you are blocked from running GPEDIT, try the default "Administrator"
account to do it

To Logon as Default Administrator on Pro Edition, from Welcome screen, press
Ctrl-Alt-Delete, Twice , type "Administrator" and use a blank password

Off hand, I remember one policy setting that might be doing it.

Go to Start/Run, and type : GPEDIT.MSC Local Computer Policy> Computer
Configuration> Windows Settings> Security Settings> Local Policies> Security
Options> System Objects: Default owner for objects created by members of the
Administrators Group. Set this to "Administrators group" instead of "Object
Creator".

 

[Guest]

Mark,

I am experiencing a similar problem.

There was some messing around of Group Policyby by my son. This setting is
set as you say, to Administrators group, but my Administrator account has no
rights to do most anything. I take complete control over a directory and all
rights apparently, but I can not even delete a simple text file.

Effectively, this has shut me down, because even if I create another user
account in the adminstrator group, it wont even let me login in with that
user; it wont create the user directory under Documents and Settings.....Im
stuck.

 

[Mark L. Ferguson]

If you made a backup of the system files, you can reset security from those.
HOW TO Reset Security Settings Back to the Defaults:
http://support.microsoft.com/default.aspx?kbid=313222

It's likely you have some damage to the ACL of your files. I would try using
CACLS, instead of the GUI interface to permissions, to reset the files in
question.

 

[Guest]

There was no specific backup made before this problem arose. Nevertheless, I
ran the procedure and it didn't sovle the problem.

I am not sure what you mean in your second paragraph about CACLS, but I
should not this is not a problem of a few files; its the entire hardrive and
administrative profile for Administrator.

I should also note that I believe the changes were actually made under
another administrator user ID called Owner, which I can not log into right
now (I have another posting for that issue).

Any further ideas? Thank you so much.

 

[Mark L. Ferguson]

I think you will have to take ownership in one way or another

HOW TO Take Ownership of a File or Folder in Windows XP:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q308421

CACLS is a command line utility that will do that.. See the help for the
syntax

 

[Guest]

well, I am on phone with MS Support right now, and everyone is lost.

Again, this is not a matter of getting ownership over a single file or
directory, but the entire system, including temp directories,
everything....all rights are somehow being overidden. It's bizzare.

Perhaps the command line utility would help over a single file, but am I to
run it from the root drive over the entire system?

 

[Mark L. Ferguson]

Yes, exactly. It's not like CACLS is not capable of 'catholic' (or
'universal')control of files and folders.

162786 - Undocumented CACLS Group Permissions Capabilities:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q162786

 

[Guest]

Hahahah, very good Mark!

Well, I love the one UNDOCUMENTED capabilities I get NOOOOWWWW...They had me
undo SP2, and do a repair install and fixed all my woes. Lots of time
involved but in the end, I am now good to go!

Thank you though for the link. I will keep it for a guilt ridden night when
I'm in need of exerting some control over things!