my user has Administrator privileges, but I can't move a folder??????

[c]

Trying to move C:\users\joe\Documents\bsfolder to C:\users\joe, but
Vista complains that I need administrator privileges to do it.

Control panel -> user accounts SHOWS that me, user joe, does have
Administrator privileges. I'm logged in as joe.

Long ago I disabled UAC.

Why must this be so damned difficult?

c

 

[Mr. Arnold]

Trying to move C:\users\joe\Documents\bsfolder to C:\users\joe, but
Vista complains that I need administrator privileges to do it.

Control panel -> user accounts SHOWS that me, user joe, does have
Administrator privileges. I'm logged in as joe.

No, you're not user/admin with full admin rights with that out of the
box user/admin account that Vista gives you.

Long ago I disabled UAC.

Well with UAC enabled you should have been able to escalate rights to be
a admin with full rights. But you disabled UAC.

Why must this be so damned difficult?

<http://www.computerperformance.co.u...a_Administrator_-_Super_User_(Hidden_Account)>

<http://www.nirmaltv.com/2008/07/11/how-to-take-ownership-of-files-and-folders-in-vista/>

 

[c]

No, you're not user/admin with full admin rights with that out of the
box user/admin account that Vista gives you.




Well with UAC enabled you should have been able to escalate rights to be
a admin with full rights. But you disabled UAC.




<http://www.computerperformance.co.uk/vista/vista_administrator_activa...)>

<http://www.nirmaltv.com/2008/07/11/how-to-take-ownership-of-files-and...>

thanks mr. A.

So, essentially Vista is lying. Administrator isn't really that. We
could all avoid lots of confusion had they picked something else to
describe "enhanced permissions but not Administrator ones".

Checked that my user, joe, is owner of both SRC and Destination
folder, so why is it still complaining?

c

 

[Mr. Arnold]

thanks mr. A.

So, essentially Vista is lying. Administrator isn't really that. We
could all avoid lots of confusion had they picked something else to
describe "enhanced permissions but not Administrator ones".

No, those user/admin accounts can escalate to user/admin that have full
rights, but that requires UAC to be enabled to escalate to admin with
Full rights. The do not inherit full admin rights from the built-in
hidden Administrator account, like on XP. That link that's being talked
about on vista_administrator.

<http://news.softpedia.com/news/Admin-Approval-Mode-in-Windows-Vista-45312.shtml>

"In this mode (which is on by default for all members of the local
administrators group), every user with administrator privileges runs
normally as a standard user; but when an application or the system needs
to do something that requires administrator permissions, the user is
prompted to approve the task explicitly. Unlike the "super user on"
function from UNIX that leaves the process elevated until the user
explicitly turns it off, admin approval mode enables administrator
privileges for just the task that was approved, automatically returning
the user to standard user when the task is completed," explained Jim
Allchin, Microsoft Co-President, Platform and Services Division.

Checked that my user, joe, is owner of both SRC and Destination
folder, so why is it still complaining?

Well, in this case, you're just *user* joe, and you're not user/admin joe.

I suggest you go back and read the two links up above there about the
example in taking ownership, because joe is part of the Administrators
group. But just plain old *user* joe is not an administrator.

You know, you're really doing yourself a disservice by turning UAC off,
because you are on the Internet wide open to attack, just like you were
on XP, as that O/S gets hammered by malware with a user running with
full admin rights on the Internet.

 

[c]

thanks mr. A.

So, essentially Vista is lying. Administrator isn't really that. We
could all avoid lots of confusion had they picked something else to
describe "enhanced permissions but not Administrator ones".

Checked that my user, joe, is owner of both SRC and Destination
folder, so why is it still complaining?

c

Actually just realized UAC is on. Corporate must have re-enabled for
me.

Is there a trick to allow moving this folder with UAC then?

c

 

[Mr. Arnold]

Actually just realized UAC is on. Corporate must have re-enabled for
me.

Is there a trick to allow moving this folder with UAC then?

c

Go take ownership of the folder pointing to Administrators as the owner.

And figure out how to use Run As Administrator.

<http://www.howtogeek.com/howto/wind...ation-in-administrator-mode-on-windows-vista/>

Use it on the Command Prompt short-cut and do the copy or enable on
Explore.exe maybe a short-cut if that's where you're being stopped.

 

[John]

If I understand the article correctly, in Vista, an administrator isn't
really an administrator. If I'm logged on as John and John is in local
Administrators group, I'd still be prompted if I want to install software,
move folders/files. Is that correct?

If that's correct, how does Vista restricted user (is it still called a
restricted user account?) differ from Administrator? I suppose if I'm logged
on as a restricted user, I can still install software if I enter
Administrator logon credentials when prompted, right?

Btw, I'm an XP user. I've never used Vista. That's why I asked.

 

[Mr. Arnold]

If I understand the article correctly, in Vista, an administrator isn't
really an administrator. If I'm logged on as John and John is in local
Administrators group, I'd still be prompted if I want to install software,
move folders/files. Is that correct?

Not in all situations with file movement or copying.

If that's correct, how does Vista restricted user (is it still called a
restricted user account?) differ from Administrator? I suppose if I'm logged
on as a restricted user, I can still install software if I enter
Administrator logon credentials when prompted, right?

Your user/admin account is only user/admin for the task required and
then you are returned to being a standard user.

I am going to give you the Vista understanding kit. You should read it.

<http://technet.microsoft.com/en-us/library/cc709691.aspx>
<http://news.softpedia.com/news/Admin-Approval-Mode-in-Windows-Vista-45312.shtml>
<http://technet.microsoft.com/en-us/magazine/cc138019.aspx>
<http://technet.microsoft.com/en-us/magazine/cc160882.aspx>
<http://juice.altiris.com/article/2665/folder-virtualization-concepts-windows-vista>
<http://msdn.microsoft.com/en-us/library/aa382503.aspx>
<http://msdn.microsoft.com/en-us/library/aa382503.aspx>
<http://msdn.microsoft.com/en-us/library/aa382530(VS.85).aspx>
<http://www.computerperformance.co.u...a_Administrator_-_Super_User_(Hidden_Account)>
<http://www.howtogeek.com/howto/wind...idden-administrator-account-on-windows-vista/>
<http://www.securitypronews.com/news/securitynews/spn-45-20060601ASLRJoinsVistasBagOfTricks.html>
<http://technet.microsoft.com/en-us/magazine/cc162458.aspx>
<http://blogs.msdn.com/e7/archive/2008/10/08/user-account-control.aspx>
<http://www.nirmaltv.com/2008/07/11/how-to-take-ownership-of-files-and-folders-in-vista/>

 

[c]

No, those user/admin accounts can escalate to user/admin that have full
rights, but that requires UAC to be enabled to escalate to admin with
Full rights. The do not inherit full admin rights from the built-in
hidden Administrator account, like on XP. That link that's being talked
about on vista_administrator.

<http://news.softpedia.com/news/Admin-Approval-Mode-in-Windows-Vista-4...>

"In this mode (which is on by default for all members of the local
administrators group), every user with administrator privileges runs
normally as a standard user; but when an application or the system needs
to do something that requires administrator permissions, the user is
prompted to approve the task explicitly. Unlike the "super user on"
function from UNIX that leaves the process elevated until the user
explicitly turns it off, admin approval mode enables administrator
privileges for just the task that was approved, automatically returning
the user to standard user when the task is completed," explained Jim
Allchin, Microsoft Co-President, Platform and Services Division.




Well, in this case, you're just *user* joe, and you're not user/admin joe..

I suggest you go back and read the two links up above there about the
example in taking ownership, because joe is part of the Administrators
group. But just plain old *user* joe is not an administrator.

You know, you're really doing yourself a disservice by turning UAC off,
because you are on the Internet wide open to attack, just like you were
on XP, as that O/S gets hammered by malware with a user running with
full admin rights on the Internet.

I read the taking ownership link and now understand it.

So checking C:\Users\joe, owner was system. I change to joe.

Checked C:\Users\joe\Documents\bsfolder and it already has joe as
owner.

Tried again and still same issue.

Let's back up here though. Why would Vista restrict the user joe from
doing ANYTHING under C:\Users\joe? Seems like I should be able to move
folders under here to my heart's content!

thanks.
c

 

[Mr. Arnold]

Where is Tonto?
You are my half brother, Mr. Arnold
Where is our cousin, Chicken Little, and Mad Dog?
You are also a F***wit; the other side of the Family.

 

[Jimmy Brush]

Hello,

Actually, with UAC disabled, administrator accounts behave exactly like THE
"administrator" account.

The "administrator" account is not something magical that has more power
than every other administrator

Normal, every-day admin accounts can do everything the administrator account
does, the program that is doing the doing just needs to be elevated first
(if UAC is enabled).

- JB

 

[Jimmy Brush]

Hello,

What permissions are set on the bsfolder and joe folder?

- JB

 

[Toad]

If I understand the article correctly, in Vista, an administrator
isn't really an administrator. If I'm logged on as John and John is
in local Administrators group, I'd still be prompted if I want to
install software, move folders/files. Is that correct?

If that's correct, how does Vista restricted user (is it still called
a restricted user account?) differ from Administrator? I suppose if
I'm logged on as a restricted user, I can still install software if I
enter Administrator logon credentials when prompted, right?

Btw, I'm an XP user. I've never used Vista. That's why I asked.

Ok, in Vista being an administrator means that you can esculate your
rights to that of an administrator that you're used to in XP by just
clicking OK on the UAC prompt (or entering your password if enabled).
If you are a limited user in Vista you can still do this but it
requires that you an enter the password of an(other) administrator user.

Now, for the flaw in UAC - if you know an administrator password, then
why would you not just log on as that user to begin with ? (thinking in
terms of a shared computer). One should never know any password besides
their own.

As such, in both XP and Vista I run as a limited user. But my user is
in a special group called "superuser" that means that I can escalate my
rights to that of administrator by entering MY PASSWORD (more like sudo
in Linux). This is done via a service that I wrote for Vista and XP. So
although I have an admin user set up I never need to use it or its
password...

Toad



--

 

[Mr. Arnold]

Ok, in Vista being an administrator means that you can esculate your
rights to that of an administrator that you're used to in XP by just
clicking OK on the UAC prompt (or entering your password if enabled).
If you are a limited user in Vista you can still do this but it
requires that you an enter the password of an(other) administrator user.

Yeah that's correct.

Now, for the flaw in UAC - if you know an administrator password, then
why would you not just log on as that user to begin with ? (thinking in
terms of a shared computer). One should never know any password besides
their own.

The same thing is happening on Linux as a non-user admin that must give
root-admin user-id and psw to escalate rights to root admin.

And besides, what is to stop the user-admin from not giving out the psw
and doing a stand over the shoulder and type in the psw on the behalf of
the standard user. A standard user if solutions are running on the
machine addressing a standard user rights where no privileged escalation
is required, then there should not be any situations that require
escalation to use admin approval rights for the standard user.

Solutions that are Vista compliant do just that run with standard user
rights.

As such, in both XP and Vista I run as a limited user. But my user is
in a special group called "superuser" that means that I can escalate my
rights to that of administrator by entering MY PASSWORD (more like sudo
in Linux). This is done via a service that I wrote for Vista and XP. So
although I have an admin user set up I never need to use it or its
password...

The average job-blow home user is not writing Windows NT services.

 

[c]

Hello,

What permissions are set on the bsfolder and joe folder?

- JB

Jimmy, thanks for asking the question.

Both were read only, I unchecked the button and it now works. Sweet
jesus.

c

 

[John]

Ok, in Vista being an administrator means that you can esculate your
rights to that of an administrator that you're used to in XP by just
clicking OK on the UAC prompt (or entering your password if enabled).
If you are a limited user in Vista you can still do this but it
requires that you an enter the password of an(other) administrator user.

That's exactly what I thought. The first link in Mr. Arnold's reply helps.
http://technet.microsoft.com/en-us/library/cc709691.aspx

To me, UAC feature in Vista sounds like a great idea. I don't understand why
people complain about it so much and want it disabled. Although UAC sounds
great, I'm not sure if I'm going to like it or hate it when I start using
Vista (or Windows 7).