new administrator profile

[Guest]

Win2KPro OS

A new administrator profile was created, how or why I don't know. The old
profile is still under documents & settings, but is unusable. In that, I
mean, you cannot run under that profile or change it in any way. The new
administrator profile does not allow any alteration whatsoever to itself. It
does not allow new programs to be installed either. Simply put, the new
administrator profile gives you no administrator privileges at all. The
registry can not be changed or updated. When under my normal profile, that of
a power user, I have no administrative priviledges. Again, cannot install
programs or do anything to alter the system.

Can anyone be of service in this matter?

 

[Pegasus \(MVP\)]

Win2KPro OS

A new administrator profile was created, how or why I don't know. The old
profile is still under documents & settings, but is unusable. In that, I
mean, you cannot run under that profile or change it in any way. The new
administrator profile does not allow any alteration whatsoever to itself. It
does not allow new programs to be installed either. Simply put, the new
administrator profile gives you no administrator privileges at all. The
registry can not be changed or updated. When under my normal profile, that of
a power user, I have no administrative priviledges. Again, cannot install
programs or do anything to alter the system.

Can anyone be of service in this matter?

There appears to be some misunderstanding here. A account "profile"
is a folder that holds a number of files (e.g. My Documents) and settings
(e.g. for Outlook or Internet Explorer). It does NOT give you any
privileges - these are assigned based on your group membership.

In your post you keep talking about profile folders but you don't say
anything about the important questions:
- What account do you use when logging on?
- What groups does it belong to?

You can answer the second question by examining the account
profile in detail, or by doing this:
- Click Start / Run / cmd {OK}
- Type this command:
net user "%UserName%" {Enter}

 

[Guest]

My apologies for not being specific enough. When I refer to a profile I mean
the group of folders under Documents & Settings. The origional Administrator
profile, or group of folders would be "where I was" when I logged on as
Administrator, the power user group of folders would be where I'd be if I
logged on as "Dad". There are two other sets of folders for my children, who
seldom use this machine, as well as the All Users set. Under the power user
(Dad) set I had many freedoms to allow for normal work. If I logged on as
Administrator, I was free to do anything. Now there is an additional profile,
set of folders called Administrator-Dad. This is the only "Administrator"
area I can now log onto & it is totally restricted. I can not even change the
desktop, or the mouse click from two clicks to one. Nothing is available.
Within the power user area (Dad), I can perform normal work in everyday
applications such as Outlook, Word, etc. However, if I try to install a
program, I cannot do it, even using "Run As". The Registry is unalterable.
Each group membership reads as you would expect, Administrator having full
rights, Power Users having semi-limited rights, &, of course, normal Users
having very limited rights. The restrictions referred to extend seemingly to
all areas of the computer, including the Control Panel. Most Administrative
Tools are unavailable in Control Panel even when logged in as Administrator.

I refer to the group of folders only because it more clearly illustrates
what one can log on as. But, as I've mentioned, each group of folders is
properly identified under Users & Passwords & shows the proper rights for
that user. Just that now there is another Administrator showing the proper
rights, just not being able to exercise them.

I hope I have described this more clearly. Thank you for your consideration.

 

[Pegasus \(MVP\)]

See below.

My apologies for not being specific enough. When I refer to a profile I mean
the group of folders under Documents & Settings.

I meant the same thing. You can, in fact, delete any of these folders
and none of the access permissions will change (although you will
lose some files . . .).

The origional Administrator
profile, or group of folders would be "where I was" when I logged on as
Administrator, the power user group of folders would be where I'd be if I
logged on as "Dad". There are two other sets of folders for my children, who
seldom use this machine, as well as the All Users set. Under the power user
(Dad) set I had many freedoms to allow for normal work. If I logged on as
Administrator, I was free to do anything. Now there is an additional profile,
set of folders called Administrator-Dad. This is the only "Administrator"
area I can now log onto & it is totally restricted. I can not even change the
desktop, or the mouse click from two clicks to one. Nothing is available.

This pretty much what I expected. Even though "Administrator-Dad" has
the word "Administrator" in it, he is not an Administrator. Just because
I call myself President of the USA does not mean there is a place for
me in the White House. Run the command I gave you in my first reply
and see for yourself!

Within the power user area (Dad), I can perform normal work in everyday
applications such as Outlook, Word, etc. However, if I try to install a
program, I cannot do it, even using "Run As". The Registry is unalterable.
Each group membership reads as you would expect, Administrator having full
rights, Power Users having semi-limited rights, &, of course, normal Users
having very limited rights. The restrictions referred to extend seemingly to
all areas of the computer, including the Control Panel. Most Administrative
Tools are unavailable in Control Panel even when logged in as Administrator.

I refer to the group of folders only because it more clearly illustrates
what one can log on as. But, as I've mentioned, each group of folders is
properly identified under Users & Passwords & shows the proper rights for
that user. Just that now there is another Administrator showing the proper
rights, just not being able to exercise them.

I hope I have described this more clearly. Thank you for your

consideration.

You must log on as Administrator, then grant the required rights to
"Administrator-Dad". Pressing Ctrl+Alt+Del twice at the logon screen
gives you an opportunity to enter "Administrator" as a logon name, with
the appropriate password.

 

[Guest]

Yes, my first thought was that, obviosly, Administrator-Dad was not the
actual Administrator. However, it is, with full rights. Checked command/net
user and checked Users & Passwords. Checked to make certain the definition of
Administrator had not been changed, it's fine.

I also considered the Administrator files had become corrupt & a new set
created. However, as I've said, the new Administrator-Dad has Administrator
rights, but is not allowed to use them, being President & actually being
President, but Congress grants you no rights.

I will try creating another Administrator profile, as you've suggested.
Thanks again.

 

[Guest]

I misunderstood, thought that Ctrl+Alt+Delete at logon would create a new
Administrator profile. Apparantly not. Simply allows me to logon to the
existing Administrator profile, which has all of the rights of a Guest
account, even though Command, Net User shows it as the Administrator account
& Users & Passwords defines Administrator as having full rights.

So we're back where I started.

In the event referring to folders under Documents & Settings is confusing
the issue, I will review without that.

Logging on as Administrator proves to be the Administrator account (via
Command, Net User). Logging on as Dad (my normal work area) proves to be a
Power User account (via Command, Net User). In Users & Passwords the
definition of Administration is full rights, the definition of Power User is
semi-limited rights. All seems perfectly normal. Except the Administrator has
absolutely no rights, like a Guest account & the Power User has very limited
rights, like a normal User.

The conclusion I had arrived at was to re-install, clean, to a new folder.
However, I was trying to avoid spending a day or more re-installing
everything. I am a user for more than 30 years (the days of build your own
kit & write a program to get it to do anything). I have taught & consulted
computers, computing, applications, business scenarios, etc. A novice I'm
not. However, I haven't done very much "under the hood" in recent years, so
the technology has gotten ahead of me.

Again, thank you very much for any help you can offer.
Arnold

 

[Pegasus \(MVP\)]

It seems there is an ongoing thread of misinformation in
this discussion. Let's state a few basic facts:
- Profile folders are used to store settings and files.
They are NOT related in any way to user rights.
- Pressing Ctrl+Alt+Del will NOT create a new account.
- The administrator is a member of the "administrators" group,
NOT of the the Guest group.
- You can rename the administrator account but you CANNOT
delete it.
- You cannot remove the administrator from the administrator's
group.
If you wish to continue with this discussion then I suggest you do this:
1. Report clearly what you have on your machine, by doing this:
- Click Start / Run / cmd {OK}
- Type these commands:
net user > c:\test.txt{enter}
net user administrator >> c:\test.txt{enter}
notepad c:\test.txt{enter}
- Paste the text into your reply.
2. Restate the nature of your problem (if there is one).

 

[Guest]

I again apologize. I know this is confusing, therefore we'll start with a
clean slate.

User accounts for \\DAD
-------------------------------------------------------------------------------
Administrator ASPNET Bryan
Dad Guest IUSR_DAD
IWAM_DAD Loren
The command completed successfully.

Above is a copy of your request for the net user accounts.

Administrator has full Administrator rights listed, but actually has
absolutely no rights.
Dad has Power User rights listed, but the actual rights are extremely limited.

Does this more clearly explain the problem?
Again, thank you very much for your assistance,
Arnold

 

[Pegasus \(MVP\)]

I again apologize. I know this is confusing, therefore we'll start with a
clean slate.

User accounts for \\DAD
-------------------------------------------------------------------------- -----
Administrator ASPNET Bryan
Dad Guest IUSR_DAD
IWAM_DAD Loren
The command completed successfully.

Above is a copy of your request for the net user accounts.

Administrator has full Administrator rights listed, but actually has
absolutely no rights.
Dad has Power User rights listed, but the actual rights are extremely limited.

Does this more clearly explain the problem?
Again, thank you very much for your assistance,
Arnold

I recommended that you run these commands from
a Command Prompt:
net user > c:\test.txt{enter}
net user administrator >> c:\test.txt{enter}
notepad c:\test.txt{enter}

What's happened to the second line? Please try again!

 

[Guest]

Here is a copy of the administrator account.

C:\>net user administrator User name
Full Name
Comment
ain
User's comment Country code Account active Account expires
Password last set Password expires Password changeable Password required
User may change password
Workstations allowed Logon script
User profile
Home directory
Last logon
Logon hours allowed
Administrator Arnold V. Klingler
Built-in account for administering the computer/
000 <System Default>
Yes
Never
4/25/2006 3:35 PM Never
4/25/2006 3:35 I'M
Yes
Yes

All
10/26/2006 9:38 PM

All
Local Group Memberships *Administrators
Global Group Memberships *None
The command completed successfully.

Sorry it took so long to get this, whenever I tried sending this to Notepad,
access was denied. I had to "capture" it & OCR it.

 

[Guest]

The second line consists of dashes.

I recommended that you run these commands from
a Command Prompt:
net user > c:\test.txt{enter}
net user administrator >> c:\test.txt{enter}
notepad c:\test.txt{enter}

What's happened to the second line? Please try again!

 

[Pegasus \(MVP\)]

Impossible. I need to know the output from this command:

net user administrator

 

[Pegasus \(MVP\)]

Here is a copy of the administrator account.

C:\>net user administrator User name
Full Name
Comment
ain
User's comment Country code Account active Account expires
Password last set Password expires Password changeable Password required
User may change password
Workstations allowed Logon script
User profile
Home directory
Last logon
Logon hours allowed
Administrator Arnold V. Klingler
Built-in account for administering the computer/
000 <System Default>
Yes
Never
4/25/2006 3:35 PM Never
4/25/2006 3:35 I'M
Yes
Yes

All
10/26/2006 9:38 PM

All
Local Group Memberships *Administrators
Global Group Memberships *None
The command completed successfully.

Sorry it took so long to get this, whenever I tried sending this to Notepad,
access was denied. I had to "capture" it & OCR it.

We're slowly getting there . . .

It seems that quite a few things are wrong on your machine.
There is no reason, for example, why you should not be able to
send output to C:\test.txt. I suspect that the security settings
on your machine are badly disturbed.

Resolving this sort of problem by means of an exchange of
newsgroup notes is extremely difficult and can easily span 30
or 40 messages. I'm afraid I don't have the time to embark on
this type of exercise. Here are the options I see for you:

a) Live with the problem.
b) Ask a Windows-savvy friend to assist you.
c) Wait until another respondents contributes to the discussion.
e) Open up your machine so that I can assist you directly.

If you wish to know more about option e) then please
post your EMail address to pegasus_fnlATyahooDOTcom.

I will now stop monitoring this thread.

 

[Guest]

Sorry, last post did not take entire copy. Disregard. Here is the entire copy.

C:\>net user administrator
User name Administrator
Full Name Arnold V. Klingler
Comment Built-in account for administering the
computer/domain
User's comment
Country code 000 <System Default>
Account active Yes
Account expires Never

Password last set 4/25/2006 3:35 PM
Password expires Never
Password changeable 4/25/2006 3:35 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 10/26/2006 9:38 PM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group Memberships *None
The command completed successfully.