No Admin Access

[Guest]

Hi All,

I have some problems with one machine (Windows XP Service pack 2).
It is a workstation connected to our domain server.

Even if I login as local admin or domain admin I not able to get admin
rights in that machine. I can't even change date. All users are getting
limited access in that particular machine.

Please help me on this.

Thank you

 

[Brian A.]

Hi All,

I have some problems with one machine (Windows XP Service pack 2).
It is a workstation connected to our domain server.

Even if I login as local admin or domain admin I not able to get admin
rights in that machine. I can't even change date. All users are getting
limited access in that particular machine.

Please help me on this.

Thank you

How to set, view, change, or remove file and folder permissions in Windows XP
(Pro/Home)
http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

HOW TO: Take Ownership of a File or Folder in Windows XP (Pro/Home)
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421

How to set, view, change, or remove special permissions for files and folders in
Windows XP -
http://support.microsoft.com/default.aspx?scid=kb;en-us;308419

How to configure file sharing in Windows XP (Pro/Home)
http://support.microsoft.com/default.aspx?scid=kb;en-us;304040

How to disable Simple Sharing and set permissions on a shared folder in Windows XP
(Pro only)
http://support.microsoft.com/?kbid=307874

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375

 

[Guest]

Thanks for the usefull links.
But all these links are not going to solve this problem.
It is nothing to do with
1. Folder permissions
2. Take Ownership
3. Set, view, change, or remove special permissions for files and folders
4. Configure file sharing in Windows XP (Pro/Home)

Here my issue is when I try to login as an admin user ( Local admin user /
Domain Admin user) I am not able to get any admin rights (No installation
rights, Unable to change date and time, Unable to start / stop some
services, No disk magmt access , No event viewer security access and no
Device manager access.

Please help me on this.

 

[Malke]

Thanks for the usefull links.
But all these links are not going to solve this problem.
It is nothing to do with
1. Folder permissions
2. Take Ownership
3. Set, view, change, or remove special permissions for files and folders
4. Configure file sharing in Windows XP (Pro/Home)

Here my issue is when I try to login as an admin user ( Local admin user /
Domain Admin user) I am not able to get any admin rights (No installation
rights, Unable to change date and time, Unable to start / stop some
services, No disk magmt access , No event viewer security access and no
Device manager access.

Virus/malware infection? What changed on the machine between the time
things worked and the time they didn't? Quick solution - apply your
backup image and move on. If you don't have a backup image, then flatten
the system and manually clean-install Windows.


Malke

 

[John Wunderlich]

I have some problems with one machine (Windows XP Service pack
2). It is a workstation connected to our domain server.

Even if I login as local admin or domain admin I not able to get
admin rights in that machine. I can't even change date. All users
are getting limited access in that particular machine.

Please help me on this.

If you right-click on "Start" and one of the options in the popup
window is "Open All Users", then you have admin rights.

Given that, and assuming you have XP Pro (since you say you're a member
of a domain), the Group Policies can redefine many permissions in such
a way that even an administrator has no power on a machine. Fire up
the Group Policy Editor and check the permissions:

"How To Use the Group Policy Editor to Manage Local Computer Policy in
Windows XP"
<http://support.microsoft.com/kb/307882/en-us>

There are cases where even the Group Policy editor is powerless to
restore permissions. In that case, check out "secedit"

Start->Help and Support-> Search: secedit

Good Luck,
John

 

[Azagtoth]

Boot into the recovery console.

Use cacls command

I did this once.

You applied group policy to all uses, or at least to the admin.

Most commong cause.

The command is something like

cacls *.* /G everyone:F

or something.

That won't however remove group policy from applying if it is the
issue.

If you have another Domain server which is a member, use that to lighten
policy.

If you can open MMC, use that to remove the GP.

Good luck

 

[Guest]

Hi Malke,

Thanks for your help.

But this particular machine there is no way to get virus infection.
No floppy drive enabled.
No CD drive enabled.
USB port is disabled.
E-mail is scaned with AV and there is nothing reported. ( Another copy of
e-mail is stored in server)

I have no idea about when it started as my user got only limited user power.
When I tried to update patches only I came to know about this issue. So I am
a bit worried of restore.
Any other solution other than restore / REinstall

 

[Guest]

Hi John,

Thanks a lot for your reply.

I am not able to explore all users. ( Even with domain Administrator login)
There is no group policy applied to this computer.

 

[Nightowl]

I am not able to explore all users. ( Even with domain Administrator login)
There is no group policy applied to this computer.

Hi Dileep

Are you able to log in to the built-in Administrator account on that
machine and examine the properties of your local admin account?

 

[Guest]

Hi Nightowl,

Yes I tried to login as local built in administrator, but there is no change
in permissions. It will tell the same message access denied.

Thanks

 

[Guest]

Hi,

I am not able to use this command unders recovery console.

I tried the same with local administrator login and is telling me access
denied.

Thanks

 

[John Wunderlich]

Hi,

I am not able to use this command unders recovery console.

I tried the same with local administrator login and is telling me
access denied.

Thanks

:

There comes a time where you just have to cut your losses, throw up
your hands, and re-install Windows. It sounds like you're there. Boot
from a Linux CD such as Knoppix -- which does not recognize Windows
permissions -- and offload any data in need of backup; then reinstall
Windows on that computer.

"Knoppix" (Free, Live Linux CD)
<http://www.knopper.net/knoppix/index-en.html>

HTH,
John

 

[Guest]

Thanks for your contributions..

I tried to repair windows but still same issue.
So I formatted and resinstalled Windows.

Regards,