permissions

  • Thread starter Thread starter rac8006
  • Start date Start date
R

rac8006

When is the administrator not the administrator? Shouldn't the administrator
be able to access everything on the system? Why can't the administrator
access the c:/windows/system32 folder with a vbscript program?
I'm talking about the administrator login not a user weith administrator
rights.

Thanks
 
rac8006 said:
When is the administrator not the administrator? Shouldn't the
administrator
be able to access everything on the system? Why can't the administrator
access the c:/windows/system32 folder with a vbscript program?
I'm talking about the administrator login not a user weith administrator
rights.
Click to expand...

Even you as an Admin of the computer is locked down with Standard user only
rights. You even as Admin on the computer must have your privileges
escalated with Run As Administrator on Vista, look it up use Google. Or a
program must run with Run As Administrator.
 
So let me get thisd straight. when I unlock the administrator login so that
I can login as the administrator I still have to run programs as
administrator? Is that what you are saying? I've tried using run as
administrator when logged in as a user that has administrator privledges. I
still get the permission denied.
 
rac8006 said:
So let me get thisd straight. when I unlock the administrator login so
that
I can login as the administrator I still have to run programs as
administrator?
Click to expand...

Yes, in some cases, even you with Admin rights have to use Run as
Administrator.

Is that what you are saying? I've tried using run as
administrator when logged in as a user that has administrator privledges.
I
still get the permission denied.
Click to expand...

http://paulstamatiou.com/2007/02/09/how-to-quickie-vista-permissions

Or it could be that an account like the Everyone group account can supersede
the even a user admin rights on a file or directory. In other words, the
Admin or other user accounts can have full permissions, but something like
the Everyone account can have lessor rights and supersede all rights.

I have it happen from time to time for whatever reasons that the
Authenticated user group all of a sudden on Vista has lessor rights than my
Admin rights, and my rights are over ridden by Authenticated user, and I
have to go change it back.

I removed Everyone off of the system deleted the user account and use
Authenticated user.
 
So even after enabling the builtin administrator account and logging in as
administrator you have to use the run as administrator?

So what do you do when the run as administrator still gets the permission
denied?
 
rac8006 said:
So even after enabling the builtin administrator account and logging in as
administrator you have to use the run as administrator?
Click to expand...

Did you not read the first link that was provided?
So what do you do when the run as administrator still gets the permission
denied?
Click to expand...

Did you not read the second link that was provided?

Did you not understand and started looking at user accounts to see what
permissions are on whatever it is you're trying to do based on the
information provided and possible user account supercedence on permissions?
 
Yes I read the second link. I guess I'm to stupid to understand why the
builtin administrator account when enabled and logged in still needs to run
as administrator. Since Admin Approval Mode does not apply to the builtin
administrator account.
 
rac8006 said:
Yes I read the second link. I guess I'm to stupid to understand why the
builtin administrator account when enabled and logged in still needs to
run
as administrator. Since Admin Approval Mode does not apply to the builtin
administrator account.
Click to expand...

You don't know what you are talking about.

--------------------

The first of these policies controls the Admin Approval Mode for the
built-in administrators account. When enabled, the Admin Approval mode is on
for the built-in administrator account causes Windows prompts the
administrators for any operations requiring an elevation in privilege. The
prompt gives the administrator the choice to Permit or Deny the request for
elevation. When disabled, Admin Approval mode is off. The built-in
administrator account runs all applications using full administrative
privileges and does not prompt for elevation.


http://blogs.technet.com/askds/arch...policy-settings-and-user-account-control.aspx


I don't know what you're trying to do, but maybe, you need to take ownership
of it.
 
Note:
To perform the following procedure, you must be logged into a client
computer as a member of the local administrators group. You cannot be logged
in with the computer (or built-in) administrator account because Admin
Approval Mode does not apply to this account. (The built-in administrator
account is disabled on new installations of Windows Vista.)
So when I read this note and it states that the Admin Approval Mode does
not apply to the builtin administrator account I don't know what I'm talking
about? That note is from the link you provided.
What I'm trying to do is very simple. The following script when run using
c:\windows gets a permission denied on the system32 folder. This happens
whether I run it using run as administrator or run it form the builtin
administrator account. When run without run as administrator severl folders
get permission denied. When run as administrator only system32 gets
permission denied.

Const ForWriting = 1
Dim arrHeaders(48),fso,ts,file2
Int sz
Set fso = CreateObject("Scripting.FileSystemObject")
Sub ShowFolderSize(filespec)
On Error Resume Next
Dim fs, f, s
Set fs = CreateObject("Scripting.FileSystemObject")
Set f = fs.GetFolder(filespec)
n = int(f.size)
If Err.Number <> 0 Then
MsgBox Err.Number & ": " & Err.Description & filespec
Err.Clear
End If
sz = sz + n
n = FormatNumber(n,False,False,-1)
s = UCase(f.Name) & Space(30 - Len(f.Name)) & "uses " & Space(18-Len(n))
& n & " bytes."
str = str & s & vbcrlf
End Sub
Function Search(Dir)
Set objShell = CreateObject("Shell.Application")
Set objfolder = objShell.Namespace(Dir)
For Each strFileName in objFolder.Items
If fso.FolderExists(Dir & "\" & strFileName) = True Then
ShowFolderSize(Dir & "\" & strFileName)
End If
next
str = str & vbcrlf
End Function
set file2 = fso.CreateTextFile("C:\temp\filelst.txt", ForWriting, True)
str = ""
str1 = InputBox("Enter directory?")
Search(str1)
sz = FormatNumber(sz,False,False,-1)
str = str & vbcrlf & "Total bytes " & sz
wscript.Echo str
file2.write(str)
file2.close
 
<snipped>

Note: You're sitting up in the NG trying to prove to me how much you know,
and in the meantime, you cannot even do what you're trying to do.

I suggest that you get out from behind the wheel of Vista, because you can't
drive. And it doesn't matter what account you are using. <g>
 
I have not tried to prove anything to you. I'm just trying to find out why
something
is not working.

Since the only thing you can do is call me stupid I would rather that you
don't respond to any of my questions.
I won't step down to your level and call you names.
GOODBYE
 
rac8006 said:
I have not tried to prove anything to you. I'm just trying to find out why
something
is not working.

Since the only thing you can do is call me stupid I would rather that you
don't respond to any of my questions.
I won't step down to your level and call you names.
GOODBYE
Click to expand...

Oh, I am calling you names? You called your own self *stupid*. I never
called you anything.
However, I agree with your assessment of yourself, and I am sure you have
called yourself *stupid* before.
 
I have had the same runaround from the so-called experts. The only diffence
was mine was sharing files etc between computers. The only way I can share
anything is with the Public Folder and if you are trying to do a lot of work
it is impractical.
It seems to me that the dministrators of large systems dont want anyone to
understand how it completely works. Keep the general owners of our machines
in the dark.
 
What I've found is that even the administrator can get a permission denied
error. I found that my problem was that even when running my vbscript with
run as administrator it would get the permission denied. So I used procmon
to trace what the script was doing and found that it was getting the
permission denied error on the c:\windows\system32\logfiles\wmi\rtbackup.
When I tried to explore this folder while logged in as the real administrator
it asked me if I wanted to continue. Once I said yes it would allow me to
explore it without adking me again. After that the script would also work
while logged in as the real administrator. The script would still fail when
run from a user with administrator priveledges and using run as administrator.
 
Back
Top