problem with Permissions- can anyone please help

[robinb]

I have an admin account and a limted user account on Vista home premium
The computer is on a network using the same name in Workgroups. Sharing is
enabled on the two other computers running windows xp pro and in the Main
User Folder, 3 folders are set up to share including the "my documents
folder for each user on those computers. Also on the C: drive- I set two
folders called "Robinjunk" and "Downloads" to share

On the xp computers running xp pro- they see each other and can share the
User Folder and the two folders on c" drive with no problems.

When on the admin account on the Vista one, I can access the other
computers on these folders but the User folder. Here it tells me
permission is denied.

If i go on the limted account- here it asks for the username and password on
the other computers and once given, I can access the User Folder and the
folders that are shared on the networked computers.

Now if I make another account and give it admin access- try going across the
network- it goes into the User folder and all three shared folders accross
the network.

Why won't it give access on the main admin account to the User Folder on the
other computers accross the network?

I am totally baffled and I must be missing something.

Any ideas?

 

[alexB]

It is a little bit thick to go into but perhaps this might be of help.

It is my understanding that you should never sign in as an administrator. If
you meant that by using the word "admin" then it might be a problem. All
sign ins must be made by ordinary users, HOWEVER.

Some users who you consider worthy get a chance to elevate themselves to act
as administrators when the circumstances warrant. You do it by including
those users in the Group Administrators. Note the plural in here.

Then you go around and give those users permissions to see those folders in
Vista. If there are quite a few of them (users), never mind. Create a
Groups" "My Special Administrators," include those users you consider worthy
into that group and go around giving this group the right to access the
folders with the rights you consider necessary (full control or partial).
However either all of them individually or in aggregate as a group must be
members of the group "Administrators."

 

[robinb]

no, you do not understand the question.
I only have two user accounts-
one has administrator privliges one has limited
the one on adminstrator privliges cannot get into the User folder on the xp
pro networked computer
If I make another User account with Administrative Privliges that User can
get in.
Why can't the first User account that has Adminstrative Privliges get in?

the limited account was tested and the only way they can get in is by
putting in the username and password to the other xp computer. But he gets
in,,, that is my point.

On the User account that has administrator privileges- she cannot get in.
She can get into the two files that are on the c drive that are being shared
but not the Administrator User Account that is set to share on the xp pro
computers.

robin

 

[alexB]

Sorry Robin, it may be blabbering but perhaps every bit helps.

I think the problem may be that the XP is not Vista. Could it be possible
that XP is used to the fact that there might be only ONE administrator
across the network? Actually I have no idea since XP is out of my mind
already but it would be interesting to know if this is the case.


Robin, this I just cannot understand:

On the User account that has administrator privileges- she cannot get in.
She can get into the two files that are on the c drive that are being
shared but not the Administrator User Account that is set to share on the
xp pro computers.

I think there are two mutually exclusive statements up there. You are saying
that "she cannot get in." (the first line) and then: "She can get into the
two files that are on the c drive that are being shared" but .. "but not the
Administrator User Account ?" what does that mean?

You should draw a clear diagram.

(1) Account A - administrator privileges in Vista (full rights). Has been
defined also in XP under the same name, etc. etc. etc.
(2) Account B - adm, limited. In what sense limited, etc, etc, etc.

 

[robin]

I do not think so because there are 3 administrative users on the 3 xp pros
that are networked. and each computer can get to the one designated
Administrative User that is being shared.
In Vista the 2nd user account that i set up with administrative authority
"sees" and can get into that particular user.
The limited account with putting in a username and password (the one on each
xp computer) sees it too.

The 1st user account that has administrative authority gets into the xp pro
machines but cannot get into the designated Administrative User account. If
it was on the xp side it would not let any of the Vista user accounts in but
it is letting all of them in, just not the main user account which makes no
sense because the names are not even close to each other and it is letting
it into the two folders that are on the c drive.

This is what is so frustating and I cannot figure out what is wrong.

robin

robin

 

[alexB]

The 1st user account that has administrative authority gets into the xp pro

machines but cannot get into the designated Administrative User account.

OK, you are not really listening. I suggested that you map a diagram of your
accounts in a clear algorithmic type of way to preempt any confusion. You
have not done it. Let me try to make some assumptions for you based on the
above statement as I see it.

You are saying that XP users are fine as far as getting into Vista. It means
that they can access any Vista Folder, right? You are not saying that they
can actually control the Vista accounts, even admin accounts. You are not
saying it, I presume. If you really want an XP user (and administrator on XP
machine) to make changes in Vista as a Vista administrator, it is a
different aspect.

From what you seem to be saying in the quoted statement above I deduce that
you want a Vista user with limited admin account to control another Vista
user's full admin account in such a way as to make changes in the account
set up, etc.

Does it sound right? This may not be possible.

FYI, this forum is full of know-it-all trolls who badmouth people trying to
solve other people's problems in good faith. They are near criminal
characters and I was waiting for them to jump in and say: "I do know what
you problem is, Robin!" So far we haven't heard that.

Anyhow, I will keep trying to help you but keep it in mind that my network
experience is limited and I need a much better description as to what your
actual account set up it.

 

[Robinb]

You are saying that XP users are fine as far as getting into Vista. It
means that they can access any Vista Folder, right? You are not saying
that they can actually control the Vista accounts, even admin accounts.
You are not saying it, I presume. If you really want an XP user (and
administrator on XP machine) to make changes in Vista as a Vista
administrator, it is a different aspect.
correct


From what you seem to be saying in the quoted statement above I deduce
that you want a Vista user with limited admin account to control another
Vista user's full admin account in such a way as to make changes in the
account set up, etc.

no, I actually do not want the lmited account user to network into the xp
pro machines, I was using that only as a test to try to figure out why the
Administrative user cannot get into the Administrative User on the xp pro
machine filders.

Does it sound right? This may not be possible.


FYI, this forum is full of know-it-all trolls who badmouth people trying
to solve other people's problems in good faith. They are near criminal
characters and I was waiting for them to jump in and say: "I do know what
you problem is, Robin!" So far we haven't heard that.

I understand, I give help on the microsoft security and Windows defender ng
and I know what know it all trolls are all about. I know a lot about
computers, I teach Windows Vista and XP, I fix them, I build them and I sell
them. but for the life of me I am stumped on this one and was looking to
see if anyone had an idea why this is happening

Anyhow, I will keep trying to help you but keep it in mind that my network
experience is limited and I need a much better description as to what your

Maybe this will make it easier to understand:

1. 1- computer- running Vista Home Premium- workgroup name "dogs" (dogs is
only an example- not the real name)
"Lori" (just using that name as an example) is on as Adminstrator- password
protected

2. 2 XP Pro computers networked together using the workgroup "dogs"
(again dogs is only an example)
1- Michael is the Administrator User on xp pro machine. 1- John is the
Administratior user on the other xp pro

Michael and John can "see" each other and can access all files that are
shared- On both their Administrative My document folder, etc.

Michael and John can access all of Lori's files on the Vista Machine

Lori cannot access Michael and John's folders- comes up Permisson denied
Lori can access two folders on the c drive that are also shared on the 2 xp
computers- one called Goodstuff- one called Downloads.

Now- I make another Administrator user on Vista and call that Robin (both
are password protected)
Logg off from Lori and go into Robin

Robin can see and use Michael and John's Administrative Folder with no
problems.

So my question is why can't Lori? same adminstrative access as Robin

is this better?

robin

 

[alexB]

Robin, I think you clarified it very nicely. I cannot do it at this moment
but perhaps someone else will pitch in. There are MVPs, I am no one of them.

I will definitely try to take another look at this nice configuration later.
I just need to focus on it and to do a bit of brainstorming, for about 5
min. and try to help you. I am learning myself.

BTW, I was not trying to seek support or endorsement on trolls. It was a
message to them. They got it. When it comes to real problems they are
nowhere to be seen.All they want is to sell some of their wares for the most
part.

 

[alexB]

Lori cannot access Michael and John's folders- comes up Permisson denied

Lori can access two folders on the c drive that are also shared on the 2 xp
computers- one called Goodstuff- one called Downloads.
Now- I make another Administrator user on Vista and call that Robin (both
are password protected)
Logg off from Lori and go into Robin
Robin can see and use Michael and John's Administrative Folder with no
problems.
So my question is why can't Lori? same adminstrative access as Robin
is this better?

Definitely, much, much better.

It looks like you have TWO admin accounts on Vista with the SAME level of
privilege and the first one cannot use some of the XP folders but the second
one can. Right?

If this is true, then why don't you do the following: (disclaimer: I am not
sure you will be able to understand why this is happening but perhaps you
will solve the problem "mindlessly" and forget about it).

Go to Robin in Vista, click on the problematic folders in XP,
Properties>>Security Tab>> Edit>> Add>> add Lori to the list of
users/groups. Give Lori permissions you want (full rights or whatnot on the
way back>> Click Apply and forget about the problem

Now the happy ending may not be in the offing, actually. We do not have a
clear understanding why it is happening but this may as well work. It is
what I would call "workaround."Would you try it?

If I still do not understand you situation correctly, take another stab.

Come back and report, especially if the problem is still there.

 

[robinb]

It looks like you have TWO admin accounts on Vista with the SAME level of
privilege and the first one cannot use some of the XP folders but the
second one can. Right?
Right

If this is true, then why don't you do the following: (disclaimer: I am
not sure you will be able to understand why this is happening but perhaps
you will solve the problem "mindlessly" and forget about it).

Go to Robin in Vista, click on the problematic folders in XP,
Properties>>Security Tab>> Edit>> Add>> add Lori to the list of
users/groups. Give Lori permissions you want (full rights or whatnot on
the way back>> Click Apply and forget about the problem

This way i would have to add Robin as a Admin user on XP- I know that is the
work around but I want more to figure out why on the vista why one User that
can get onto the XP Admin user accounts and why one cannot.

I tried going through your way and it will not work.

It is very strange that one can and one cannot. Neither one of them have
permisson now in xp- that folder is shared across the network for
administrator use only

robin

 

[AlexB]

Robin,

I want to let you know that I read your post quite late at night. Will try
to think about it tomorrow.

There is a point I think I noticed that may be of further exploration
however, it seems me at the dead end at this point.

I will take a fresh look at this problem of yours tomorrow morning.

 

[robinb]

yes i can do that, I know I can get around it
but
i wanted to understand why Lori can't access it and Robin can
especially since they are set up exactly the same way.
but thanks for your input anyway
robin