Admin rights on Vista

Posted: 04-21-2007, 06:31 AM
1) Since I haveAdmin rights on both computers in a workgroup, why can't I
access the administrative shares? It prompts me for password, which I
provide and rejects. That used to work in previous versions. If I define my
own administrative shares (with $), it works fine.

2) The same issue applies If I attempt to remotely administer a machine. I
have no rights. What has changed with those rights?

3) Also, why do I have to use RunAs admin if I belong to the admins group?
is there anything more powerful in Vista to bypass this?

Admin rights on Vista


Responses to "Admin rights on Vista"

Frank Saunders, MS-MVP OE/WM
Guest
Posts: n/a
 
Re: Admin rights on Vista
Posted: 04-21-2007, 11:52 AM
"Andreas" <ayiangoullis@hotmail.com> wrote in message
news:915E3816-372E-4781-B7DE-909C8D253D84@microsoft.com...
> 1) Since I haveAdmin rights on both computers in a workgroup, why can't I
> access the administrative shares? It prompts me for password, which I
> provide and rejects. That used to work in previous versions. If I define
> my
> own administrative shares (with $), it works fine.
>
> 2) The same issue applies If I attempt to remotely administer a machine. I
> have no rights. What has changed with those rights?
>
> 3) Also, why do I have to use RunAs admin if I belong to the admins group?
> is there anything more powerful in Vista to bypass this?
>
Are you supplying your password or the default Administrator.?

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com
Answer in newsgroup. Don't expect an answer to email.


Gerry Hickman
Guest
Posts: n/a
 
Re: Admin rights on Vista
Posted: 04-21-2007, 02:30 PM
Hi,

As far as I know, the ability to supply credentials against remote
machines has changed in Vista. In the old days you could have two boxes
in a workgroup, then you could act as an Administrator on Box B by
supplying credentials from Box A like this.

NET USE \\BOXB\C$ /user:BOXB\Administrator *

In Vista, this doesn't work anymore (by default), but apparently there
is a way to change it, but it would need Group Policy, or would need
done on every box.

If you're on a domain, and you are a domain Admin, you can still work
with remote boxes. No one seems to know about "delegated admins for
Active Directory OUs" yet.

The big problem (in the domain context) is that if something goes wrong
with the secure channel and you have thousands of computers to look
after, there's no way you can connect to them and fix them. Even group
policy relies on the domain, so even if you'd hacked the group policy,
you'd suddenly be cut off.

You'd have to decide whether to set the local account capability at
build time or to take the risk that you could end up locked out of all
your computers. In the former case you'd be accused of "weakening
security", in the latter you'd be accused of failing to have a disaster
recovery plan.

Frank Saunders, MS-MVP OE/WM wrote:
> "Andreas" <ayiangoullis@hotmail.com> wrote in message
> news:915E3816-372E-4781-B7DE-909C8D253D84@microsoft.com...
>> 1) Since I haveAdmin rights on both computers in a workgroup, why can't I
>> access the administrative shares? It prompts me for password, which I
>> provide and rejects. That used to work in previous versions. If I
>> define my
>> own administrative shares (with $), it works fine.
>>
>> 2) The same issue applies If I attempt to remotely administer a
>> machine. I
>> have no rights. What has changed with those rights?
>>
>> 3) Also, why do I have to use RunAs admin if I belong to the admins
>> group?
>> is there anything more powerful in Vista to bypass this?
>>
>
> Are you supplying your password or the default Administrator.?
>

--
Gerry Hickman (London UK)
Andreas
Guest
Posts: n/a
 
Re: Admin rights on Vista
Posted: 04-22-2007, 06:03 AM
In the beginning I couldn't supply the administrator password because I
didn't not know it but I also tried to change it and provide that password
for the Admin but it didn't work again. I am providing my user account which
is mapped on both machines with the same credentials. I also tried to use
the username with the destination machine name as prefix and it doesn't
work.

How can I access Admin shares and connect to remote management console
without changing the default policy? There must be a way. However, if
Policies are the only hope then let me know.




"Frank Saunders, MS-MVP OE/WM" <franksaunders@mvps.org> wrote in message
news:4CEB9CA7-09E3-44E0-9E56-8DD432AD014F@microsoft.com...
> "Andreas" <ayiangoullis@hotmail.com> wrote in message
> news:915E3816-372E-4781-B7DE-909C8D253D84@microsoft.com...
>> 1) Since I haveAdmin rights on both computers in a workgroup, why can't I
>> access the administrative shares? It prompts me for password, which I
>> provide and rejects. That used to work in previous versions. If I define
>> my
>> own administrative shares (with $), it works fine.
>>
>> 2) The same issue applies If I attempt to remotely administer a machine.
>> I
>> have no rights. What has changed with those rights?
>>
>> 3) Also, why do I have to use RunAs admin if I belong to the admins
>> group?
>> is there anything more powerful in Vista to bypass this?
>>
>
> Are you supplying your password or the default Administrator.?
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
> Answer in newsgroup. Don't expect an answer to email.
>
>
Michael Price
Guest
Posts: n/a
 
Re: Admin rights on Vista
Posted: 04-23-2007, 09:16 PM
Here is how you fix it.

http://www.jimmah.com/vista/Networking/filtertoken.aspx



"Frank Saunders, MS-MVP OE/WM" <franksaunders@mvps.org> wrote in message
news:4CEB9CA7-09E3-44E0-9E56-8DD432AD014F@microsoft.com...
> "Andreas" <ayiangoullis@hotmail.com> wrote in message
> news:915E3816-372E-4781-B7DE-909C8D253D84@microsoft.com...
>> 1) Since I haveAdmin rights on both computers in a workgroup, why can't I
>> access the administrative shares? It prompts me for password, which I
>> provide and rejects. That used to work in previous versions. If I define
>> my
>> own administrative shares (with $), it works fine.
>>
>> 2) The same issue applies If I attempt to remotely administer a machine.
>> I
>> have no rights. What has changed with those rights?
>>
>> 3) Also, why do I have to use RunAs admin if I belong to the admins
>> group?
>> is there anything more powerful in Vista to bypass this?
>>
>
> Are you supplying your password or the default Administrator.?
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
> Answer in newsgroup. Don't expect an answer to email.
>
>
Michael Price
Guest
Posts: n/a
 
Re: Admin rights on Vista
Posted: 04-23-2007, 09:16 PM
Here is how you fix it

http://www.jimmah.com/vista/Networking/filtertoken.aspx



"Andreas" <ayiangoullis@hotmail.com> wrote in message
news:915E3816-372E-4781-B7DE-909C8D253D84@microsoft.com...
> 1) Since I haveAdmin rights on both computers in a workgroup, why can't I
> access the administrative shares? It prompts me for password, which I
> provide and rejects. That used to work in previous versions. If I define
> my
> own administrative shares (with $), it works fine.
>
> 2) The same issue applies If I attempt to remotely administer a machine. I
> have no rights. What has changed with those rights?
>
> 3) Also, why do I have to use RunAs admin if I belong to the admins group?
> is there anything more powerful in Vista to bypass this?
>
Andreas
Guest
Posts: n/a
 
Re: Admin rights on Vista
Posted: 04-28-2007, 03:11 PM
I followed this exact procedure on both computers. It DOESN'T work at all.




"Michael Price" <EmJay_Price@msn.com> wrote in message
news:EA39A726-1E28-4EA8-AEEE-07250959DE41@microsoft.com...
> Here is how you fix it
>
> http://www.jimmah.com/vista/Networking/filtertoken.aspx
>
>
>
> "Andreas" <ayiangoullis@hotmail.com> wrote in message
> news:915E3816-372E-4781-B7DE-909C8D253D84@microsoft.com...
>> 1) Since I haveAdmin rights on both computers in a workgroup, why can't I
>> access the administrative shares? It prompts me for password, which I
>> provide and rejects. That used to work in previous versions. If I define
>> my
>> own administrative shares (with $), it works fine.
>>
>> 2) The same issue applies If I attempt to remotely administer a machine.
>> I
>> have no rights. What has changed with those rights?
>>
>> 3) Also, why do I have to use RunAs admin if I belong to the admins
>> group?
>> is there anything more powerful in Vista to bypass this?
>>
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Vista requires admin rights to copy file to network share confused08 Windows Vista Networking & Sharing 2 01-14-2008 07:53 PM
Admin without Administration Rights (Vista) Aphrodite Windows Vista Administration 3 03-03-2007 08:26 AM
POP: SOT won't acknowledge admin rights--Even in admin default adrian Windows XP Games 19 01-29-2004 01:29 AM
I have admin rights but POP: SOT says i don't Adrian Windows XP Games 2 01-19-2004 02:24 AM
Don't have admin rights but I am in admin group John Beavers Windows XP Security & Administration 1 07-30-2003 05:53 AM