Administrator incorrectly denied access

Posted: 08-18-2007, 04:34 PM
I have two administrator accounts, one is the default account and another is
a user account that is a memeber of the administrator group.

The default administrator account can access files that are set to be
available to the administrators group. Also, when this account uses the "run"
command, the user sees a message that the program that is started will be run
with administrative rights. However, the user account that is a member of the
administrator group is always denied access to files and folders that have
permissions only for the administrators group (and no permissions are denied
on those files/folders). The current workaround is for this latter account to
get permission to access files/folders is to have its username specifically
granted permission for those files/folders. Also, this account does not get a
message that programs started with the "run" command will be started with
administrative privelidges. I want this account to be able to access files
that are supposed to be available for the administrators group without
needing to grant specific permissions for that account, and I want this
account to use the run command with administrative rights. Help would be
appreciated!
Reply With Quote

Responses to "Administrator incorrectly denied access"

Jesper
Guest
Posts: n/a
 
RE: Administrator incorrectly denied access
Posted: 08-19-2007, 03:26 AM
This is because of UAC. When you access those files using Windows Explorer,
or another unelevated process, you do not have access to things only
Administrators have access to.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"sigmund" wrote:
> I have two administrator accounts, one is the default account and another is
> a user account that is a memeber of the administrator group.
>
> The default administrator account can access files that are set to be
> available to the administrators group. Also, when this account uses the "run"
> command, the user sees a message that the program that is started will be run
> with administrative rights. However, the user account that is a member of the
> administrator group is always denied access to files and folders that have
> permissions only for the administrators group (and no permissions are denied
> on those files/folders). The current workaround is for this latter account to
> get permission to access files/folders is to have its username specifically
> granted permission for those files/folders. Also, this account does not get a
> message that programs started with the "run" command will be started with
> administrative privelidges. I want this account to be able to access files
> that are supposed to be available for the administrators group without
> needing to grant specific permissions for that account, and I want this
> account to use the run command with administrative rights. Help would be
> appreciated!
Reply With Quote
sigmund
Guest
Posts: n/a
 
RE: Administrator incorrectly denied access
Posted: 08-19-2007, 11:52 PM
Thanks for the reply. I wondered if that was the case, but I wish that MS had
not implemented UAC in that manner. I made this user an administrator for a
reason!

Thanks again.

"Jesper" wrote:
> This is because of UAC. When you access those files using Windows Explorer,
> or another unelevated process, you do not have access to things only
> Administrators have access to.
>
> ---
> Your question may already be answered in Windows Vista Security:
> http://www.amazon.com/gp/product/047...otectyourwi-20
>
>
> "sigmund" wrote:
>
> > I have two administrator accounts, one is the default account and another is
> > a user account that is a memeber of the administrator group.
> >
> > The default administrator account can access files that are set to be
> > available to the administrators group. Also, when this account uses the "run"
> > command, the user sees a message that the program that is started will be run
> > with administrative rights. However, the user account that is a member of the
> > administrator group is always denied access to files and folders that have
> > permissions only for the administrators group (and no permissions are denied
> > on those files/folders). The current workaround is for this latter account to
> > get permission to access files/folders is to have its username specifically
> > granted permission for those files/folders. Also, this account does not get a
> > message that programs started with the "run" command will be started with
> > administrative privelidges. I want this account to be able to access files
> > that are supposed to be available for the administrators group without
> > needing to grant specific permissions for that account, and I want this
> > account to use the run command with administrative rights. Help would be
> > appreciated!
Reply With Quote
Jesper
Guest
Posts: n/a
 
RE: Administrator incorrectly denied access
Posted: 08-21-2007, 04:24 AM
It is confusing at first, and the fact that you can't elevate Explorer is
cumbersome. However, once you get used to it you learn how it was intended to
work and then it starts being more useful and less blocking.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"sigmund" wrote:
> Thanks for the reply. I wondered if that was the case, but I wish that MS had
> not implemented UAC in that manner. I made this user an administrator for a
> reason!
>
> Thanks again.
>
> "Jesper" wrote:
>
> > This is because of UAC. When you access those files using Windows Explorer,
> > or another unelevated process, you do not have access to things only
> > Administrators have access to.
> >
> > ---
> > Your question may already be answered in Windows Vista Security:
> > http://www.amazon.com/gp/product/047...otectyourwi-20
> >
> >
> > "sigmund" wrote:
> >
> > > I have two administrator accounts, one is the default account and another is
> > > a user account that is a memeber of the administrator group.
> > >
> > > The default administrator account can access files that are set to be
> > > available to the administrators group. Also, when this account uses the "run"
> > > command, the user sees a message that the program that is started will be run
> > > with administrative rights. However, the user account that is a member of the
> > > administrator group is always denied access to files and folders that have
> > > permissions only for the administrators group (and no permissions are denied
> > > on those files/folders). The current workaround is for this latter account to
> > > get permission to access files/folders is to have its username specifically
> > > granted permission for those files/folders. Also, this account does not get a
> > > message that programs started with the "run" command will be started with
> > > administrative privelidges. I want this account to be able to access files
> > > that are supposed to be available for the administrators group without
> > > needing to grant specific permissions for that account, and I want this
> > > account to use the run command with administrative rights. Help would be
> > > appreciated!
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Signed On As Administrator, but Denied Access ativar Windows Vista Administration 22 01-27-2008 01:56 AM
Administrator Access Denied Bob Saunders Windows XP Security & Administration 1 02-06-2004 01:16 AM
Access Denied to Administrator: error? Danielle Windows XP Accessibility 3 01-06-2004 02:41 AM
Access denied administrator John Laird Windows XP Security & Administration 1 09-09-2003 05:14 PM
ACCESS DENIED TO FILES WHEN INSTALLING EVEN WHEN ADMINISTRATOR MIKE Windows XP Network & Web 1 07-14-2003 06:45 PM