High-level Administrator account

Posted: 09-09-2007, 11:20 AM
What's this top level administrator account I keep seeing mention of? I've
never actually found it, though apparently it's been created for me during
installation.

When I look in user accounts, all it shows me is my own account, which is an
administrator account, and a disabled guest account.

I don't envisage ever needing this super-user account, as I like to just
switch on my machine & have it boot up, rather than mess abount with a log-in
screen, but it would be nice to know how to get it if I ever do.

I have an OEM version of Vista home premium, that was installed when I
bought my new PC. Maybe it wasn't set up when Vista was installed by the
vendor.
Reply With Quote

Responses to "High-level Administrator account"

Bruce Chambers
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 09-09-2007, 05:51 PM
davey_griffo wrote:
> What's this top level administrator account I keep seeing mention of? I've
> never actually found it, though apparently it's been created for me during
> installation.
>
> When I look in user accounts, all it shows me is my own account, which is an
> administrator account, and a disabled guest account.
>
> I don't envisage ever needing this super-user account, as I like to just
> switch on my machine & have it boot up, rather than mess abount with a log-in
> screen, but it would be nice to know how to get it if I ever do.
>
> I have an OEM version of Vista home premium, that was installed when I
> bought my new PC. Maybe it wasn't set up when Vista was installed by the
> vendor.

The built-in Administrator account is disabled by default in Vista, and
is not readily accessible. To see all of the user accounts, right-click
the Computer icon and select manage.



--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
Reply With Quote
davey_griffo
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 09-11-2007, 08:14 PM
and then what? I don't see anything to do with user accounts.

"Bruce Chambers" wrote:
> davey_griffo wrote:
> > What's this top level administrator account I keep seeing mention of? I've
> > never actually found it, though apparently it's been created for me during
> > installation.
> >
> > When I look in user accounts, all it shows me is my own account, which is an
> > administrator account, and a disabled guest account.
> >
> > I don't envisage ever needing this super-user account, as I like to just
> > switch on my machine & have it boot up, rather than mess abount with a log-in
> > screen, but it would be nice to know how to get it if I ever do.
> >
> > I have an OEM version of Vista home premium, that was installed when I
> > bought my new PC. Maybe it wasn't set up when Vista was installed by the
> > vendor.
>
>
> The built-in Administrator account is disabled by default in Vista, and
> is not readily accessible. To see all of the user accounts, right-click
> the Computer icon and select manage.
>
>
>
> --
>
> Bruce Chambers
>
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety. -Benjamin Franklin
>
> Many people would rather die than think; in fact, most do. -Bertrand Russell
>
Reply With Quote
Bruce Chambers
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 09-12-2007, 01:44 AM
davey_griffo wrote:
> and then what? I don't see anything to do with user accounts.
>
Then expand the "Local Users and Groups" item in the MMC's left pane.


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
Reply With Quote
Mark Bourne
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 09-12-2007, 04:15 PM
Bruce Chambers wrote:
> davey_griffo wrote:
>> and then what? I don't see anything to do with user accounts.
>>
>
> Then expand the "Local Users and Groups" item in the MMC's left pane.
>
>
I think that's only included on Business and Ultimate versions of Vista,
not the Home versions. There are ways of activating the account from the
command line one Home versions, but you don't need to anyway. You should
have been asked to create another administrator account when you first
installed (which you have noticed is the one you usually log on with).

As I understand it, the idea of this inactive Administrator account is
that if you accidentally delete all other administrators (ie. you delete
the account you currently have without creating another with
administrator access), this account will be activated when you boot into
safe mode. I think I have seen problems here where disabling all other
administrator accounts does NOT activate the built-in Administrator in
safe mode, since it detects that other administrator accounts exist even
though you can't actually use them. It's best to be VERY careful when
deleting or deactivating accounts, and make sure that you create a new
administrator account, set it's password, and make sure that you can
actually log in with it, BEFORE deleting or disabling the last old one.

As far as I've seem, the only difference between the built-in
administrator and any other administrator, apart from the magic
activation above, is that using the built-in administrator every program
runs with admin access, whereas using any other administrator every
program runs with standard user access unless you confirm a UAC prompt
to allow it to elevate (assuming you have UAC enabled).

[I'm sure others know more about this than me, so please feel free to
confirm or correct what I've said!]

Mark.
Reply With Quote
Ronnie Vernon MVP
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 09-12-2007, 10:08 PM
Mark

You explained it very well.

This behavior with the built-in admin account has been the source of many
users being 'locked out' of being able to perform any task that requires
admin privileges. (forgotten password, hiding the only admin account, etc)
People are used to the behavior that they were familiar with in XP, but
things have changed in Vista.

By default, in Vista you cannot:
Press CTRL+ALT+DEL to reveal the old Win2K logon dialog at the login screen.
Boot to safe mode and automatically have the built-in admin account appear.
Boot to safe mode and use the built-in admin account to recover a forgotten
password on another admin account.

Of course all of these behaviors can be changed to work the way they did in
XP, but you must intentionally make these changes and, hopefully, use the
best practices recommendations when doing so.
--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"Mark Bourne" <Mark@discussions.microsoft.com> wrote in message
news:u9SM9%23U9HHA.1164@TK2MSFTNGP02.phx.gbl...
> Bruce Chambers wrote:
>> davey_griffo wrote:
>>> and then what? I don't see anything to do with user accounts.
>>>
>>
>> Then expand the "Local Users and Groups" item in the MMC's left pane.
>>
>>
>
> I think that's only included on Business and Ultimate versions of Vista,
> not the Home versions. There are ways of activating the account from the
> command line one Home versions, but you don't need to anyway. You should
> have been asked to create another administrator account when you first
> installed (which you have noticed is the one you usually log on with).
>
> As I understand it, the idea of this inactive Administrator account is
> that if you accidentally delete all other administrators (ie. you delete
> the account you currently have without creating another with administrator
> access), this account will be activated when you boot into safe mode. I
> think I have seen problems here where disabling all other administrator
> accounts does NOT activate the built-in Administrator in safe mode, since
> it detects that other administrator accounts exist even though you can't
> actually use them. It's best to be VERY careful when deleting or
> deactivating accounts, and make sure that you create a new administrator
> account, set it's password, and make sure that you can actually log in
> with it, BEFORE deleting or disabling the last old one.
>
> As far as I've seem, the only difference between the built-in
> administrator and any other administrator, apart from the magic activation
> above, is that using the built-in administrator every program runs with
> admin access, whereas using any other administrator every program runs
> with standard user access unless you confirm a UAC prompt to allow it to
> elevate (assuming you have UAC enabled).
>
> [I'm sure others know more about this than me, so please feel free to
> confirm or correct what I've said!]
>
> Mark.
Reply With Quote
davey_griffo
Guest
Posts: n/a
 
RE: High-level Administrator account
Posted: 09-21-2007, 06:30 AM
Sorry Ronny, yes, I should have mentioned I have home Premium. That worked
great. Cheers.

"davey_griffo" wrote:
> What's this top level administrator account I keep seeing mention of? I've
> never actually found it, though apparently it's been created for me during
> installation.
>
> When I look in user accounts, all it shows me is my own account, which is an
> administrator account, and a disabled guest account.
>
> I don't envisage ever needing this super-user account, as I like to just
> switch on my machine & have it boot up, rather than mess abount with a log-in
> screen, but it would be nice to know how to get it if I ever do.
>
> I have an OEM version of Vista home premium, that was installed when I
> bought my new PC. Maybe it wasn't set up when Vista was installed by the
> vendor.
Reply With Quote
Ronnie Vernon MVP
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 09-21-2007, 05:12 PM
Davey

Great! I'm glad this worked for you.

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"davey_griffo" <daveygriffo@discussions.microsoft.com> wrote in message
news:6B8129E1-16EA-4428-9018-3A0FD684330C@microsoft.com...
> Sorry Ronny, yes, I should have mentioned I have home Premium. That worked
> great. Cheers.
>
> "davey_griffo" wrote:
>
>> What's this top level administrator account I keep seeing mention of?
>> I've
>> never actually found it, though apparently it's been created for me
>> during
>> installation.
>>
>> When I look in user accounts, all it shows me is my own account, which is
>> an
>> administrator account, and a disabled guest account.
>>
>> I don't envisage ever needing this super-user account, as I like to just
>> switch on my machine & have it boot up, rather than mess abount with a
>> log-in
>> screen, but it would be nice to know how to get it if I ever do.
>>
>> I have an OEM version of Vista home premium, that was installed when I
>> bought my new PC. Maybe it wasn't set up when Vista was installed by the
>> vendor.
Reply With Quote
Supermaurix
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 01-07-2008, 04:11 PM
Hello, I'm having a serious problem with my new HP printer. I have had a
answer message from HP that ask me to access as super admin with command :
"net user administrator /active:yes" to remove some corrupted files.
When I run this command the OS tell me" Errore di sistema n.5 Accesso
negato" in english is "System error n.5 - Access denied".
Now I'm locked at this point ....
Could you help me.



"Ronnie Vernon MVP" wrote:
> Davey
>
> Great! I'm glad this worked for you.
>
> --
>
> Ronnie Vernon
> Microsoft MVP
> Windows Shell/User
>
>
> "davey_griffo" <daveygriffo@discussions.microsoft.com> wrote in message
> news:6B8129E1-16EA-4428-9018-3A0FD684330C@microsoft.com...
> > Sorry Ronny, yes, I should have mentioned I have home Premium. That worked
> > great. Cheers.
> >
> > "davey_griffo" wrote:
> >
> >> What's this top level administrator account I keep seeing mention of?
> >> I've
> >> never actually found it, though apparently it's been created for me
> >> during
> >> installation.
> >>
> >> When I look in user accounts, all it shows me is my own account, which is
> >> an
> >> administrator account, and a disabled guest account.
> >>
> >> I don't envisage ever needing this super-user account, as I like to just
> >> switch on my machine & have it boot up, rather than mess abount with a
> >> log-in
> >> screen, but it would be nice to know how to get it if I ever do.
> >>
> >> I have an OEM version of Vista home premium, that was installed when I
> >> bought my new PC. Maybe it wasn't set up when Vista was installed by the
> >> vendor.
>
Reply With Quote
Ronnie Vernon MVP
Guest
Posts: n/a
 
Re: High-level Administrator account
Posted: 01-08-2008, 05:40 PM
Supermaurix

Are you running that command from an elevated command prompt?

Log on with your standard administrator account, go to Start/All
Programs/Accessories. Right click 'Command Prompt' and select the Run As
Administrator. Run that command from there.

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"Supermaurix" <Supermaurix@discussions.microsoft.com> wrote in message
news:EC0C673D-8D63-476C-A5CE-D69B2C2C00AF@microsoft.com...
> Hello, I'm having a serious problem with my new HP printer. I have had a
> answer message from HP that ask me to access as super admin with command :
> "net user administrator /active:yes" to remove some corrupted files.
> When I run this command the OS tell me" Errore di sistema n.5 Accesso
> negato" in english is "System error n.5 - Access denied".
> Now I'm locked at this point ....
> Could you help me.
>
>
>
> "Ronnie Vernon MVP" wrote:
>
>> Davey
>>
>> Great! I'm glad this worked for you.
>>
>> --
>>
>> Ronnie Vernon
>> Microsoft MVP
>> Windows Shell/User
>>
>>
>> "davey_griffo" <daveygriffo@discussions.microsoft.com> wrote in message
>> news:6B8129E1-16EA-4428-9018-3A0FD684330C@microsoft.com...
>> > Sorry Ronny, yes, I should have mentioned I have home Premium. That
>> > worked
>> > great. Cheers.
>> >
>> > "davey_griffo" wrote:
>> >
>> >> What's this top level administrator account I keep seeing mention of?
>> >> I've
>> >> never actually found it, though apparently it's been created for me
>> >> during
>> >> installation.
>> >>
>> >> When I look in user accounts, all it shows me is my own account, which
>> >> is
>> >> an
>> >> administrator account, and a disabled guest account.
>> >>
>> >> I don't envisage ever needing this super-user account, as I like to
>> >> just
>> >> switch on my machine & have it boot up, rather than mess abount with a
>> >> log-in
>> >> screen, but it would be nice to know how to get it if I ever do.
>> >>
>> >> I have an OEM version of Vista home premium, that was installed when I
>> >> bought my new PC. Maybe it wasn't set up when Vista was installed by
>> >> the
>> >> vendor.
>>
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
How I can use the administrator account (hidden) in winXP instead of my account? Guest Windows NT/2000/XP 0 02-27-2008 08:34 PM
Administrator Account is Already in Use as Main Account? Kcpirana Windows Vista Administration 12 05-17-2007 07:06 PM
How to perform High security tasks from a low level security app?? GSLockwood (IUnknown) Windows Vista Security 12 11-25-2006 01:10 PM
My speakers are buzzing on high volume level!!! ran Windows XP Music 0 07-29-2003 08:14 PM
Why are two Administrator-level accounts required? Joel Moore Windows XP Security & Administration 3 07-01-2003 09:42 PM