Lindsay
Sorry for the late reply. Answers in-line.
"Lindsay Graham" <LDGraham@aapt.net.au> wrote in message
news:18B0D5B7-BAA4-4E89-BFA0-DDCFA6DC103C@microsoft.com...
Quote:
> 1. You say that to delete system files or files that belong to another
> user account, 'you will need to take ownership of the file and then change
> the permissions for that file before you can delete it'. How do I 'take
> ownership of the file'? Can I take ownership of a folder and all the
> files in it?
|
You can still delete these files, but you must take ownership and change
permissions on each individual file before you can do this.
First, take ownership:
Right click the file and select Properties.
Select the Security Tab.
Click the Advanced Button.
Click the Owner Tab.
Click the Edit Button.
In the 'Change owner" section, select your administrator account.
Click Apply, click OK twice.
This will return you to the Security Tab view.
Next change the permissions:
Select your administrator account in the 'Group or user names' section.
Click the Edit Button.
Select your administrator account again.
Place a check mark in the Full Control check box.
Click OK twice.
You can now right click and delete the file.
Throughout this process, you will get several permission prompts.
Before you ask, yes this process is long and complicated, but this is
necessary to maintain the integrity of the system.
Quote:
> 2. More specifically, how do I access (and add files to or delete files
> in) the Documents and Settings folder? In a user account, Vista will not
> let me share this folder. In the b-in Administrator account, I cannot see
> the D&S folder at all. How do I get around these barriers?
|
The 'Documents and Settings' folder no longer exists in Vista. What you see
in some accounts is a 'Junction' called Documents and Settings. This folder
is designed for older installation programs that are hard coded to look for
the D&S. When these programs look for the D&S folder, the 'Junction' will
silently re-direct them to the C:\Users folder. You can find more detailed
information on junction points on the following website.
Svrops.com - Windows Vista Junction Points:
http://svrops.com/svrops/articles/jpoints.htm Quote:
> 3. To be more specific again, I want to delete a user account, but move
> its files elsewhere before I delete it. How do I get around Vista's
> barriers to enable me to do that?
|
The easiest way to do this is to use the Built-In Admin account.
Quote:
> 4. You also say 'I urge you NOT to use this account [ie, the built-in
> Administrator account]. Remember the reasons that I already described.'
> I've read and re-read your 2 posts, and the only reason that I can see for
> not using the built-in Administrator account is that I would not be able
> to use IE in protected mode. What other reasons are you referring to?
|
Almost all of the new security components in Vista are disabled or bypassed
when you use the built-in admin account. Using this account, as your
everyday account, will take you back to the level of security that you had
in XP. Malicous programs that infect the system will be able to operate in
complete silence without you even being aware of them. This accouint is
designed to be a 'safety net' in case something happens to your normal
administrator account. If you are using the built-in account and something
happens to cause corruption, you have no way to recover, except a full
reinstall of Vista or a reinstall from a full back-up.
Besides IE Protected Mode, you will also lose File and Registry
Virtualization as well as most of the compatibility for legacy programs. If
you have already installed programs using a normal admin account, it's
likely that these programs will lose any program specific configuration
settings and they may even need to be reinstalled. If you still use other
standard or normal admin accounts on the system you will also see many more
prompts for admin privileges when using these accounts.
--
Ronnie Vernon
Microsoft MVP
Windows Shell/User
Quote:
>
>
> "Ronnie Vernon MVP" <rv@invalid.org> wrote in message
> news:3AE85FA2-6F68-4E1C-92F9-9915E4F93F3D@microsoft.com... Quote:
>> Azulyn
>>
>> OK, plain language.
>>
>> The first concept that you need to understand is that Windows is not just
>> another software program, it's an operating system. It's what enables all
>> of the software and hardware on the computer perform the way it was
>> designed to perform. In your profession, you can equate this with the
>> controls that allow your rotary aircraft to perform the way it was
>> designed. Just like your aircraft controls have rules that must be
>> followed when you operate them an operating system also has rules that
>> must be followed. If you violate those rules you crash your aircraft or
>> you crash your computer. If you get a new aircraft, with a different set
>> of controls, you must learn new ways of doing things. It's the same way
>> with a computer and a new operating system.
>>
>> You can bypass most of the security options in Vista by using the
>> built-in administrator account. The problem with this is that the
>> security model in Vista is multi-layered. In other words, if you break
>> one component of this security model, most of the other parts are also
>> broken, since they depend on UAC.
>>
>> Some of these components are:
>>
>> User Account Control (UAC). This component notifies you if a program you
>> start is trying to gain systemwide, unrestricted access to every part of
>> the operating system. If it does this, UAC will ask for your permission
>> before allowing the program to gain this access.
>>
>> File Virtualization (Data Redirection). This component provides
>> compatibility for older programs and by enabling legacy applications to
>> run in non-administrator accounts. It automatically creates copies of
>> files that an application can use when it does not have permission to
>> access the original files that are contained in a restricted folder such
>> as Program Files.
>>
>> Registry Virtualization. (Registry Redirection) Similar to file
>> virtualization except that a program that tries to write to a global,
>> restricted part of the Registry, such as the HKEY LOCAL MACHINE, system
>> section of the registry is redirected to the HKEY CURRENT USER, users
>> section of the registry.
>>
>> (If you have already installed some older programs, these programs may
>> stop working, or not work properly, because their configuration files and
>> settings have already been virtualized.)
>>
>> Internet Explorer Protected Mode. You will not be able to use IE in
>> protected mode while you are logged on with this account.
>>
>> Even when you are using the built-in administrator account, you may still
>> encounter some access denied messages when accessing certain files or
>> folders. This is due to the permissions (another part of the security
>> model) on some files and folders.
>> Quote:
>>>All I and many others want to do is delete some files, or upgrade a
>>>program.<
| >>
>> You can delete any files you wish as long as they belong to the user
>> account that you are using to log onto the system. If they belong to the
>> system, another user account, or they are located in a restricted section
>> of the file structure, such as C:, C:\Program Files, or C:\Windows, then
>> you will need to take ownership of the file and then change the
>> permissions for that file before you can delete it.
>>
>> If you are having a problem upgrading a program, then there can be
>> several causes of the upgrade failing. It is an older program that is not
>> completely compatible with Vista, you need to elevate the installation
>> file with admin privileges, or the upgrade file has been corrupted.
>>
>> There are several ways that you can enable the built-in administrator
>> account, depending on which version of Vista you are using. I urge you to
>> NOT use this account for your everyday account. Remember the reasons that
>> I already described.
>>
>> 1. All Versions. Go to Start/All Programs/Accessories. Right click the
>> 'Command Prompt' item and select 'Run As Administrator'. In the command
>> window, type the following:
>>
>> net user administrator /active:yes
>>
>> (Be sure to type the command exactly as shown, including the spaces and
>> colon)
>>
>> Press Enter.
>>
>> You should see 'the command completed successfully'.
>>
>> 2. Business or Ultimate versions. Press WINKEY+R to open the Run Box.
>> Type control userpasswords2 in the Open box and click OK.
>> Click the Advanced Tab in the User Accounts dialog.
>> Click the Advanced Button.
>> In the lusrmgr dialog, click Users, in the left column.
>> Right click Administrator in the center section and click the Properties
>> item.
>> Remove the check mark from the 'Account is disabled' option.
>> Click Apply/OK.
>>
>> Reboot the computer.
>>
>> The administrator account should appear on the login screen. This account
>> does not have a password associated with it, by default. You should set a
>> password for the account in Control Panel/User Accounts.
>>
>>
>>
>> --
>>
>> Ronnie Vernon
>> Microsoft MVP
>> Windows Shell/User
>>
| >
|