|
|
|
date: Wed, 8 Oct 2008 23:11:41 -0500,
group: microsoft.public.windows.vista.general
back
Re: Administrator User Account issues
"Squa190" wrote in message
news:8c5aa7e40dfdc8d18876630bf0c4cbb5@nntp-gateway.com...
>
> I am the only user on my account. Im trying to run a game which requires
> me to run asit as an administrator and as a Windows XP (service pack2).
> When I go to properties I can choose it to run as XP but the "run as an
> adminstrator" option is greyed out so I can't enable it. I have also
> noted that Vista doesn't always recognize that I am an administrator. I
> do have UAC off cuz I don't need to verify myself everytime I click an
> "OK" button. Is this the mitigating factor? If so, what's the point to
> having "adminstrator" status on a user then??? I mainly concerned about
> the lack of recognition from Vista that my user is an administrator, but
> I would also like solutions to the "greyed out" administrator option??
>
>
> I've always warmed up slowly to new OS's but this is ridiculous.
You should understand the reason why UAC is there. You should read about the
two access tokens for user/admin on Vista, and yes, if UAC is disabled, then
Run As Administrator is disabled too.
http://technet.microsoft.com/en-us/library/cc709691.aspx
http://news.softpedia.com/news/Admin-Approval-Mode-in-Windows-Vista-45312.shtml
http://technet.microsoft.com/en-us/magazine/cc160882.aspx
http://technet.microsoft.com/en-us/magazine/cc138019.aspx
The is the only user account that has full admin access at all times.
http://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/
You should read the about the *benefits* of using the Administrator account.
<http://www.computerperformance.co.uk/vista/vista_administrator_activate.htm#Summary_of_Vista_Administrator_-_Super_User_(Hidden_Account)>
As you have already seen, you're never user/admin with full admin rights
with that out of the box user/admin account, even with UAC disable, and even
if you make new user/admin accounts. That's because those user/admin
accounts do not inherit full admin rights from the Administrator user
account, like they do on XP. Administrator on Vista only uses one access
token, which is full admin rights.
Some folders like C:\Programs, C:\Windows and folders within those folders
are protected. You use your user/admin account or the Administrator user
account, and you see if you can add a new user, change the permissions of an
existing user account or even delete an existing user account on those
folders.
There is a little exercise you can take with UAC enabled to see what is
happening.
1) Go to the Program Files and create a new directory call it *Test*. Vista
should allow you to create the directory even as you being Admin on the
machine.
2) Start Notepad enter some text and try to SaveAs with the file to Program
Files/Test. You should get permission denied. Yeah, you're getting it even
if the account you're using is your Admin account.
3) Come out of Notepad, forget the save, and cancel out of Notepad.
4) Go to the directory and to the Security tab for the directory and add a
new account to the security account list. It's going to be the User account
you login to the computer with as Admin. If you login with *Squa190* as
admin on the machine, then you're going to add *Squa190* as another account
the will have access to the directory.
5) You'll set *Squa190* to have Full Control just as Administrators has Full
Control of the folder.
6) Go back to step # 2 with Notepad and try to SaveAs the file to Program
Files\Test. You should be able to save the file.
Hopefully, you'll see the issue of account permissions conflict for the
user/admin on Vista.
On one hand, your account is in the Administrators group account. But on the
other hand, your account is part of the User group account. If your user
account *Squa190* is not on the folder with the same rights as as
Administrators, there is going to be a permissions conflict, because Vista
with UAC enabled is looking at the combined rights of those two accounts in
some situations.
What Vista defaults to is Users account group permissions on the directory
if it doesn't see your individual user account on the folder, and Users
doesn't have Full Control.
This is because on Vista with UAC enabled, a user/admin on Vista is not an
Admin with Full rights, like it is on XP or Win 2k.
I guess you can look to see who as ownership of *test*, just after you have
created it.
http://www.nirmaltv.com/2008/07/11/how-to-take-ownership-of-files-and-folders-in-vista/
date: Thu, 9 Oct 2008 01:03:01 -0400
author: Mr. Arnold MR.
|
|
