Administrator Permissions

B

Bill Bradshaw

Running Windows 7 Pro. I would like to change some permissions on
directories but Windows 7 is not allowing it. I am logged in as the
administrator. How can an administrator be denied anything?
 
S

Seth

Bill Bradshaw said:
Running Windows 7 Pro. I would like to change some permissions on
directories but Windows 7 is not allowing it. I am logged in as the
administrator. How can an administrator be denied anything?

A) What specific directories?

B) Even when logged in as Administrator, if UAC is on, you are running as a
regular user unless you specifically elevate.
 
J

Just D

Bill Bradshaw said:
Running Windows 7 Pro. I would like to change some permissions on
directories but Windows 7 is not allowing it. I am logged in as the
administrator. How can an administrator be denied anything?
Win7 programmers have their own impression of being Administrator. Try the
following. Open the users, find the ADMINISTRATOR (I realize that your
current account is added to the administrative group, but it really means
nothing for MS programmers, trust me :) ), Enable this ADMINISTRATOR user
record, it's disabled by default by the way, then assign a password. Win7
will bark that the user data will be lost because you're changing its
password to prevent... bla-bla-bla. Ignore it, it was disabled before you
just enabled it, and assign a new password to this built-in ADMINISTRATOR.
Then you will want to switch the user to login as the built-in
ADMINISTRATOR. You don't need to close your login, just switch the user.
After you logged in as ADMINISTRATOR, not as administrator :) as you usually
do, you will be able to install drivers, to correct the windows update
settings, override the directories ownership, assign the permissions to the
programs, etc., etc., much more tasty things that the administrator can do.
Funny? Call MS to ask about the approach that they implemented in Win7. From
now on ADMINISTRATOR and administrator are two different records and
permissions as well. Cngrts!

Just D.
 
G

Gordon

Bill Bradshaw said:
Running Windows 7 Pro. I would like to change some permissions on
directories but Windows 7 is not allowing it. I am logged in as the
administrator. How can an administrator be denied anything?
And what folders might these be?
 
M

Mr doe

Bill said:
Running Windows 7 Pro. I would like to change some permissions on
directories but Windows 7 is not allowing it. I am logged in as the
administrator. How can an administrator be denied anything?
sorry that I can not help. But it took me almost 6 weeks to be able to
change things in win 7 professional.
Had to get rid of something called Trust Installer in
Properties/security . I was about to place the Win7 dvd into my Disk
Shreader ( As I did with the Vista DVD ) . and go back to winxp.
 
D

Dave-UK

Mr doe said:
sorry that I can not help. But it took me almost 6 weeks to be able to change things in win 7
professional.
Had to get rid of something called Trust Installer in Properties/security . I was about to place
the Win7 dvd into my Disk Shreader ( As I did with the Vista DVD ) . and go back to winxp.
TrustedInstaller is a service that owns Windows system files, it's part of
the increased security introduced with Vista.
This is to prevent a process that is running as an administrator
or Local System from replacing the files.
Generally, system files are owned by the TrustedInstaller account and
program files are owned by the System account.

If you have replaced TrustedInstaller as the owner of your system files
then you have wrecked the added security of Windows 7 and any malware
process running in your account will be able to alter or replace critical files.

..
 
G

Gordon

Mr doe said:
sorry that I can not help. But it took me almost 6 weeks to be able to
change things in win 7 professional.
EH? SIX WEEKS? I change things on a daily basis in a Standard Users account
without any problems.

I suggest you pack up your computer, return it to where you bought it and
ask the nice man if he will change it for an abacus or a gameboy.

IDIOT.
 
O

Ophelia

Gordon said:
EH? SIX WEEKS? I change things on a daily basis in a Standard Users
account without any problems.
Well aren't you a clever wee man:)
I suggest you pack up your computer, return it to where you bought it and
ask the nice man if he will change it for an abacus or a gameboy.

IDIOT.
Ahh yes, I remember you! Seriously unpleasant!!! I put you in my killfile
a while ago, but I clear it out on a regular basis.

Back you go wee man:) bye bye!
 
A

Al Smith

Dave-UK said:
TrustedInstaller is a service that owns Windows system files, it's part of
the increased security introduced with Vista.
This is to prevent a process that is running as an administrator
or Local System from replacing the files.
Generally, system files are owned by the TrustedInstaller account and
program files are owned by the System account.

If you have replaced TrustedInstaller as the owner of your system files
then you have wrecked the added security of Windows 7 and any malware
process running in your account will be able to alter or replace
critical files.
You'll be in the same situation as we were with XP, what really
wasn't such a bad situation to be in.

-Al-
 
J

Jeff

A) What specific directories?

B) Even when logged in as Administrator, if UAC is on, you are running
as a regular user unless you specifically elevate.
Does this mean it is therefore safe to run as Administrator user?
 
A

Al Smith

Frank said:
Really? Then why use 7?

Isn't that obvious? Microsoft is phasing out support for XP. In a
year or two, many programs won't be written to run on XP. Divices
won't work on XP. We have to move with Microsoft because they
control the market. But speaking for myself, I had no problem
using XP.

-Al-
 
S

Seth

Does this mean it is therefore safe to run as Administrator user?

If you leave UAC on and are running as an administrative user, then yes. You
should not be logged in as the actual account named Administrator.

See, with UAC on, normal operations are "Linux like". In Linux, even when
logged in as an admin account, you are running in regular user mode until
you elevate (generally via SU for the session or SUDO for a specific
operation). Where it is still less secure then linux is it is still very
easy to elevate as many operations that require elevation will popup a
prompt and some users are still hitting OK and YES without actually reading
what's going on which defeats the purpose of the security in the first
place.

In the domains I manage, I disable the account named Administrator (I also
change its name as well as scramble the password). I also have UAC require a
username/password to elevate rather than a simple Yes/OK button.
 
M

Mr doe

Dave-UK said:
TrustedInstaller is a service that owns Windows system files, it's part of
the increased security introduced with Vista.
This is to prevent a process that is running as an administrator
or Local System from replacing the files.
Generally, system files are owned by the TrustedInstaller account and
program files are owned by the System account.

If you have replaced TrustedInstaller as the owner of your system files
then you have wrecked the added security of Windows 7 and any malware
process running in your account will be able to alter or replace
critical files.

.
I will take the Chance ..I want ot run a program I installed and this
Trustinstaller Stops me from Running it . And there is No Help from
Microsoft telling me how to get around it .
Could be TRUSTINSTALLER is the whole problem with VISTA . Why no one
wanted it .
The Trustinstaller would Not Release my programs, I tried to take
charge of the program via properties/ Security and Trust installer would
not let administrator Take Charge/ Run the programs .
Trustinstaller is Gone off my win 7 pro. If I had not been able to get
rid of it .. It would be back to WinXP for me and Shredding the Win7 pro
DVD .
 
C

Char Jackson

The Trustinstaller would Not Release my programs, I tried to take
charge of the program via properties/ Security and Trust installer would
not let administrator Take Charge/ Run the programs .
Trustinstaller is Gone off my win 7 pro. If I had not been able to get
rid of it .. It would be back to WinXP for me and Shredding the Win7 pro
DVD .
Congrats, you killed a fly with a hammer. :)
 
R

Roy Smith

Sadly only available in W7 Pro or Ultimate.
Not really... by using third party virtualization software like VMWare
player or Virtual Box, it won't mater what version of Win7 you have. Of
course this means that you'll have to have your own copy of WinXP to
install in the virtual machine.

--

Roy Smith
Windows 7 Home Premium

Timestamp: Monday, February 08, 2010 9:10:19 PM
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top