Over 1 million tech questions and answers.

local admin account with no permit to edit other admin accounts

Q: local admin account with no permit to edit other admin accounts

Hi,
I am working on a 2012 ADDS based network and I have the following requirement.
I want to create a local administrator user account on the local domain computers (Win XP, 7 and 8) which will have full access on the PC but not the permission to edit other local administrator accounts.
Please advise how I can achieve this.

Thanks in advance,
Andreas

RELEVANCY SCORE 200
Preferred Solution: local admin account with no permit to edit other admin accounts

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: local admin account with no permit to edit other admin accounts

Local admin account by definition has access to everything and even if it doesn't it can take ownership and give itself the rights. In other words i am not sure that you can achieve what you
are trying to do.



I would suggest create a single shared local admin account and give it your desktop admins, change the password every 60-90 days to keep it more secure. This is common practice in many
organizations.




http://www.dannyeckes.com/create-local-admin-group-policy-gpo/

Read other 8 answers
RELEVANCY SCORE 115.2

Hello All,
I'm delighted to have found you and after a long day of trying to help myself i am now requiring your much appreciated assistance please! I'm not a techy person at all and am hoping someone can help
Last week my husband purchased a new hp laptop which came with Windows 10
On setup i used my microsoft account to login with a pin, the account was setup as administrator (thinking i could change things later)
About 2 days later i added a standard user account for my husband with a microsoft account login with pin.
I wanted to make his the administrator account but thought i had better change mine to a standard account first! My mistake!!
Now i cannot change anything! i have tried to use the cmd prompt to run as administrator - it asks for administrator permission and does not allow me to enter a password or yes!
I have tried all suggestions to enable the hidden windows 10 account but all ask for the same permission.
I have tried to go to setup, recovery, troubleshoot, advanced option, system restore - it requests an administrator password and when i entered what i thought is mine it does not work! Feeling a little
Does anybody know anyway i can go back in time to start again or how do i access administrator rights as i really need to add programs etc
Thank you for any help given

Read other answers
RELEVANCY SCORE 114.8

Basically I have two admin accounts one of which belongs to another member of family and one which belongs to me. Heres the situation:

The person who owns the other Admin account is changing my accounts password (also an admin account). Surely there is some way to make it so that I can not have my account's password changed unless it is logged on to my actual account (so my account's password can only be changed if my account is logged on?)

Is there a way?

In urgent need of help!

Thanks!

A:Prevent Admin Accounts From Changing Other Admin Account Passwords In Xp!

Here's an article (for Win2K) that may help: http://support.microsoft.com/kb/309799But, IMO, the issue here is that the other person can't be trusted. In such a situation I'd suggest making the other account into a Standard User account - that way they won't be able to mess with your stuff, and they'll be reliant upon you for anything that requires administrative privileges.

Read other 3 answers
RELEVANCY SCORE 107.2

okay. freshly into win7 now, having obtained a new hdd for my comp. I have been running as the admin of my computer since accounts became an unavoidable thing. barring the occasional frustration-induced blunder I tend to stay Properly Paranoid in my habits to make sure I have no problems...

but win7 doesn't think that I could ever be intelligent enough to have full rights on any account other than the built-in admin account, which of course I'd want to avoid using outside emergencies that render other accounts damaged somehow.

so I'm looking to find out how to make another user account with FULL admin rights. not just the "constantly have to get permission" stuff that a standard*snort* admin account has, full rights that don't involve constantly having to "run as administrator"

yes yes I've heard people trying to get me more paranoid so that I'd endure the added hassles, all it does is make me more irate with the situation. so if noone's willing to provide me with instruction on this, it's probably best for the thread to be left to fall off the board.

A:of win7, admin rights, admin accounts, and real admin accounts

I don't know what your problem is. To make another administrator account - Start - Control panel - User Account - 
Manage another account - Create a new account - Give it a name - put a check mark for Administrator - 
click - Create Account. 

Read other 8 answers
RELEVANCY SCORE 100

I was having some network issues that I thought I could resolve by un-joining the domain and then re-joining it (I'm Using Vista Business x32). When I un-joined the domain it also removed my local administrative accounts! I can no longer make any changes since I now just have the 'Guest' account and my newly created 'GregPa' account with just Guest priviledges - drat! I have been limping along, but now have a new DNS server that I can't change the IP to point at the new one. Anyone out there that can help?

Read other answers
RELEVANCY SCORE 98.8

Hi all..

We have unfortunately just ended up with our first Vista machine here at work and 30 mins into my setup Ive already run into a question..

Dell, Vista Business, joined into our domain

Having googled around a bunch, I understand that the local admin account is disabled upon install.

I found a tip that recommended running cmd as admin and
net user administrator password
net user administrator activate:yes

I performed this, got command successful returned from both.. but when I try to login as <compname>\Administrator @ the login, or try to use the same to perform any tasks on the system I get denied and am told bad user or pw.

I ran user setup as domain admin and confirmed that my local user account is part of the administrator group... found that the local Administrator account was still set as disabled, so I cleared the disabled checkbox.. Im too paranoid to use "Set password" however in case my prior password did somehow work (it doesnt appear to have) and by then Setting Password I'd be screwing my admin account of its encrypted files (do I even have any if the accounts never been logged into?)

Yknow what started all this? Trying to delete Adobe Speed Launcher and Dell Network Manager from the Startup in the start menu.. 'cause god forbid I do that without being a bloody domain admin.

Suggestions as to why my local user account (lets call it bob) can't do any admin functions though Im part of Adminstrators group locally? What ... Read more

A:Local admin group accounts in a domain etc.

Why fight the system? Use an account other than the "Administrator" account. It would appear Vista just isn't designed for that to be a user account.
 

Read other 2 answers
RELEVANCY SCORE 98.8

We have seen a couple of server with malware infections that have local user accounts created for 'admin', 'sys', and 'msuser'. These accounts were also added the the local administrators group.
 
Just checking to see if anyone else has seen this or may know what can cause these accounts to be create, as in any viruses that may do this.

A:Admin, msuser, sys local accounts created

Possibly related to this?
 
http://greatis.com/blog/how-to-remove-malware/wab32-exe.htm

Read other 3 answers
RELEVANCY SCORE 98

Hello all,

I was wondering if it is possible to user Powershell to disable local admin rights on networked computers.

Read other answers
RELEVANCY SCORE 97.6

I hope someone can help me.

Just this morning i booted up as normal and the always annoying UAC notifications kept popping up. I was sure i had disabled these! Then i went to use my music software and it said that this account didn't have admin privileges.

I checked my user account and the check box states that is is an admin account and that UAC is turnd off. (i only have one account anyways)

Ive looked on google extensively, Tried making new profiles and copy the old one over, but that only worked to a certain point - lots of programs didn't work, lost mail settings etc. Not really workable.

Tried system restore to no avail.

Tried using the vista admin account and changing my account - rebooting - etc. No change.

My guess is that something has got corrupt in my user profile and windows is not remembering that i should be an admin. I can't use my software and i have a deadline!!

Any one who can help will win a magical prize or something!

Jen

A:Admin account stopped being admin even when admin is checked!

Welcome
Should be easy, create a New Administrator account and give it permissions to use the software.
User Account - Create
http://www.sevenforums.com/tutorials...rs-groups.html
Procedure for Seven is the Same as For Vista.

Read other 1 answers
RELEVANCY SCORE 97.6

Hi,
I have been looking for this answer for 2 days and can not find anyone who has had similair problem.

THere are 2 accounts Administrator and Kenmystro/administrator. I have the password for both and can access both. win 7 Ultimate Hp8510.
I have already selected all user permissions and taken ownership in every box I could find for Kenmystro/admin. the UAC is at minimum and the security centre is off. Run as admin on right click does not help.
It does not matter which of the 2 accounts I log into when I try install certain HP software(Maintenance
& some drivers) it says I do not have admin privileges.

This is driving me nuts can anyone help??
 

A:admin account and user admin still no admin privilages

Read other 6 answers
RELEVANCY SCORE 96.8

Hello. In on of the labs I run with dual boot Linux and windows 7, I've been experiencing this issue with 2 PCs. Today I noticed one more had this issue. They were connected to my windows domain but today, when trying to login, there is no domain connection
possibility anymore  and one of the local administrators is gone too. Local Administrator password is unknown but after resetting it from a linux boot disk  I'm able to login but some of the programs have vanished while others still run.

The Bios is boot protected, so I don't think any user could boot a CD/USB to mess with the PC.
One thing I was thinking was if someone got root privileges in Linux and mount the Windows partition and mess with it. But even if someone got the root password, how come the administrator and student local accounts still exist?

Windows restore points are disable, so I think that even if the machines were not shutdown properly, they would no rollback to some inconsistent state.

Has anyone experienced something like this?
Is this some kind of hacking?
Thanks and best regards.
Dave

Read other answers
RELEVANCY SCORE 96.8

Hello. In on of the labs I run with dual boot Linux and windows 7, I've been experiencing this issue with 2 PCs. Today I noticed one more had this issue. They were connected to my windows domain but when I'm going to login, the domain connection
is gone and one of the local administrators is gone too. After resetting the Administrator account password, I'm able to login but some of the programs have vanished while others still run.

The Bios is boot protected, so I don't think any user could boot a CD/USB to mess with the PC.
One thing I was thinking was if someone got root privileges in Linux and mount the Windows partition and mess with it. But even if someone got the root password, how come the administrator and student local accounts still exist?

Windows restore points are disabled, so I think that even if the machines were not shutdown properly, they would no rollback to some inconsistent state.

Has anyone experienced something like this?
Is this some kind of hacking?
Thanks and best regards.
Dave

Read other answers
RELEVANCY SCORE 96.8

Here's my scenario.  I have a Windows 7 Pro x64 SP1 machine setup for standalone use.  I am using local group policy to lock down many settings.  I have 4 accounts in the local administrators group (admin accounts).  The real administrator
is disabled.  Here's what's happening:  If I create a new standard user from the control panel, all admin accounts get disabled immediately.  I checked the admin accounts settings before and after the new user is created and the disabled checkmark
appeared during the process.  Now, when I create a new user using the computer management console vs. the control panel, it works fine.  The difference is that in the computer management console, you must set a password at the time of account creation
vs. in the control panel you create an account with no password.  So, my guess is that somewhere in my group policy, it doesn't like an account being created without a password, but why would that disable all administrator accounts?  Has anyone else
experienced this?

Read other answers
RELEVANCY SCORE 96.8

Hi

We upgraded our desktops from Windows XP to Windows 7, with Windows XP we used the resource kitís CDROMLOCK.EXE to lock down CD and DVD. Once installed a user had to be in the local administrators group to access a CD or DVD on that desktop.

For Windows 7 it is not Windows 7 compatible so I run the EXE in Vista SP-2 Compatibility mode, which works perfect.

My question: With a user in the local admin group they have access to the CD and DVD, but also have full access to the desktop, which is of concern. Does anyone know how to assign a user name (Either local Desktop or a Server 2003\2008\2010) domain account to a service or Exe?

Is there a way to either create a folder with full rights and then put the exe in the folder, giving the user full admin rights to the folder, or assign full admin rights to s single EXE file?

I am just not sure how Windows 7 controls local admin rights other than the local Admin Group.

If this is in the wrong group, please move.

Thanks

B.
 

A:Assign Local Admin Rights without local Admin Group

You should be able to right-click on the exe file, then choose properties. On the "Compatibility" tab, there should be a checkbox for "Run as administrator", which you can check (enable) and save settings.
 

Read other 1 answers
RELEVANCY SCORE 96.4

Have two Administrator accounts, both are shown as "Local. " Cannot delete/change the type of account. Windows keeps telling me I am signed in to the account.
HELP

Read other answers
RELEVANCY SCORE 96

Hi I have accidentally changed the admin account to a local user and now cannot make any changes to my laptop. I am using an ASUS brand and when I click on manage user accounts it pops up with a screen "connect smart card". Kindly help, thanks in advance.

A:Accidentally changed the admin account to a local account

Read other 5 answers
RELEVANCY SCORE 96

Hi, I only have one account in my Win8.1x64 PC. It was "Admin" (Standard user was not available, grayed). I tried to change it to "Standard" using Local Policy Group and now the account changed to "Local Account" and whatever I want to do (Change UAC settings, open Local Policy Group,check disk for errors, etc etc) I get the attached message below.I can't even press "YES" as it's grayed. How can I disable UAC and return my account to Administrator? Thanks

A:Admin account changed to Local Account/Can't disable UAC

Please follow the steps in this thread:
Accidentally changed the admin account to a local account

Read other 21 answers
RELEVANCY SCORE 95.6

Hey guys, I have yet another problem/question. I am trying to catch up on all the little jobs that I have been putting off for the last few months.

Todays job is locking down security.

The company that created our main application keeps the servers it runs on maintained and up to date, so they need to have full admin access to the 3 servers it runs off.

Now they connect to us using our Citrix system and up until now they have had Domain admin status. I know this shouldnt be done, but we have a very good relationship with them.

So today I figured I would remove their domain admin status and make it so they are admins of the 3 servers they need to be, therefore limiting what they have access to.

I would normally sort this out by going to the machine they will be working on and adding the user id to the Local Administrators group, however when I go into control panel on the servers they do not have a "useres and computers" option.

So my question is, how can I make them admin of the 3 servers and not have access anywhere else on the network?
 

Read other answers
RELEVANCY SCORE 95.6

Folks,
I have a network laptop with local admin priviledges. When I gave the laptop to our IT department to configure the unit as a corporate network laptop, I had set up a local admin account on the unit. However, when the system was returned to me the local admin account on the laptop had been changed to Debugger Users group. Anyway, in addition to my local Admin account, corporate IT also has a local admin account that they use to administer corporate network computers. I removed my local admin account from the Debugger Users group hoping to move it into the local admin users group. However, this is not panning out. Although, my local admin account will log on locally onto the laptop, it currently has no local group membership on the laptop. I think I now have two options: Call IT Dept. to remotely log onto my laptop and move the account I created as a local admin account which currently has no local group membership or use linux utility to remove the password set on their local group account, in other to have administrator priviledges on my laptop so that I can move my local admin account (currently with no local group membership) to local administrators group on my laptop and ask them to reset that password after or call IT Dept to do it. Any ideas? I prefer not to call IT Dept. on this one.

Thanks in advance,
Joe.
 

A:Windows XP local admin account

Read other 8 answers
RELEVANCY SCORE 94.8

Like the title says. I mean WTF?? It was a custom that a so-called friend of the family conned my mother into buying(at inflated prices, I checked). Told my mom not to trust him but she felt sorry for him because he just lost his job working for a company that make computers. Loser actually has the balls to act like I am a idiot that don't know anything about computers, speaking to me like I am a baby. This isn't the only problem I have but most of the others are manageable. I had to put in a new RAM chip because the one he place in was only had 128 megs, added a 1 gig RAM chip from best buy, and a new sound card because there was no sound card.

Anyways, I can see the disk drive in my computer and it knows when there is a cd in there. I have to manually access the files or .exe for installing things like Microsoft Office in Guest (it basically does not autorun when a cd is place in) but I don't even get that in my admin accounts. It either sits there doing nothing or it tells me to insert a cd when I try right clicking on the disk drive in the admin accounts.

EDIT: I am pretty sure that this problem has something to do with the OS or at least part of the software because I have taken the drives out and placed them in another computer before. Unfortunately the guy that made the thing refused to give me the OS installion disk. Didn't bother to put a CD image on there either.

A:I can read CDs from my XP Home Guest account but not from the other two admin accounts.

You could try this fix:http://support.microsoft.com/?scid=kb%3Ben...p;x=12&y=13

Read other 2 answers
RELEVANCY SCORE 94.8

I have changed the UAC in my (Admin) account to turn it off. I have accounts for 3 other people, regular user accounts.
On those regular accounts, if you try to start several of the games I have installed (LOTRO, Neverwinter, etc.) UAC stops the game from loading, asks if you will allow, then rejects it as you need to be logged in as ADMIN to give permission.

I checked UAC while logged into a regular account, and it is turned on (After I turned it off in ADMIN account). It will not let me change the setting, saying I need to be logged in as ADMIN.

Now, I am NOT going to give my 8 year old granddaughter ADMIN rights, so how do I turn off UAC in that account?

A:User Account Control will not change in non-admin accounts

Hello mac,

UAC settings can only be changed by an administrator. In addition, UAC settings are applied globally to all users on the PC.

User Account Control (UAC) - Change Settings in Windows 10

As a workaround, you could see if using the tutorial below to create an elevated shortcut that a standard user can use without getting a UAC prompt may help. However, this method does not always work for games.

Elevated Program Shortcut - Create for Standard User - Windows 7 Help Forums

Read other 5 answers
RELEVANCY SCORE 94.4

We have a script that installs a program (Office 2007). It then imports some registry file settings. It imports HKLM and HKCU. We have noticed that if this is installed as a local admin, the settings seem to take if we scan the box as a local admin(we are running a security scan to determine this (the security scan checks multiple gpo's supposed to be set by the program/reg imports). If we scan as a domain admin, the system doesn't seem to show they are set. We believe we see the opposite if it's installed as a domain admin. For the domain scan they are set, for the local scan they are not. Does this have to do with how you can change registry entries as a domain admin versus local admin? The registry settings are imported with reg.exe import filename.reg like commands in the .bat script. Any ideas are helpful.
 

Read other answers
RELEVANCY SCORE 94.4

how can i open the local admin account on my system ? i have forgotten the password. do i have to format it right away ?FOTTEM

A:HOW TO OPEN A FOGOTTEN LOCAL ADMIN ACCOUNT

What operating system are you running? Be specific, Windows 7 is an OS, yes, however knowing the version of 7 is important. So if it's Windows 7 Home Premium or Professional or Windows Vista Business, or whatever it is, let us know. Most home versions DON'T have the administrator account enabled.

Read other 2 answers
RELEVANCY SCORE 94.4

Trying to install a program and get error "The system administrator has set policies to prevent this installation."

I have noticed that this error messege is almost selective when it comes to installing programs, some programs I can install without a problem, other times I get this error messege over and over again.

I am try to install using the local admin account, and my account as well, which also has admin priviledges. Both accounts cannot install. Any ideas on what I can do to fix this???
 

A:URGENT!Not able to install on local admin account

Read other 9 answers
RELEVANCY SCORE 94.4

I have a Windows 8 tablet that is setup on a domain. The tablet has lost it's Trust Relationship with the domain and the only way to add it back in my case is to re-join it to the domain using the local admin account which is for some reason locked out. Usually group policy disables this, but for some reason it did not. I have the passwords for the local accounts but a annoying customer tried to gain access to the local admin account and locked it out.

I'm looking for a program that will allow me to unlock the account. I have found several windows password cracking utilities, but I'm really only needing to unlock the account since I know the passwords. I was wondering if anyone knew of a solution, a program, anything to gain access to the tablet.

Right now my only other option is to copy the users data over and re-image the device which I'm trying to avoid.

Thanks!

A:Win 8 - Unlocking local admin account on doamin

We don't provide any help with lost passwords or getting around password protection. Obviously, we can't determine the real intent here, so our policy is to abstain from any assistance in these matters.

From the Tech Support Forum Rules & Conduct
Quote:




ILLEGAL ACTIVITIES

Users may not post hacks, cracks, or give instruction how to pirate any type of software, or anything similar, in any forum of TSF. We do not condone, support or give instruction on any illegal activity pertaining to computer systems, computer hardware, computer software programs or computer related activities. Included in this group of activities are requests for help to circumvent system admin passwords or Administrator settings on networks. We do understand that the majority of requests may be legitimate, but we do not have the means to discern these from non-legitimate requests.

Read other 1 answers
RELEVANCY SCORE 94.4

Is it possible to change local administrator account names on PCs across a network to a uniform name by running a login script? I'm pretty sure it is possible, but I really need to know where I could find such a script.

TIA,

roto
 

A:Script for changing local admin account name?

Are all these windows machines? Or are you running in a mixed environment? Is this a workgroup or domain environment? Are the machines running a remote control client (Altiris, ZenWorks, etc.) of some kind?

Do you actually need to rename the account? Or are you just looking for a standard local admin account?

If it is a Windows environment I'd recommend you write a script that creates a user on the local machine, assigns the user to the local administrators group, and creates a password for the new account. Next, have the script disable the local administrator account. Run the script against all the machines on the network and you're there.

This would be a great intro to WMI scripting and Microsoft's script-o-matic would get you started.
 

Read other 1 answers
RELEVANCY SCORE 94.4

I would like to setup an Local Admin account named "TOM". TOM account should be the account that is used when the laptop is first boots up after installation.

With Windows XP, I was able to setup a Administrator "TOM" account without an additional Administrator Account. I would like to do the same in Vista/Windows 7.

A:Setup up Local Admin Account unattend

  
Quote: Originally Posted by Senathon


I would like to setup an Local Admin account named "TOM". TOM account should be the account that is used when the laptop is first boots up after installation.

With Windows XP, I was able to setup a TOM account without an Administrator Account. I would like to do the same in Vista/Windows 7.


seneathon

Ok you can sertainly create a tom admn account but not on first boot, I am confused.
First you say Tom admin
then Tom account without an admin account?

Could you explain

Thanks

Ken J

Read other 5 answers
RELEVANCY SCORE 94.4

I have a Windows 8 tablet that is setup on a domain. The tablet has lost it's Trust Relationship with the domain and the only way to add it back in my case is to re-join it to the domain using the local admin account which is for some reason locked out. Usually group policy disables this, but for some reason it did not. I have the passwords for the local accounts but a annoying customer tried to gain access to the local admin account and locked it out.

I'm looking for a program that will allow me to unlock the account. I have found several windows password cracking utilities, but I'm really only needing to unlock the account since I know the passwords. I was wondering if anyone knew of a solution, a program, anything to gain access to the tablet.

Right now my only other option is to copy the users data over and re-image the device which I'm trying to avoid.

Thanks!

A:Win 8 - Unlocking local admin account on doamin

We don't provide any help with lost passwords or getting around password protection. Obviously, we can't determine the real intent here, so our policy is to abstain from any assistance in these matters.

From the Tech Support Forum Rules & Conduct
Quote:




ILLEGAL ACTIVITIES

Users may not post hacks, cracks, or give instruction how to pirate any type of software, or anything similar, in any forum of TSF. We do not condone, support or give instruction on any illegal activity pertaining to computer systems, computer hardware, computer software programs or computer related activities. Included in this group of activities are requests for help to circumvent system admin passwords or Administrator settings on networks. We do understand that the majority of requests may be legitimate, but we do not have the means to discern these from non-legitimate requests.

Read other 2 answers
RELEVANCY SCORE 94.4

Hello,
Just updated to 8.1. Still undecided. Specifically I somehow managed to get the admin apps shown on the was M$ account, now my local account start page. I can not figure out how to get rid of them. I hope someone with more experience can guide me.
Also can not figure out how to put the admin apps in my admin account.
Thanks for all assistance!
glennc

A:Put admin apps in local account and can't remove

Hello Glenn,

Please go ahead and post a screenshot of this to see if it may help to ID the issue.

Do you mean the Administrative Tools on the Start screen by chance?

Administrative Tools - Hide or Show in Windows 8

Read other 5 answers
RELEVANCY SCORE 94.4

I have been using Windows 10 for months with only minor issues. I log in today and try to make a change and was unable to do so. I rebooted and when I logged in, it said I had a local account. Between yesterday and today, somehow my admin account was changed to local by windows. I am unable to fix this problem because I can't login as admin now. When I go to user accounts in control panel, it says my account name and below it, Local Account AND below that, Guest account. Any ideas?

Read other answers
RELEVANCY SCORE 94.4

Hello, I am on a domain at my job and amd setting up a laptop for a user. We always set everyone up on the domain, but I am wanting to set up a local admin account, not on our domain so they cannot access all of our files. What is the best way to go about this?

A:Creating a local admin account NOT on domain

Hello Mike,

I don't have any experience with domains, but you might see if the local built-in elevated Administrator account may work for this.

Built-in Administrator Account - Enable or Disable

Hope this helps.

Read other 2 answers
RELEVANCY SCORE 94.4

I work for an MSP and our policy has always been no local admin rights for anyone (for obvious reasons).
Recently we've started getting pressure from one of our clients to allow their Dev team to have local admin on their machines - claiming they cant do their jobs without it. It doesnt happen often, but occasionally they call up asking to have Software X installed
/ something updated / whatever, and we'll do it straight away, no problems. Anyway, they dont like doing things this way and would rather be able to install their own software/updates/etc. Which I guess is not an entirely unreasonable request from a Dev team.
Anyway, we've discussed it here internally and it's a pretty firm no, your not getting local admin. But we still want to keep the customer happy, so looking for alternative solutions.
One idea we had was to create a second account for each of the Dev users (user1.admin or similar) and add that account to the local admins group on their individual computers. Would it be possible to restrict that account to the point where they cant login
to the desktop and only use it to RunAs? I wouldn't be so worried if there was a UAC prompt / actual thought going into it every time something was happening as admin. Obviously our contract with them would need to be updated to include "with great power
comes great responsibility - don't break stuff!"
Or is there a better way? How does everyone else deal with users who "need" more control over the... Read more

Read other answers
RELEVANCY SCORE 94

Can a local user acount with admin privelages be created in users as a local machine acct?

Read other answers
RELEVANCY SCORE 93.2

Hi Mr.Bosses.  
My question is the command line Schtasks.exe. I want to create a task with local administrators member and run the task under domain user logged on. And run only ONCE.

Example:
I was logged on with user Domainuser on windows 7 platform.
C:\Windows>schtasks /create /tn "Reg" /tr "regedit.exe" /sc once /st 23:55 /ru Administrator /rp Password /RL Highest 
Then I got this:
SUCCESS: The scheduled task "Reg" has successfully been created. 
Then 
C:Windows>schtasks /run /i /tn Reg (This place could use /u Username /p password option but I dont know why should use it.)
INFO: scheduled task "Reg" is currently running. 
SUCCESS: Attempted to run the scheduled task "Reg". 
Seemed okay But the task was actually not run without any log or error message. This task Only run under domain user's permission, just like this. 
C:Windows>schtasks /create /tn "Reg" /tr "regedit.exe" /sc once /st 23:55 /ru DomainUser /rp Password /RL Highest 
SUCCESS: The scheduled task "Reg" has successfully been created.
And right here I have to open Task Scheduler GUI and change the option "Run whether user is logged or not " to "Run only when user is logged on" then the regedit.exe will be running. 
C:Windows>schtasks /run /i /tn Reg 
INFO: scheduled task "Reg" is currently running. 
SUCCESS:... Read more

Read other answers
RELEVANCY SCORE 93.2

Hello guys,

Please help me find a way to solve my problem. Yesterday when I first set up Win10 I have created a windows account with my email. Soon after I have realized that my C:\Users\... folder was messed up, it was a shorter version of my email so I decided to swith to a local account instead and to my huge surprise I have love every right to change anything. I have tried every solution I have found on the internet. I am able to boot in save mode but the cmd doesn't point to the system32 so I cannot execute NET USER ADMINISTRATOR /ACTIVE:YES.

I spent hours and I couldn't fix it, I even switched back to the win10 account and I still do not have any rights to make changes. I can't even make changes in control panel in safe mode. It's getting frustrating and after the update the solutions on the other forums do not even make sence anymore.

I just want a local acount with my right name and administrator rights. Please help!

Read other answers
RELEVANCY SCORE 93.2

Hi,

I have Windows 8 on an HP Envy. Please note that I am technologically challenged. A technician had to create a local admin account on my computer to connect to a Xerox printer (it would not recognized my Microsoft Admin account). The technician was able to activate and access the local admin account without switching out of my main admin Microsoft account. I cannot remember the steps: How do I do that? The only option I find is to switch accounts but I only want to access the local account through my regular account. Please help. Thanks. SH

Read other answers
RELEVANCY SCORE 92.8

Issue:
Two weeks ago when I tried to install VLC, internet access (via IE, Chrome and FireFox) for all of my accounts (except admin account) stopped working. Please note, VLC never got successfully installed (I cannot find it on my computer). All browsers from my admin account continue to work. Windows is not able to detect any issues with LAN connectivity (in fact I see the byte count constantly changing).

My setup:
1) I am running windows 7
2)I do not have access to windows install disc or boot CD.
3) I do not have any valid backups or restore points
4) My LAN connection is wired (not wireless).
5) I have uninstalled IE and now have Chrome and FireFox (both of which also do not work on these accounts).
6) I have Norton 360 firewall and AutoProtect always turned on.

So far I have done the following:
1) If I switch the account type of other accounts to administrator - they still don't work.
2) If I create a new account (admin or Std) browsers still don't work.
3) Ran through malwarebytes and adware. I have Norton 360 installed
4) I disabled Norton firewall and Autoprotect, browsers still don't work.
5) With Old Rich's help on the Networking forum, we diagnosed that there is nothing wrong with accessing the network from the accounts on which Browsers don't work (see "Re: Administrator can get on the internet, but other users can't" on networking forum). I am able to successfully ping google.com from cmd window. So he suggested that I create a t... Read more

A:[SOLVED] Browsers stopped working for all accounts except existing admin account

I forgot to mention that proxy server is NOT setup for the accounts in which browsers do not work.

Read other 19 answers
RELEVANCY SCORE 92.8

I just made a non admin user account on my Dell Inspiron (windows xp) laptop. When I went online to sign in under my account (admin) it is no longer there. My name (Penne) is there (and so is my daughters). I click on my name, put my password in and it takes me to the desktop for my daughter and ALL my stuff is gone. PLEASE HELP!!!
I have googled this and the only thing I am seeing is that you need to sign in under an Admin user account to fix this and get my stuff back. THere is NO admin user account so how can I get it all back? I did the F8 and went to restore to previous point and that didnt work. I know there is a way to go to the restore calendar and find a day that her user account was not on there (like last week) so this might work, but I dont know how to find this.
PLEASE help as all of my EVERYTHING is on my user account and I am lost without it all (have a retreat this weekend and I need all of my sheet music and my songs)
Thanks so much,
PENNE
 

A:Lost Admin user account when made non admin account

Read other 7 answers
RELEVANCY SCORE 92.4

Hi, we upgraded from sbs2003 server to sbs2008 server. We removed the pc from the old domain and then added it to the new domain. Something went wrong after we joined the new domain it doesn't see the new domain for login and the local Administrator account has been disabled. The only account available is the guest account. Is there a way to enable the local administrator account again?

A:Can't login to local admin account after joining sbs2008 domain

You can try this but without any slides or full explanation.. I don't know....

If you can go into a user account with administration rights than you can go into command prompt and type:

Note: elevate the dos command to admin

net user administrator /active:yes

If you cannot log into an admin account: than you have to boot into dos from a bootable CD

Read other 4 answers
RELEVANCY SCORE 92.4

I have two users in Win 10. First is My Self an Administrator and second one is a Local User. In Computer Management I stopped sharing of My Self Folder. It is showing now "not shared". In C drive user folders, I clicked My Self Folder and clicked stop sharing but even than Local User is able to view My Self Documents and Desktop etc. Please advise.

Read other answers
RELEVANCY SCORE 92.4

I have a non-admin user who needs to write to different external hard drives all the time. Yes, I can give the user security rights on the external hard drive individually. However, the user will need me to do this everytime unless I give the user admin rights. This is not an option.

So far I have tried the following and have failed:

-removed the user from everyone group (assuming the user was inheriting a right that was preventing him from writing the external hard drive)
-added the user to the power users group
-added the user to secpol.msc > local policies > User Rights Assignments > Take ownership of files or other objects (i believe this would work for interal files but not external files such as external hard drives)

any suggestion is much appreciated.

Thanks,

A:local non-admin account cannot write to several external hard drives

In as a few words possilbe, the users needs the ability to take ownership of files/folders on an external hard drive in order to write to it

First I gave the user ability to 'Take ownership of Files/folders' by doing the following:

start > run > secpol.msc > local policies > user rights assignment > 'Take ownership of files or other objects'

*add the user

. . . not done yet because this only gives the user the ability to 'Take ownership of files or other objects' . . . it doesn't give the user the ability to write to the external drive

*also, since there are ton of steps involved in taking ownership I wanted to make it simple for the user to do this . . . so I installed a registry hack found online to give the user 'Take ownership' option in the right-click > properties menu

*installed the registry hack to give the user the ability to take ownership of 'files and folder' --

. . . explained to user to create folder, then take ownership through the new option added in the prperties menu, then write files/folders to the external hard drive in the newly created folder

Done. This takes admin out of the equation and allows me to maintain strict IT policy of not giving the user admin rights.

Read other 1 answers
RELEVANCY SCORE 92

Hi

Ive stumbled across a problem that has been causing me grief for a few days now, every time I try to access my hard drive (C disk) it says, access is denied. Also, i cant edit permissions because I've lost admin rights. Ive tried many things including unlocking the system admin, this lets me access a few extra things like being able to use the sfc command in cmd, however, it doesn't allow me to access the C disk or change permission because it also has lost admin rights? I fear that this is a bad problem and I don't know how it happened. I have tried restoring to a previous date and that doesn't work either.

Any help and/or advice would be greatly appreciated.

Thanks, Shimin4tor

A:[SOLVED] Access denied to C disk and lost admin rights to system admin account

Hi and welcome to TSF so you have tried win 7 hidden admin Enable the (Hidden) Administrator Account on Windows 7 or Vista
have you installed or downloaded anything in the recent past

Read other 19 answers
RELEVANCY SCORE 91.6

The firm in which I work has a Lenovo PC with Windows 10 installed. There are two user profiles on the computer, the admin and another normal account without administration rights. We have only the password of the account without administrator rights.

The network administrator had left the company surprisingly in without giving the administrator password of the PC and we cannot contact him anymore.

Now we want to install another programme and we cannot do this without an administrator account.

I disabled secure boot and have tried to boot the PC with an Linux USB Stick, but it do not boot from the stick.

Any suggestion how I either can reset the password of the administrator account or create an new account with administrator rights.

A:Windows 10 admin password reset or new account with admin rights

Although there may be techniques to recover a lost password it is forum policy that we do not discuss these here - your best bet would be to visit a local security specialist and get them to recover/reset it for you - and a change to the policy for the replacement admin may be a good idea, I always wrote a list of all passwords and stored it with the Managing Director and also in a fireproof safe

Read other 1 answers
RELEVANCY SCORE 90.8

Recently I did a clean install from the windows installation tool off a CD I made. Soon after logging on and making my first account (again!) I couldn't open the C drive. I messed with the owner options and made my account the owner so I could open it. Possibly before or maybe after (I'm not sure) I realised I wasn't able to use any admin settings, (like add another account or see advanced system settings) open any applications that required admin rights (like CMD or any installation file) or do anything in the system menu. I've tried to look up the solution but can't find anything that fits the description of my problem. Any help is welcome. Thanks in advance for at least reading this.

Read other answers
RELEVANCY SCORE 90.8

Using Win 8.1

First off, the account I'am signed on with is listed as admin type account. It's the one I had to enter my windows account email.
Since installing the new MalwareBytes 2.0 program (which went in without any problem) it put an shortcut icon on desktop. I tried too move the icon from desktop to another folder and it said I needed admin rights to do this. Usually once I click on continue it gives me access and proceeds to carry out the command.
So I followed the tutorial to build hidden admin account. I type in: net user administrator /active:yes, it completed. I signed on to the admin account and tried the same operation and it still asked for admin rights.
What am I doing wrong?

UpDate: MalwareBytes 2.0 has a self protection ability that needs to not be enabled, otherwise everything associated with the Program including program icons located anywhere cannot be moved.

Read other answers
RELEVANCY SCORE 90.8

Hi Guys,

I'm new to this forum (as in this is my first post) so please be gentle with me if this has been answered before.

So anyway I have a standard account with admin privileges, turned off UAC etc... but it doesn't seem to be elevated all the time for example I still see the "admin shield" icon next to some programs on my desktop. Most of the time I have to right click and select "Run as Administrator" from the popup menu and also Windows 8 still asks me when something needs admin mode and do I want to continue.

I have activated the hidden (true) admin account on my PC and when I log into that everything is elevated and great, no more prompts etc... which is what I want. But the problem is it looks very basic, I want to be able to transfer all my settings from my standard admin account to my true admin account, is this possible? I've tried going to system->advanced system settings->user profiles to copy the account across but the copy button is grayed out.

If this is not possible is there any way to make this standard admin account the full type which is always elevated?

Hope someone can help me, I'm getting very annoyed having to give permission for things I want to do all the time.

Thanks in advance

-milw0rm

A:Transferring Standard (Admin) Account to Hidden Admin?

Hello milw0rm, and welcome to Eight Forums.

You could use the tutorial below to elevate your standard administrator account to have the same elevated rights as the built-in elevated Administrator account.

Be warned though, that all Metro Store apps and the Store will not work in an elevated account.

User Account Control (UAC) - Elevate Privilege Level - Vista Forums

Hope this helps,
Shawn

Read other 3 answers