Re: Administrators v Administrator security differences

From: Dave (noone_at_nowhere.com)
Date: 03/23/05 

Date: Wed, 23 Mar 2005 14:49:08 -0500

"Glenn Kreisel" <Glenn Kreisel@discussions.microsoft.com> wrote in message
news:EDD99035-45E9-40A1-A240-FD0F7A2999D1@microsoft.com...
> I have this issuing going on where I can access a piece of software
> when I'm logged in as "Administrator" but I can not access it when I'm
> logged in as "user10" who is part of the Administrators group.
>
> Everything I look at says the "user10" should have the same access level
> as the "Administrator" account.
>
> What are the differences from the "Administrator" account and being part
of
> the "Administrators" group.
>
> HELP
>

The Administrator can be the owner of a file or registry section and exclude
other Administrators from accessing it... however, any other member of the
Administrators group could then take ownership of the file and change the
permissions. But just being a member of the group doesn't give you access
to everything. In fact, even a user who is the owner of a file could set it
so that Administrators can't access it without taking ownership and changing
the permissions.

Relevant Pages

  • Re: Adding XP in another partition users into Vi$ta
    ... If Windows didn't support some mechanism for allowing a group of users to set the owner on a file, the Windows backup program could not correctly restore backups. ... If that were possible, an unscrupulous user could take ownership, do something wrong, and then cover his tracks by giving ownership to someone else. ... It is true that a program can write new information in the Owner field of an objects security descriptor if the process has WRITE_OWNER access to the object, but WRITE_OWNER access permits the caller to change ownership only to the user SID in the callers access token or, if the user is a member of the Administrators group, to the Administrators SID. ... When logged in as a standard user, when you elevate you are logging in with the credentials you supply to the elevation prompt and the elevated program is running under those credentials. ...
    (microsoft.public.windows.vista.security)
  • Re: Adding XP in another partition users into Vi$ta
    ... "The Owner tab shown in Figure 12.19 has no option for giving ownership ... Administrators group, to the Administrators SID. ... When logged in as a standard user, when you elevate you are logging ...
    (microsoft.public.windows.vista.security)
  • Re: Administrators do not have Owner Permissions
    ... An object has a single owner, although this can be the administrators group. ... The objects came into the ownership of those users when they were created, ... Otherwise, consider taking ownership, leaving existing permissions in place, ...
    (microsoft.public.windows.server.security)
  • Re: Folders security, permissions
    ... On two different folders, in the D: ... Owner is set to Administrators ... permissions and just have everything accessible to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: inquiry on putting a block on changing internet settings on IE7
    ... the users from making changes providing Administrators are the owner. ... Right-click and select Permissions. ...
    (microsoft.public.security)