Re: Administators group confusion

Jon,
Thanks for the reply, your suggestion to explicitly start notepad as the
admin user works. Just adding some more information just in case somebody
else has similar issues.

I normally run as a non admin user on the machine and only escalate to the
admin user when I need to. I keep a seperate powershell shell running as this
admin user and run any admin commands using this instance, so to edit the
global profile i will run the following command "notepad
C:\WINDOWS\system32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1"
which fails as I indicated below when I try to save my changes.

As you indicated this notepad process needs some further escalation due to
UAC, so my only way to acheive this is to disable UAC ?
I too would prefer not to disable UAC which means i may face similar
situations, i tried using handle by right clicking and running as
administrator with success.

This probably means that my previous approach of running an admin shell will
not always work.


Thanks
Pat






"Jon Wallace" wrote:


Hey Pat,

This could be a case of UAC kicking in. Regardless of whether you are an
administrator (local) or not, UAC will in essense take away your admin
rights and offer you the chance to use them where required. The problem is
that these propmpts happen for known operations such as starting MMC.EXE.

If you are failing to access a path, it may be down to the fact that
notepad.exe just doesn't have admin rights because they're been taken off
you..

Try right-clicking on notepad and use the run as administrator option, or if
you wish, disable UAC (within user accounts in control panel).

Personally I like UAC but you may want to disable it it you are doing admin
tasks all the time.

Let me know if this doesn't help...

Regards,
Jon

http://www.insidetheregistry.com

---

"PMcG" <PMcG@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:755ED913-387B-4E5F-BCCB-52993B551AA7@xxxxxxxxxxxxxxxx
Hello,
I'm currently trying to save a powershell global profile on a Vista SP1
machine and getting a failure, I would appreciate anybody's help with
understanding this failure

Some background
I have a domain account that is a member of a domain local group who in
turn
is a member of the local administrators role on the machine. I would
expect
this to allow me to act with full
administrative privileges on the box. I verified that I can add a local
user
and this was successful.

When attempting to save the global powershell shell profile @
C:\WINDOWS\system32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1
using notepad I get the following error
"Cannot create the
C:\WINDOWS\system32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1
file. Make sure that the path and file name are correct."

I then tried to use sysinternals handle utility to see if I could view
information on the file access failure but I get "Initialization error:
Make
sure that you are an administrator."

I have spent some time searching on the web without any success.



Thanks in advance
Pat



.

Relevant Pages

  • Re: I turned off UAC
    ... I would rather have it enabled so that I am not on the Internet with full admin rights, like the previous versions of the NT based O/Swhich are open by default O/Sand wide-open to attack/compromise by default. ... The out of the box admin account on Vista that is given to a user or any subsequent admin account that is created on Vista with UAC enabled is NOT a full-rights-admin account. ... what if there's some malware. ... Like I said, nothing is bulletproof not even god's O/S Linux, but UAC on the MS platform is better than have nothing at all, which is the case in fact with the previous versions of the NT based O/S platform, open by default O/S, to help protect the O/S. ...
    (microsoft.public.windows.vista.general)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... The admin-user is only a user with Standard user rights, that must be escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: I turned off UAC
    ... I would rather have it enabled so that I am not on the Internet with full admin rights, like the previous versions of the NT based O/Swhich are open by default O/Sand wide-open to attack/compromise by default. ... The out of the box admin account on Vista that is given to a user or any subsequent admin account that is created on Vista with UAC enabled is NOT a full-rights-admin account. ... what if there's some malware. ... However, network admins take that responsibly for this type of worker by using a network proxy that only allows the users to go to approved sites closing the attack vector and mitigating such damage, as its their responsibility to protect company's interest and not some office clerk, lock them down. ...
    (microsoft.public.windows.vista.general)
  • Re: I turned off UAC
    ... Vista users about virus or malware issues, not like you see on XP. ... I would rather have it enabled so that I am not on the Internet with full admin rights, like the previous versions of the NT based O/Swhich are open by default O/Sand wide-open to attack/compromise by default. ... The out of the box admin account on Vista that is given to a user or any subsequent admin account that is created on Vista with UAC enabled is NOT a full-rights-admin account. ...
    (microsoft.public.windows.vista.general)
  • Re: I turned off UAC
    ... Five Misunderstood Features in Windows Vista ... The User Access Control (UAC) can detect rootkits before they ... full-rights admin like on XP. ... The admin-user is only a user with Standard user rights, ...
    (microsoft.public.windows.vista.general)