Re: Lack Sufficient Administrator Privileges

Can you open Group Policy editor as in gpedit.msc and if so did you make the
changes I recommended?? Can you use regedit? Are you absolutely sure you are
an administrator. When you run the command net localgroup administrators
does it show that your user account is included? Check the membership of
your user account and make sure it is only administrators and users -
nothing else. The command net user username will show your group membership.
Verify that administrators and system have full control permissions to the
root/drive folder, the program files folder, the \Windows folder, the
documents and settings folder, your user profile folder under documents and
settings folder, and everyone else and make sure that
users/everyone/authenticated users do not have deny permissions to any of
those folders. Try booting into Safe Mode to see if it makes any difference
installing your applications. --- Steve


"Bob Zambenini" <BobZambenini@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BF51ABBD-20C8-4889-BC3A-FA4C5074A5DF@xxxxxxxxxxxxxxxx
> Thanks for your help Steve but still running into 'lack sufficient
> privleges...'
>
> When I tried to install tools from the
> Windows XP CD I get the message I don't have sufficient privledges! This
> happens a lot in installs, like current stuff, like updating Adobe
> Acrobat,
> trying to install Quicktime, etc. But on the other hand, my Turbo Tax came
> and it used an InstallShield that worked fine. So I don't know the
> difference
> on how some Installers work and others don't.
>
> When I tried rsop.msc, I get an error saying Group Policy Error, You do
> not
> have permission......
>
> I have gone through all group polices and opened to Administrators,
> Everyone.
>
> Any suggestions would be most appreciated.
>
> Bob
>
>
>
> "Steven L Umbach" wrote:
>
>> It is not unusual to see some errors when you run that command but as
>> long
>> as everything else was reset that is a good start - particularly user
>> rights
>> and NTFS permissions. If you have disabled simple file sharing you can
>> view
>> NTFS permissions to see how they look. By default administrators and
>> system
>> have full control to every folder with the possible exception that
>> administrators may not have any NTFS permissions to a user's profile
>> folder
>> that would be under documents and settings. Also you want to make sure
>> that
>> there are no "deny" permissions to general groups like users,
>> authenticated
>> users, or everyone since administrators are also included in that group.
>>
>> I would also suggest that if you can open Local Security Policy enable
>> auditing of privilege user for failure only and then see if any failure
>> events are recorded when you attempt to do any tasks. You can also
>> install
>> the support tools from the install disk in the support/tools folder where
>> you will need to run the setup program there to run them and then use the
>> command whoami to find out more about your group memberships and user
>> rights. Below is an example on my computer for a user that is also
>> administrator [me]. Also as far as your Windows Installer problem I would
>> try to open local Group Policy [gpedit.msc] and go to computer
>> configuration/administratitive templates/Windows components/Windows
>> installer and set "disable Windows installer" to disabled and "prohibit
>> user
>> installs" to disabled. Also go to computer configuration/administrative
>> templates/Windows components/Windows installer and set "prevent removable
>> media for install" to be disabled. Since you are using XP Pro you can run
>> rsop.msc in the run box to see your current Group Policy settings which
>> may
>> be restricting you and as an administrator you can reverse the setting
>> [hopefully]. --- Steve
>>
>>
>> D:\Documents and Settings\Steve>whoami /all
>> [User] = "STEVE-XP\Steve"
>> S-1-5-21-1123561945-152049171-1343024091-1003
>>
>> [Group 1] = "STEVE-XP\None"
>> S-1-5-21-1123561945-152049171-1343024091-513
>> [Group 2] = "Everyone" S-1-1-0
>> [Group 3] = "BUILTIN\Administrators" S-1-5-32-544
>> [Group 4] = "BUILTIN\Users" S-1-5-32-545
>> [Group 5] = "NT AUTHORITY\INTERACTIVE" S-1-5-4
>> [Group 6] = "NT AUTHORITY\Authenticated Users" S-1-5-11
>> [Group 7] = "LOCAL" S-1-2-0
>>
>>
>> (X) SeChangeNotifyPrivilege = Bypass traverse checking
>> (O) SeSecurityPrivilege = Manage auditing and security log
>> (O) SeBackupPrivilege = Back up files and directories
>> (O) SeRestorePrivilege = Restore files and directories
>> (O) SeSystemtimePrivilege = Change the system time
>> (O) SeShutdownPrivilege = Shut down the system
>> (O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
>> (O) SeTakeOwnershipPrivilege = Take ownership of files or other
>> objects
>> (O) SeDebugPrivilege = Debug programs
>> (O) SeSystemEnvironmentPrivilege = Modify firmware environment values
>> (O) SeSystemProfilePrivilege = Profile system performance
>> (O) SeProfileSingleProcessPrivilege = Profile single process
>> (O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
>> (X) SeLoadDriverPrivilege = Load and unload device drivers
>> (O) SeCreatePagefilePrivilege = Create a pagefile
>> (O) SeIncreaseQuotaPrivilege = Adjust memory quotas for a process
>> (X) SeUndockPrivilege = Remove computer from docking station
>> (O) SeManageVolumePrivilege = Perform volume maintenance tasks
>> (X) SeCreateGlobalPrivilege = Create global objects
>> (X) SeImpersonatePrivilege = Impersonate a client after
>> authentication
>>
>>
>> "Bob Zambenini" <BobZambenini@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:62DEFB20-8FFB-4453-A97C-D8D776F23234@xxxxxxxxxxxxxxxx
>> >I have XP Pro. I tried the secedit again and here is the part of log
>> >file
>> > that showed errors:
>> > --------
>> > Error enumerating info for
>> > machine\system\currentcontrolset\services\scarddrv.
>> > Configure machine\system\currentcontrolset\services\scardsvr\security.
>> > Configure machine\system\currentcontrolset\services\stisvc\security.
>> > Configure machine\system\currentcontrolset\services\sysmonlog\log
>> > queries.
>> > Error 234: More data is available.
>> > Error enumerating info for
>> > machine\system\currentcontrolset\services\sysmonlog\log queries.
>> >
>> > Configuration of Registry Keys was completed with one or more errors.
>> >
>> >
>> > ----Configure File Security...
>> > Configure c:\.
>> >
>> > File Security configuration was completed with one or more errors.
>> > ----------
>> >
>> > My back up is a disk image but don't believe I have one back to where
>> > this
>> > started occuring. I will look some more on an external hdd.
>> >
>> > Does these log file errors above play into the problem?
>> >
>> >
>> > "Steven L Umbach" wrote:
>> >
>> >> Hi Bob.
>> >>
>> >> Are you using XP Home or XP Pro. If you are using XP Pro did you try
>> >> using
>> >> secedit to restore security settings to default defined levels as I
>> >> described earlier?? Can you access the command prompt, registry editor
>> >> [regedit], or Local Security Policy and gpedit.msc if using XP Pro at
>> >> least
>> >> in Safe Mode? Have you run your malware/spyware programs in Safe Mode.
>> >> What
>> >> does your disk image contain - just data or the whole operating system
>> >> from
>> >> a point in time when everything worked better??
>> >>
>> >> A clean or pristine install would be booting from the install cdrom
>> >> for
>> >> XP
>> >> [slipstreamed disk would be fine if bootable] and selecting the option
>> >> to
>> >> install a new operating system and formatting [not quick] to system
>> >> drive/partition where the operating system lives which will destroy
>> >> everything on that drive/partition. Yes you would have to reinstall
>> >> all
>> >> of
>> >> your applications and I know that can be a bear which is why most want
>> >> to
>> >> avoid a clean install except as a last resort. I don't know if you
>> >> have
>> >> dial
>> >> up or not but you do not have to download/install updates one at a
>> >> time.
>> >> When I repaired my nephew's computer I downloaded and installed then
>> >> all
>> >> in
>> >> one batch though I have a cable modem. If you do get a new version of
>> >> the
>> >> operating system you surely do not want to do an upgrade install with
>> >> the
>> >> state of your computer. --- Steve
>> >>
>> >>
>> >
>>
>>
>>


.

Relevant Pages

  • Re: Lack Sufficient Administrator Privileges
    ... > Can you open Group Policy editor as in gpedit.msc and if so did you make the ... When you run the command net localgroup administrators ... > root/drive folder, the program files folder, the \Windows folder, the ... >> trying to install Quicktime, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Logging on to Domain with user account hide sharing & security tab
    ... Well you don't give many details but only administrators and power users on ... There is a Group Policy setting to hide the ... Group Policy settings are being applied to the user and by what GPO. ... same Organizational Unit, able to share folder, drivers & etc.. ...
    (microsoft.public.win2000.security)
  • Re: Why can USERS install programs?
    ... files folder which does not let regular users write access in a default installation. ... available free tools to reset the built in administrators account password to null. ... yourself to see if you can install the mentioned programs to the program files folder ...
    (microsoft.public.win2000.group_policy)
  • Re: Cant view some hidden files (again)
    ... as the owner with full control as well as administrators (which I belong to ... > and I have already set folder options to view hidden files ... I can sometimes find the dbx files but not any other way. ... My old XP PRO install was on FAT32. ...
    (microsoft.public.windowsxp.general)
  • Re: Software install failing
    ... msi*.log to the user's %temp% folder for each install that is run. ... Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub: ... > The permissions seem to be the same. ...
    (microsoft.public.win2000.group_policy)