Re: XP Home with Two Administrators - Aggravations

Steven L Umbach wrote:
On a clean operating system with default settings both users should be able to do exactly the same things. In your case what may be happening is the user in question is a member of another group that has restrictions applied to it via deny permissions. Check the group membership of the user and administrator to see if both users have the same group membership. You can also use the command net user username [using actual username] to see group membership for a user. Enter cmd in the run box and select OK if you are not sure how to open the command window. In XP Home you need to boot into Safe Mode and logon as an administrator to examine folder NTFS permissions to see if there are any permissions that may be causing the problem. The link below explains more on this.

Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

"Douglas Goodrich" <d.c.goodrich@xxxxxxxxxxxxxxxx> wrote in message news:e6sT9gv$GHA.4672@xxxxxxxxxxxxxxxxxxxxxxx
Having problems with Win XP Home Edition set up with two users, both are Administrators.

My understanding is that Administrators should be able to view and work with system folders, change Internet settings, etc. However, in my case one account cannot do all the things the other can do. For example, the second administrator cannot view unhidden system folders such as 'Program Files' with Windows Explorer, and cannot access Internet Options from the IE toolbar or Control Panel. She can install software, which seems really strange since 'Program Files' is not available to her.

In addition, when the first administrator changes personal settings, they often propagate to the other administrator's account (examples: desktop properties such as monitor resolution, default browser, default email).

Are these conditions normal? If not, any suggestions for a fix?

Would it be better to have one admin account and two basic user accounts, and use the admin account only for restricted or "global" changes?

Thanks in advance for any information that might help solve this.







Thanks for the help. The permissions were a bit messed up, and it seems there were some other strange things going on. But both administrators now have full access to folders and files. I found work-arounds for the two other problems (administrator #2 couldn't change Internet Options, and individual settings such as screen resolution propagate from one user to the other), so things are much better now.

:-)
.

Relevant Pages

  • RE: local administrator on a domain controler...
    ... Account Operators (which can log on locally, Shut down the system and has ... including its own membership and that of the Server Operators. ... a service administrator because it can modify Server Operators, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted group implementation
    ... If I query WMI about local administrator member will I get the removed ... this is normal GPO behaviour. ... account has to be in an OU to which is GPO linked, ... same group membership for more than one computer. ...
    (microsoft.public.windows.group_policy)
  • Re: Restriction
    ... Only a user that is also in the local administrators group ... can manage membership in the local administrators group. ... 'change my account type' and make themselves administrator. ... My question is, as administrator, how do you change the limited account ...
    (microsoft.public.windowsxp.security_admin)
  • admin account
    ... I have been reading in this group that the "Administrator" account should be ... demoted for security reasons. ... I tried to remove its membership as a Administrator, ...
    (microsoft.public.win2000.security)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)