Re: Don't Administrators have access to everything?


"John W." <JohnW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C5C59638-08AF-4FAE-951C-58B06031806E@xxxxxxxxxxxxxxxx
"Jim" wrote:

"Shenan Stanley" wrote:

John W. wrote:
There are two Administrator accounts on my XP Pro
system, and I recently added a Limited user. All of
the files I had been using were in the Shared Documents
folder, which the Limited users getaccess to. I didn't
want them to have access to some folders, so I moved
those to another folder under C:\ and made sure both
Administrator users had Full Control access to the folders
and files. (Simple File Sharing was turned off long ago.)
One of the Administrators is the Owner of nearly every
file that was moved. Now, NO USER has access to most
of the moved files, not even the Administrator who is listed
as their Owner. I can't figure out what is special about
the few that can be opened, but I thought the Administrators
group had access to all files. What gives?

Look into taking ownership of the files.

--
Shenan Stanley
MS-MVP
--
"John W." <JohnW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:86DA1EB9-7E93-4370-ADFB-82BE440F2ED5@xxxxxxxxxxxxxxxx
I already AM owner! Still, I tried taking ownership again. No luck.
Since when does the owner not have access to the file?

What are the permissions on these files for the owner/creator?
Jim


"Leythos" wrote:

Were they encrypted?

If you're an admin and you take ownership, and you replace permissions,
then set permission for Administrators, unless they are encrypted or you
corrupted the OS, you own them and can access them.


Two answers in one...
1) No, the files are not encrypted.
2) Both Administrators were granted Full Control permissions,
as I stated originally. Some files show Owner having Full
Control and others show Owner having only Special Permissions.
3) I vote for the corrupted OS.

And more: When accessing the Advanced security, I get the
message that I don't have permission to _view_ the settings but
I can _change_ them. Now that's wierd.

New clue #1: The owner is (was) a member of both
Administrators and Users. Is the Users restriction maybe overriding
the Admin privilege? Simply taking them out of Users didn't clear
any problems, but if I give Everybody access, I can open the file.
On the one file I worked with, I could then change Users back to
a limited access and still open that file from the Admin account.
This looks like a feasible, although painfully tedious, path to a
solution.

For item 2):
A member of the administrators group should grant the Owner Full Control
over all files. A member of the administrators group can always do this.

Yes, a member of the administrators group who does not have permission to
view the settings can nevertheless set them. This is normal behavior.

Jim


.

Relevant Pages

  • Re: Shared permissions vs. security
    ... If they need to write to that folder [which should not be the drive/root ... administrators group by default so you are giving redundant permissions. ... It is best practice not to logon as a domain admin to domain workstation ...
    (microsoft.public.win2000.security)
  • Re: Dont Administrators have access to everything?
    ... folder, which the Limited users getaccess to. ... One of the Administrators is the Owner of nearly every ... the few that can be opened, but I thought the Administrators ... If you're an admin and you take ownership, and you replace permissions, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Lets talk about ownership!
    ... They will have the same permissions but the permissions are meaningless as there is no user to match. ... According my previous example the user "Terry" has read/write permissions on folder NickData. ... Ownership doesn't really matter as long as you have permissions. ... XP can be configured in Local Security Policy to make the Admin group the owner for files created by admins. ...
    (microsoft.public.windowsxp.general)
  • Re: Requesting general help with administartion
    ... you can use ntfs permissions to restrict users as to ... root/drive folder permissions so that users have only read/list/execute permissions. ... users can run/install and then exempt local administrators with the enforcement rule. ... I've just set up an XP Pro computer for a friend of mine, he's not so PC savvy and he ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Home Folder Owner
    ... No...The Administrators is listed as Owner. ... ownership of the folder. ... But ownership by WSNTest should happen when the ...
    (microsoft.public.windows.server.active_directory)