How do I make myself always administrator?

[juanantoniod]

Excellent Resource Referrals!

WindowsStar,

Thanks for the excellent referrals! I will definitely check them out.

FWIW, I actually think that my point of view goes back to DOS, when you could do whatever you wanted on a machine, just by typing a simple command. And then Apple had to come along and screw it all up! I guess old habits die hard!

 

[Barman58]

Okay, guys, please excuse me for my ignorance, but I'm a little confused...

I thought that my one and only account on this computer, "Antonio", was the Administrator. Until, I got error messages telling me that I did not have administrator rights or privileges, and was denied access to view even simple TXT files. Then, following instructions on this forum, I "enabled?" the Administrator account, and after a couple of reboots, another login Account appeared on my Windows login screen, besides just mine. So, does this mean that I actually was not the Administrator, and did not have Administrator rights, but by creating the Administrator account, this account had them? Besides Windows limiting a "users" access to their own files, and wanting that, from a day-to-day standpoint, can you give me some examples of how I would use a separate Windows Administrator account?

And, just for clarification, can you please confirm that there are actually 3 different types of Windows Accounts, 2 of them being called "Administrator"? There is the User Account Administrator, the System Administrator Account, and the User Accounts, right? The User Account Administrator can create and modify User Accounts, but does not have System Administrator Privileges. Am I on the right track here in understanding this?

Thanks for your patience.

Due to the inclusion of UAC in win7 there are actually four account levels although two are actually part of the single user ...

Standard user
This user has limited rights and can access only files that are owned by them or available to everyone.

Administrator group account member running as standard user
This is the normal status of the administrator account formed on installation and any other user created as an administrator account. It has the same rights as the user above.
Administrator group account member running as Administrator
This is the same user as above but running in elevated mode this is either due to the UAC prompt or by right clicking an application icon and selecting "Run as Administrator". This user has access to all files and folders with administrator group or everyone permissions allocated

The hidden administrator account
This account works akin to the way that the administrator accounts did in XP or the Root account in *nix systems it is totally unaffected by UAC or permissions settings. This account is normally hidden (disabled), and is normally only enabled for special issuesHope this explains things

 

[juanantoniod]

Nigel,

Thanks for the clarification. This is kind of a moot point now, and may be a rare occurrence, but this is what is prompting me for just a little more clarification:

I ran the elevated command prompt, by right clicking and run as admin on command prompt accessory. Then I ran sfc /scannow, thinking that it would do something helpful [for my WMP and IE "issues"], and when it created a log file, I thought it would be helpful to read it. (What I learned after finally gaining access to it is that it was very cryptic.) Anyway, I double clicked on the TXT log file, and was told, "ACCESS DENIED". That irks me...it is just a txt file! You can't right click on this file and "run as admin" or "open as admin", so the only way I could figure, from the postings here, is to enable the hidden Administrator Account, which a poster here showed me how to do, and the Brink tutorial was helpful also.

So, I guess my question is: Is this "Access Denied" a rare occurrence, or should I have the hidden Administrator Account enabled for times like this? Or, put another way, are there other times when I might need the hidden Administrator Account, and should enable it, and have it already set up for those times?

Thanks for all the "hand-holding". I'm sorry for my ignorance.

 

[CarlTR6]

Did you try to take ownership of the file?

 

[Barman58]

The access denied message is generated because of the location of the file you are trying to access - all of the system areas are administrator only, so any file that is saved in the windows32 folder will not be accessible for a standard user account - either the standard user or the un-elevated administrator account.

There are various methods to work around these problems

• Use of the Take ownership option as suggested by Johnathon_King ( EDIT and carlTR6 )
• Running windows explorer as administrator (type explorer into the start search bar right click on the shortcut that appears and run as Admin)
• Switch off UAC temporarily
• Use the hidden administrator

I would personally suggest that the order shown is my preferred order

I work a lot with system files on a daily basis and I run with UAC on and the Hidden administrator still hidden without any issues - so that would be my recommendation, but of course you should use whichever method works best for you.

 

[juanantoniod]

I actually just ran across the "take ownership tutorial" today, so no, I did not try that. But, I still wonder if I shouldn't just have the Administrator account on hand, or are these "Access Denied" messages pretty rare? FWIW, just from glancing over the tutorial, it seems easier to just execute the command to enable the hidden administrator account, than to do the take ownership tweak. :huh:

 

[juanantoniod]

Thanks again, Nigel!

The access denied message is generated because of the location of the file you are trying to access - all of the system areas are administrator only, so any file that is saved in the windows32 folder will not be accessible for a standard user account - either the standard user or the un-elevated administrator account.

There are various methods to work around these problems

• Use of the Take ownership option as suggested by Johnathon_King ( EDIT and carlTR6 )
• Running windows explorer as administrator (type explorer into the start search bar right click on the shortcut that appears and run as Admin)
• Switch off UAC temporarily
• Use the hidden administrator

I would personally suggest that the order shown is my preferred order

I work a lot with system files on a daily basis and I run with UAC on and the Hidden administrator still hidden without any issues - so that would be my recommendation, but of course you should use whichever method works best for you.

Nigel, Thanks a lot for outlining your routine. That explanation is most helpful, because I can see the methodology. And, if you keep your Hidden admin hidden, then I see no reason why I cannot do so also. I will use these as advised. It just makes sense now!

Thanks for your follow through, I appreciate it!

Take good care,

 

[WindowsStar]

WindowsStar,

Thanks for the excellent referrals! I will definitely check them out.

FWIW, I actually think that my point of view goes back to DOS, when you could do whatever you wanted on a machine, just by typing a simple command. And then Apple had to come along and screw it all up! I guess old habits die hard!

Wow DOS, yep a lot has changed since then. Back in DOS there was no malware and most of the viruses were just annoying, now-a-days they can destroy your machine or send 10 million SPAM. UGH!

 

[CarlTR6]

I actually just ran across the "take ownership tutorial" today, so no, I did not try that. But, I still wonder if I shouldn't just have the Administrator account on hand, or are these "Access Denied" messages pretty rare? FWIW, just from glancing over the tutorial, it seems easier to just execute the command to enable the hidden administrator account, than to do the take ownership tweak. :huh:

It is not often that you have to use "Take Ownership". It is easier to use it than switch over to the hidden Admin account just to do one or two quick operations. I have found it works really well.

Not that I am comparing myself to Nigel by any means, but I use the same priorities he does. I rehid my hidden administrator account after experimenting with it for a few weeks.

 

[juanantoniod]

You will want to read: Mandatory Integrity Control - Wikipedia, the free encyclopedia It explains how accounts can be Administrator without Administrator power all the time. Medium = Standard User Power, High = Administrator Power.

If I didn't know better, I would swear that you were testing me with this to see if I actually went to read it, which I did. Unfortunately, it was talking about things that I am clueless about, for the most part. I got the 'gist' of it, however, so it was worthwhile. Thank you.

 

[Philip Donald]

Hi all

When I type sfc /scannow from cmd prompt run as administrator, I get the message Access is Denied. I have full administrator rights, but I don't get anywhere. I tried the command net user /administrator:enable (and with true at the end) but that gave me a syntax error. I've included a screen shot with both outcomes. Please help.

Grace and peace
Philip

 

[Philip Donald]

Okay, just activated the Hidden Administrator and still getting the Access is Denied message. Is something seriously wrong here? I even tried running the sfc /scannow from various directories to see if I could get a positive response. Help!

 

[slurp812]

Did you disable UAC?

 

[Philip Donald]

It appears the version of Windows was installed without license (by dealer) and it was a badly hacked version. Must get a new version of Windows.

 

[kiltylyn]

Right click cmd prompt and select "Run as Admin".HTH.

thanks that worked :0)

 

[maxie]

Any more problems Linda

 

[kiltylyn]

Hiya pal
Im doing great, Im on my laptop and its running great , its like it was when new ( 3 years) once i had got that AMD graphics adapter i was up and running, shame it wasn't on my drivers disc or the website under my named laptop which could have caused less:banghead: and i never even had a dram through it all lol Tonight I will start putting back on my most used programs and browsing , so glad to have come across you, you do the group proud by giving your support and knowledge , that's important me when you come to these communities to pick your brains lol The help has been wonderful, thank you.
ps., I even took your advice, got the link here for backing up and thats what i done. There is so much info on here its amazing, you are a great team, i will stay in touch from Bonnie Dundee :0)
Linda

 

[maxie]

Hiya Linda There are many Tutorials on the Forum you should find them very helpful . There is also Experts in every category .. So if you ever need help in the future you know where to come .. Everyone here is just glad to help in any way they can .. Good luck for tonight dont Install to many programs at once do it gradually over the next few days

 

[Minileo]

Little help please

Hello,
I would appreciate if someone could help me with getting my administrator rights back. I have my laptop but because i'm still in University , my mother put on the time limit (please don't judge ) and i cant turn it off.It seems she was able to stop me from using the cmd, local groups and any other possibility to get my admin rights back. If there is any way i can , please help

 

[PhoenixRising1]

Yes, I know this is an old thread....but I came across it, so....

the unhappy faces are ('s :'s I didn't have time to figure out how to fix it....
To be completely elevated ans admin right click on the command prompt icon, click "run as administrator". It should already be at "c:\windows\system32" if it isn't then get there. Once there, type "net user administrator /active:yes/no" Yes turns it on obviously. Then Log off and when you reach the login screen you will see a new account called Administrator. This administrator is the Hidden Admin and has full access to the computer especially above the admin accounts you can or have created.
Use the Hidden Admin for what you need done, then go back to command prompt and turn off the Hidden Admin. You don't, or shouldn't, want to leave that open and available to anyone accessing your computer physically or through back doors, like your firewall. Your computer can be basically destroyed and if you don't have a windows installation disc, which seems common these days for some dame reason, then you're screwed.

Other scenario: If you need to open a file but you're getting the "access denied" prompt, click on Start, then click on All Programs, then click on Accessories, then Right click on Windows Explorer, then navigate to the item you wish to open....you should be able to open it. HOWEVER, I have been having a constant battle with my computer about what permissions I am allowed to have. Microsoft simply dumbfounds me on a regular, not always, but regular occasions such as this.

In any event, if all else fails and you want to control a specific folder, drive, or document, whip out the Hidden Administrator, right click Command Prompt TWICE...two windows, it's easier trust me.....set the windows side by side by dragging them to the sides of the screen, in the right window type ICACLS and that will bring up a large instructional sheet on how to use it. Play with it later but be extremely careful, for now focus on the "permissions" and center them in the screen so you can refer to them easily.
Next, in the Left window type ICACLS "file/drive/folder name" /grant[:r] "name of user"and begin typing in every permissions you want that user to have from the top of the stack to the very bottom) then type /T /C that will give you control of everything. There.
This is an example of the string c:\icacls Pictures /grant[:r] Lukef,m,rx,r,w,d,de,rc,wdac,wo,s,as,ma,gr,gw,ge,ga,rd,wd,ad,rea,wea,x,dc,ra,wa) /T /C

This will give the user "Luke" full access And full Special permissions to the "Pictures" folder. You could take ownership, but I've found that it grants me no more rights than a normal, useless administrator account and I've been dealing with for a long time. I wish someone could teach me some more things lol

But, when it is done, hit the Up Arrow to display your last command and remove everything after the name of the user and type "NP) /T /C" This will stop inheritance which I've run into a huge amount of problems with as well.

Hope this helps. I found this thread looking to permanently elevate my admins also but I don't see an answer that I haven't already tried. If anyone knows how to actually, literally elevate all normal admins please let me know...I want to run my computer instead of forcing it to do what I want every time......
Hopes this helps someone....... luv ya all