Printable View
My little brother gets on one of my laptops running vista and right clicks on my main drive (c:) and denies me access to it!
I don't have the super user (admin) turned on because I never had a need for it, until now! So I can't chose anything to reverse it, because I am not the admin...
system restore, user account, etc... all "access denied"
even in safe mode!
So, anyone have a solution for this?
I dont know if there is a solution?
Are you able to copy the stuff to another drive or network share?
Format ?
:(
Use something like SuperERD Commander to create an admin account and log in with that and take ownership of the local disk and then grants priv's to your normal user account.
Are you sure your regular user account is not also an admin account?
Also, did you specifically disable the administrator account or just never use it yet?
AFAIK you can't turn off the administrator account. Having said that, if nobody has admin access how is your brother able to change the ACL of C:?
Am I right in thinking that you don't have any account that works? or is it just that you do not have sufficient privilege?
How was your little brother able to access your computer with administrative rights?.............
I am not that familiar with Vista and am wondering exactly what he did.
AFAIK Windows should prevent you from creating a situation where there is not at least one account with admin privileges.
In Vista, the built-in administrator account is disabled initially - a "computer administrator" (eg, owner) has to manually enable the account. I haven't run Vista since my RC expired, or I'd be more use on this point.
I was curious about this as well - wouldn't there be some sort of preventative measure against that drastic and/or recursive of a permission setting?Quote:
Originally Posted by nihil
If you have admin powers there's nothing that prevents you from nuking the system.Quote:
Originally Posted by kataline
Does that mean that you can lock yourself out as well?Quote:
If you have admin powers there's nothing that prevents you from nuking the system.
I seem to recall that it was possible in XP, but I thought it had been fixed in Vista.................. probably me being naiive :D
Arpanet
Did you turn off UAC ?
Sorry all, I had class this morning...
He is just like I am/was when it comes to computers... mess around with stuff to see the results! He said he went in through safe mode, right clicked on the c: drive and clicked properties, then denied privileges to the user accounts...
He said when he went in, he didn't deny access to administrator, which says to me that the admin account is active, I just don't know how to access it.
@Cider: No UAC is still on but when I go to do something that requires administrator privileges it says access denied!
@nihil: My accounts work, I just can't access my c: drive or anything that has to do with it! (turns out that when the system files are on that drive, that is ALOT)
any ideas, or is it time to get the magic restore/re-install disc out?
Is it possible to temporarily add this machine to a friend's/co-worker's domain? I don't know if Netdom (used in conjunction with runas) or Psexec would work on the Vista systems but, it might be worth a try. Domain Admins will automatically get added to the Administrative group once you add a machine to a domain and maybe you reset the local accounts.
Just a quick thought. I apologize if this is not a plausible idea. I'm a bit busy dealing with Symantec issues today :eek:
Okay... I am pretty sure I am screwed here!
this is the update: I activated the administrator account via
'net user administrator /active:yes'
I still have the same problem, even with me being logged in as the admin!
I tried to take ownership of the drive with 'takeown' program, with no success.
So unless someone knows how to change the privileges without having access to the drive, it is time to chalk this one to the loss column and waterboard my little brother lol.
OK, I think that I see a part of it, but it does raise some interesting questions for me.
If he went in through safe mode then I think he would have seen the otherwise hidden "Administrator" account.................. anybody confirm or deny this for Vista?
You have not deliberately activated it, so it is dormant.
This is very interesting, as he seems to have done it almost inadvertently (OK apart from "messing around")............. I am entertaining relatives right now, but will look around in more detail tomorrow.
Thanks for bringing this one up............ if your bro can do it, then I am sure I will be getting some fairly shortly .............. like the kids got it for Christmas............ six weeks to stop complaining that it isn't like XP, and figure out how to get the game controllers and printer to work.............
I guess they will start to serious messin around about now? :D
So................. I expect to see something similar quite shortly,
Cheers,
Johnno:)
Darn, my heart started beating a lil faster once I saw nihil post =)
well I am not sure that just any young person could do this, not assuming that your relatives are not completely computer literate, but...
After the torture began, he spilled that he was trying to setup account restrictions like those you see on his school network!
Who said that torture shouldn't be used! a lil plastic wrap and a glass of water can get anything out of people =) just kidding!
turns out that my restore disc is at my house, so until this weekend I will have to resort to saving things on my usb drive... So feel free to add suggestions on fixing this problem until this weekend :)
There are differences between an account that has admin privilages, and an account that is admin. The admin account is disabled by default. You can access and enable it via the User Accounts Control Panel. You must also disable ALL other user accounts with admin privilages before you reboot into the admin account.
When your bro booted via safe mode, he was automatically placed into the admin account, which is why he was able to lock out the drive.
Hi there ArPaNET,
I will take a closer look Thursday. Have you tried logging in as "Administrator" or "administrator" with a blank password?
Not my relatives............. those of customers I am thinking :D
I am afraid that I don't have a Vista box on hand at the moment to check it with, so it will have to wait a little bit.
From what I understand, those options are no longer available?Quote:
You can access and enable it via the User Accounts Control Panel. You must also disable ALL other user accounts with admin privilages before you reboot into the admin account.
:(
I think I may have found something.
If you can boot to Windows in safe mode, go to Administrative Tools > Computer Management > System Tools > Local Users and Groups > Users. There you will find the elusive Administrator user. Go into that profile and see your options.
If you can't get that far due to a password lockout, I would ask your little bro to give you the password or discover the default password if he didn't set one. I didn't try to experiment with the settings, as I don't need the headache that you are having right now trying to figure it out.
Hope that helps, and sorry for wasting your time if I'm just suggesting things that you've already tinkered with.
O
I did succumb to my curiosity and tinker with the settings. I'm kind of thinking that if you re-disable the super-Admin account (and check yours to make sure that little bro didn't tinker with it), that things may return to normal. I'm not certain of this, as I've been using Vista in one form or another for 6 months and just now discovered this area of the OS. It's like a hyper-paranoid version of Ubuntu Linux, while being more vague and touchy.
I'm not sure if you would have to boot to safe mode or if its possible in normal mode as I dont have a Vista Box to play with. have you tried right clicking on the drive and going to the security tab... and make sure your account is in the "group or account" list and that it has full control. you may have to attempt to take ownership of the drive.
I know you will run into this issue if you remove all accounts from this list in
2k/XP just not sure about vista... Its worth a shot though.
Have you tried right clicking on the folder as administrator and adding your account back by using the "security" tab? Or tried using cacls to give yourself permissions?
http://technet2.microsoft.com/window....mspx?mfr=true
http://technet2.microsoft.com/window....mspx?mfr=true
If you have been specifically denied access to a file, you will have to remove that explicit deny before you can take ownership.
I just checked, the "administrators" group has ownership right on the my c: root. I also checked, and you can restrict an administrator from having the "take ownership" right by doing a deny on full control for the "users" group. By default the administrator account will always have the "take ownership" privilege, but you can override that with an explicit deny.
Hey all, I forgot to post my update. With it I will answer some questions too:
Ouroboros I tried computer management with no luck, it prompted me saying that the service was not available on my computer (or something to that effect)
moxquito everything that had to do with permissions, or access to the c: drive was denied...
So, I did a clean install, updated everything with my back-ups... and everything is fine now =)
I also showed my little brother the "parental controls" feature on vista...
thanks for all your help though!
When in doubt - format :)