Trouble
Noob Whisperer
- Joined
- Nov 30, 2009
- Location
- N.W. Indiana
Can someone set me straight and clear up a question I have regarding the Windows 7 local user "Administrator".
I have seen both here and elsewhere on the internet, some folks attributing some type of special authoratative privledges associated with this account. And that because microsoft has choosen to disable it by default (strictly for security reasons, as it is a "known" name associated with the highest level of local control) that it has some mysterious super power and is somehow able to perform wonderous deeds that my account which is also an adminstators account is unable to perform. I haven't found this to be the case and was wondering if someone can point me to some definitive documentation that will help me understand this unusually powerful account.
When I right click the administrators account and choose the member of tab, I find that the account is a member of the Administrators Group. When I right click my user account and choose properties, the member of tab shows that I am also a member of the Administrators Group. When I right click the Administrators Group and choose properties I find this description Administrators have complete and unrestricted access to the computer/domain.
I suspect that if someone is having problems with their account which a member of the local administrators group, then perhaps there may be an issue with conflicting group membership and the account may also be a member of the local "Users" group and as a consequence may (probably does) have more restrictive permissions. This issue is easily exposed in Windows 7 Pro and above, by using the member of tab and removing groups other than the Administrators group. However, potential cross group / conflicting group membership is not as easily worked out in Windows 7 Home Premium and below, so I'm wondering if anyone knows, if when using Windows 7 Home Premium or downlevel OS (basic, starter) if when a new user is created and type administrator is choosen, or when a user is elevated to type administrator, is his account then only a member of the Local Administrators Group, or does it still contain an association with the "Users" group and perhaps consequently cause issues with ntfs security permissions and or share permissions resulting in the lesser permission being applied.
EDIT: And Mitchell, please go easy on me. I posted this in the Discussion Forum, because I would really like to discuss it. I realize that the last couple of sentences seem to be asking for help and support, but that is really not my intention. Thanks for understanding
I have seen both here and elsewhere on the internet, some folks attributing some type of special authoratative privledges associated with this account. And that because microsoft has choosen to disable it by default (strictly for security reasons, as it is a "known" name associated with the highest level of local control) that it has some mysterious super power and is somehow able to perform wonderous deeds that my account which is also an adminstators account is unable to perform. I haven't found this to be the case and was wondering if someone can point me to some definitive documentation that will help me understand this unusually powerful account.
When I right click the administrators account and choose the member of tab, I find that the account is a member of the Administrators Group. When I right click my user account and choose properties, the member of tab shows that I am also a member of the Administrators Group. When I right click the Administrators Group and choose properties I find this description Administrators have complete and unrestricted access to the computer/domain.
I suspect that if someone is having problems with their account which a member of the local administrators group, then perhaps there may be an issue with conflicting group membership and the account may also be a member of the local "Users" group and as a consequence may (probably does) have more restrictive permissions. This issue is easily exposed in Windows 7 Pro and above, by using the member of tab and removing groups other than the Administrators group. However, potential cross group / conflicting group membership is not as easily worked out in Windows 7 Home Premium and below, so I'm wondering if anyone knows, if when using Windows 7 Home Premium or downlevel OS (basic, starter) if when a new user is created and type administrator is choosen, or when a user is elevated to type administrator, is his account then only a member of the Local Administrators Group, or does it still contain an association with the "Users" group and perhaps consequently cause issues with ntfs security permissions and or share permissions resulting in the lesser permission being applied.
EDIT: And Mitchell, please go easy on me. I posted this in the Discussion Forum, because I would really like to discuss it. I realize that the last couple of sentences seem to be asking for help and support, but that is really not my intention. Thanks for understanding