Administrator vs User

Discussion in 'Windows 7 Software' started by jyeagley3, Nov 5, 2011.

  1. jyeagley3

    jyeagley3 Honorable Member

    Joined:
    Jun 23, 2010
    Messages:
    29
    Likes Received:
    4
    I was a little insecure about losing my files at one time and I created a 2nd account with Administrator priviliges. And I have the Guest Account active. Now I always log into the same account that supposedly has the administrator privileges yet at times I get a message that I need to contact the administrator for permission to change or delete an account. How can this be...I AM the administrator.
    Question: Is there any reasonablly easy way to rid the cumputer of all administrators except the one I log in with so properties > security > for files and folders sees only one administrator and allows that administrator to do all and anthing with the files and folders?
    I know I need to be careful about deleting accounts 'cause if the account I delete is an administrator of some files or folders I probablly won't have access.

    Any and all help greatly appreciated.
    Would like tried and true replies so as not to really mess up my PC.

    Thanks
    Jerry
    :confused:
     
  2. Drew

    Drew Banned

    Joined:
    Mar 25, 2006
    Messages:
    3,575
    Likes Received:
    146
    Jerry,

    Properly speaking there should be only 1 Admin acc't & all others Limited. Now, the Admin acc't/user, be it named Jerry, User or Herman, doesn't matter... even that acc't, when trying to do certain things, will get asked by the UAC (User Account Control) for 'permission' or "Elevated Privileges". IF you want to make sure the profiles are in order run MBSA 2.2 It will quickly tell you what it doesn't like, why & how to correct things, in no uncertain terms.

    Oh, & by the way, if you don't care to have the screen dimming when the UAC bit comes up, move the UAC slider down 1 notch.

    Regards,
    Drew
     
    #2 Drew, Nov 6, 2011
    Last edited: Nov 6, 2011
  3. Medico

    Medico Senior Member

    Joined:
    Sep 20, 2011
    Messages:
    1,158
    Likes Received:
    65
  4. Trouble

    Trouble Noob Whisperer

    Joined:
    Nov 30, 2009
    Messages:
    13,845
    Likes Received:
    833
    Hello Jerry.
    The basic underlying concept that is difficult for most of us to get our head around is that, if you log on to a Windows 7 Computer that has UAC (user account control) enabled, with an account that is a member of the local Administrator's Group, you get what Microsoft calls a "Filtered Access Token" as well as an "Administrator's Access Token". During normal operation your account then functions as a normal user account, except in those instances that may require elevated permissions in which case you get the annoying prompt to provide administrator credentials, in which case simply or normally clicking continue or OK will generally allow you to invoke your unfiltered access token and thereby support whatever action provoked the prompt for elevated credentials.
    There is a lot of very confusing information regarding UAC and Filtered Access Tokens available if you want to use Google to do some research but as I said it's a bit confusing and muddled at best. Here is a relatively simple reference which may help you better understand what might be going on under the hood of Windows 7 regarding this topic.
    SOURCE: Programs may be unable to access some network locations after you turn on User Account Control in Windows Vista or in Windows 7
    You seem to already know that you need to be careful regarding the handling of other accounts on your machine, and always make sure you preserve one administrator account. I might suggest using either an elevated command prompt and type
    net user UserName /active:no (where UserName is the account you are wanting to deal with) to disable the account, or
    net user UserName /active:yes (where Username is the account you are wanting to deal with) to enable the account
    or by using the Local User Manager Console by typing
    lusrmgr.msc
    into the search or run dialog box to launch the console (if you are using Windows 7 Pro or higher)
    and using the GUI to enable or disable accounts before deleting any accounts.
     
  5. jyeagley3

    jyeagley3 Honorable Member

    Joined:
    Jun 23, 2010
    Messages:
    29
    Likes Received:
    4
    Wow, that's an awful lot of information. I'm going to try to digest all of it and see what I may do. Thanks so much!
    Jerry
     

Share This Page

Loading...