Home All Groups Group Topic Archive Search About

Strange privilege loss

Author
5 Apr 2005 2:49 PM
Jaume Tomàs Amella
Dear newsgroup members

Some days ago I noticed some problems in one of our windows 2000 Advanced
Servers. Trying to set up a new virtual web page using FPSE, I got several
complaints about my "lack of privileges". Obviously, I was logged in using
the Administrator account. And, as far as I know, the Administrator account
had the correct settings. Later, I've had similar messages when installing a
new antivirus solution. Other administration tasks, however, where available
as usual. Then, I tried to log in as another user belonging to Domain Admins
group, and there was no problem at all: it was a real administrator. Thus, I
woud be very grateful if somebody can tell me how an administrator can loose
privileges and how to restore them (unfortunately, I'm not the only one who
administers the machine, and I cannot assure that there has not been a
deliberate action to do it; I just can tell that I did nothing).


        Best regards,

           Jaume

Author
6 Apr 2005 6:03 AM
Nick Staff
Jaume-

An administrator is just like any other account - it's privileges (or lack
thereof) are based on the rights it's been granted or denied and the
permissions it's been granted or denied on files, folders, and the registry. 
Admin accounts are governed by the same rules as other accounts (though
sometimes the ability to take ownership can create the illusion that admins
are above the law). If you are gettings access denied messages troubleshoot
it like you would for a user - check group membership and
file/folder/registry perms.

Hope this helps, please let me know if you'd like a more thorough explanation.

Nick

Show quoteHide quote
"Jaume Tomàs Amella" wrote:

> Dear newsgroup members
>
> Some days ago I noticed some problems in one of our windows 2000 Advanced
> Servers. Trying to set up a new virtual web page using FPSE, I got several
> complaints about my "lack of privileges". Obviously, I was logged in using
> the Administrator account. And, as far as I know, the Administrator account
> had the correct settings. Later, I've had similar messages when installing a
> new antivirus solution. Other administration tasks, however, where available
> as usual. Then, I tried to log in as another user belonging to Domain Admins
> group, and there was no problem at all: it was a real administrator. Thus, I
> woud be very grateful if somebody can tell me how an administrator can loose
> privileges and how to restore them (unfortunately, I'm not the only one who
> administers the machine, and I cannot assure that there has not been a
> deliberate action to do it; I just can tell that I did nothing).
>
>                                                                             
>         Best regards,
>                                                                             
>            Jaume