• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 771
  • Last Modified:

No Administrator Access

One of my users has messed up their computers. About a week ago they could no longer change any settings on their computer. So I logged on to the computer with my domain administrator account and I could not change any of the settings. I next tried to logon on to the local computer with the local admin account on got the same error. The error is "you do not have rights to change xxxx"
0
itsupportcci
Asked:
itsupportcci
  • 7
  • 3
  • 2
  • +1
2 Solutions
 
MereteCommented:
Quick fix create a new account for this User.
I would also scan it for any malware.
How to copy data from a corrupted user profile to a new profile
http://support.microsoft.com/?kbid=811151

create a duplicate of an user profile with a different user name
http://windowsxp.mvps.org/dupprofile.htm
0
 
McKnifeCommented:
Have you checked the contents of the group administrators, everything normal in there?
There is a way to reset security settings: http://support.microsoft.com/kb/313222/en-us
How to reset NTFS permissions: http://support.microsoft.com/kb/266118/en-us/ (same for xp)
0
 
itsupportcciAuthor Commented:
Yes group admin group is fine, I don't have this issue on any of the other 200 boxes on the network. The user told me they had installed a citrix client and the sprint mobile card w/ software before this happened.

I've tried your suggestions McKnife on reseting the security settings and no good. Still the same thing. Funny thing though I was able to un-install the citrix client software but not the sprint mobile card software. I got the error "A user with administrator rights installed this application. You need to have similar privileges to modify or uninstall it".

The original error on the network properties tab is "You do not have sufficient privileges for accessing connection properties. Contact your administrator"
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
itsupportcciAuthor Commented:
I also did spyware scan Merete and there was none on this machine.
0
 
McKnifeCommented:
I once encountered a similar problem and I said "OK, this machine has had it" and used an imge to recover it. No further ideas.
0
 
itsupportcciAuthor Commented:
yeah, that's what I'm about to do. Wanted to fix it if possible since there is a lot of software the user has added.
0
 
itsupportcciAuthor Commented:
Ok, re ran the resetting of the security settings and now the only thing I can not get administrative access to is network connections. Everything else seems to fine now. Any other thoughts?
0
 
itsupportcciAuthor Commented:
Ok, that was already done. Here is some more info based off reading that though. Event 1090 in application log is "Widows couldn't log the RSoP session status. An attempt to connect to the WMI failed. No more RSoP loggin will be done for this applications of policy." So basicall the gpupdate I ran to update the group policy on this machine did not work. I followed these directions provided by Microsoft but still not luck. Researching some more now.

User Action:
To investigate the source of the RSoP failure, do the folloing.
1. Review Event Viewer for events logged by WMI and, if appropriate, the extensions that cannot log the RSoP data. This might indicate cause of the problem. - I did not have any other errors.
2. Verify taht the WMI service (winmgmt) is running.
3. Click Start, click Run, type wbemtest.exe and then click OK. Verify that you can access the root sop namespace on the affected computer. - I can.
4. At the command prompt, type gpupdate, and then check the Event Viewer to see whether the Userenv 1090 event or another WMI-related event is logged again. If the problem still exists, stop and then re-start the Winmgmt service. - the error did appear again so I restarted the service and still go the error.

In none of the above actions indentified the problem, see the 'Troubleshooting Group Policy in Windows Server 2003' white paper.
0
 
Mohammed HamadaSenior IT ConsultantCommented:
Hello ITsupportcci

if you have a 2000 CD bootable disc try this:-

With a Windows 2000 CD you can boot up a Windows XP box and start the Windows 2000 Recovery Console, a troubleshooting program.
Windows XP then allows the visitor to operate as Administrator without a password, even if the Administrator account has a strong password.
The visitor can also operate in any of the other user accounts that may be present on the XP machine, even if those accounts have passwords.

Then Try to delete both windows accounts local and admin, then create a new admin account on the computer and restart then try to do system restore.

Also make sure that all windows services are running and workin properly...
0
 
MereteCommented:
I was thinking that since they installed this>>The user told me they had installed a citrix client and the sprint mobile card w/ software before this happened.
It my have been running in the back ground, service.
There is also
Windows Installer Clean Up Utility
http://windowsxp.mvps.org/MSICLEAN.htm
0
 
itsupportcciAuthor Commented:
Ok, I'll try that tomorrow when I get back in the office, thanks.
0
 
itsupportcciAuthor Commented:
None of these worked so I reloaded the computer. Thanks for all the effort though from each of you.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 7
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now