itsupportcci
asked on
No Administrator Access
One of my users has messed up their computers. About a week ago they could no longer change any settings on their computer. So I logged on to the computer with my domain administrator account and I could not change any of the settings. I next tried to logon on to the local computer with the local admin account on got the same error. The error is "you do not have rights to change xxxx"
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes group admin group is fine, I don't have this issue on any of the other 200 boxes on the network. The user told me they had installed a citrix client and the sprint mobile card w/ software before this happened.
I've tried your suggestions McKnife on reseting the security settings and no good. Still the same thing. Funny thing though I was able to un-install the citrix client software but not the sprint mobile card software. I got the error "A user with administrator rights installed this application. You need to have similar privileges to modify or uninstall it".
The original error on the network properties tab is "You do not have sufficient privileges for accessing connection properties. Contact your administrator"
I've tried your suggestions McKnife on reseting the security settings and no good. Still the same thing. Funny thing though I was able to un-install the citrix client software but not the sprint mobile card software. I got the error "A user with administrator rights installed this application. You need to have similar privileges to modify or uninstall it".
The original error on the network properties tab is "You do not have sufficient privileges for accessing connection properties. Contact your administrator"
ASKER
I also did spyware scan Merete and there was none on this machine.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
yeah, that's what I'm about to do. Wanted to fix it if possible since there is a lot of software the user has added.
ASKER
Ok, re ran the resetting of the security settings and now the only thing I can not get administrative access to is network connections. Everything else seems to fine now. Any other thoughts?
ASKER
Ok, that was already done. Here is some more info based off reading that though. Event 1090 in application log is "Widows couldn't log the RSoP session status. An attempt to connect to the WMI failed. No more RSoP loggin will be done for this applications of policy." So basicall the gpupdate I ran to update the group policy on this machine did not work. I followed these directions provided by Microsoft but still not luck. Researching some more now.
User Action:
To investigate the source of the RSoP failure, do the folloing.
1. Review Event Viewer for events logged by WMI and, if appropriate, the extensions that cannot log the RSoP data. This might indicate cause of the problem. - I did not have any other errors.
2. Verify taht the WMI service (winmgmt) is running.
3. Click Start, click Run, type wbemtest.exe and then click OK. Verify that you can access the root sop namespace on the affected computer. - I can.
4. At the command prompt, type gpupdate, and then check the Event Viewer to see whether the Userenv 1090 event or another WMI-related event is logged again. If the problem still exists, stop and then re-start the Winmgmt service. - the error did appear again so I restarted the service and still go the error.
In none of the above actions indentified the problem, see the 'Troubleshooting Group Policy in Windows Server 2003' white paper.
User Action:
To investigate the source of the RSoP failure, do the folloing.
1. Review Event Viewer for events logged by WMI and, if appropriate, the extensions that cannot log the RSoP data. This might indicate cause of the problem. - I did not have any other errors.
2. Verify taht the WMI service (winmgmt) is running.
3. Click Start, click Run, type wbemtest.exe and then click OK. Verify that you can access the root sop namespace on the affected computer. - I can.
4. At the command prompt, type gpupdate, and then check the Event Viewer to see whether the Userenv 1090 event or another WMI-related event is logged again. If the problem still exists, stop and then re-start the Winmgmt service. - the error did appear again so I restarted the service and still go the error.
In none of the above actions indentified the problem, see the 'Troubleshooting Group Policy in Windows Server 2003' white paper.
Hello ITsupportcci
if you have a 2000 CD bootable disc try this:-
With a Windows 2000 CD you can boot up a Windows XP box and start the Windows 2000 Recovery Console, a troubleshooting program.
Windows XP then allows the visitor to operate as Administrator without a password, even if the Administrator account has a strong password.
The visitor can also operate in any of the other user accounts that may be present on the XP machine, even if those accounts have passwords.
Then Try to delete both windows accounts local and admin, then create a new admin account on the computer and restart then try to do system restore.
Also make sure that all windows services are running and workin properly...
if you have a 2000 CD bootable disc try this:-
With a Windows 2000 CD you can boot up a Windows XP box and start the Windows 2000 Recovery Console, a troubleshooting program.
Windows XP then allows the visitor to operate as Administrator without a password, even if the Administrator account has a strong password.
The visitor can also operate in any of the other user accounts that may be present on the XP machine, even if those accounts have passwords.
Then Try to delete both windows accounts local and admin, then create a new admin account on the computer and restart then try to do system restore.
Also make sure that all windows services are running and workin properly...
I was thinking that since they installed this>>The user told me they had installed a citrix client and the sprint mobile card w/ software before this happened.
It my have been running in the back ground, service.
There is also
Windows Installer Clean Up Utility
http://windowsxp.mvps.org/MSICLEAN.htm
It my have been running in the back ground, service.
There is also
Windows Installer Clean Up Utility
http://windowsxp.mvps.org/MSICLEAN.htm
ASKER
Ok, I'll try that tomorrow when I get back in the office, thanks.
ASKER
None of these worked so I reloaded the computer. Thanks for all the effort though from each of you.
There is a way to reset security settings: http://support.microsoft.com/kb/313222/en-us
How to reset NTFS permissions: http://support.microsoft.com/kb/266118/en-us/ (same for xp)