• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 631
  • Last Modified:

Access denied in Vista even when using builtin administrator account

I'm logged in with the local administrator account in Vista Ultimate.

But even then I have problem with some permissions. Tried today to use the command:
set time /setsntp:servername and got:
"System error 5 has occurred.
Access Denied"

There are several other things which does not work either but I think this is enough for you to give me some possible sollutions to this.


Regards
Martin
0
Martin_Radbo
Asked:
Martin_Radbo
  • 2
2 Solutions
 
Hypercat (Deb)Commented:
This is behavior that is by design in Vista.  Even when you are logged on locally with administrative permissions, some actions that require elevation of your priviliges will give you an access denied error message or an elevation prompt.  If it's something that runs from a command prompt, like the example you gave, you'll get the access denied as you described. What you need to do is open the command prompt with administrative privileges.  To do this, right-click the shortcut to the command prompt and click "Run as administrator." Depending on your system configuration, you may or may not get a confirmation prompt.  If a prompt appears, you will either have to click "Continue" or re-type your user name and password (the one with admin rights) to continue. Once you get the command prompt open with administrative permissions, you should be able to execute that command.
0
 
Martin_RadboAuthor Commented:
OK, it does work running the command prompt as administrator. Is there a way to do that by default, without rightclick as you describe?

There are also a bunch of other things giving me permissions problem (do not remember exactly what now). Couldn't I rise the account to "highest permissions level" once for all in some way?
0
 
Hypercat (Deb)Commented:
The only way to do this is through use of group policies, and it would affect all users who are admin users on Vista machines.  If you have control over group policies for your company, you could put yourself and any other users you want to have these privileges into a separate group and only enable these policies for those users. You can set these following two group policy security settings:
Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options
User Account Control: Behavior of the elevation prompt for administrators...(etc.) - set to "Elevate without prompting"
User Account Control: Run all administrators in Admin Approval Mode - set to "Enable"
There will still be some things that will require you to run a program or command prompt using the "run as administrator" option, but many fewer.  The downside of this is that if you have a login script running to map drives, etc., it will no longer run for administrators logging on with the privilege elevation set this way.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now