Access denied in Vista even when using builtin administrator account

Posted on 2009-02-18
Last Modified: 2012-08-13
I'm logged in with the local administrator account in Vista Ultimate.

But even then I have problem with some permissions. Tried today to use the command:
set time /setsntp:servername and got:
"System error 5 has occurred.
Access Denied"

There are several other things which does not work either but I think this is enough for you to give me some possible sollutions to this.

Question by:Martin_Radbo
    LVL 38

    Accepted Solution

    This is behavior that is by design in Vista.  Even when you are logged on locally with administrative permissions, some actions that require elevation of your priviliges will give you an access denied error message or an elevation prompt.  If it's something that runs from a command prompt, like the example you gave, you'll get the access denied as you described. What you need to do is open the command prompt with administrative privileges.  To do this, right-click the shortcut to the command prompt and click "Run as administrator." Depending on your system configuration, you may or may not get a confirmation prompt.  If a prompt appears, you will either have to click "Continue" or re-type your user name and password (the one with admin rights) to continue. Once you get the command prompt open with administrative permissions, you should be able to execute that command.

    Author Comment

    OK, it does work running the command prompt as administrator. Is there a way to do that by default, without rightclick as you describe?

    There are also a bunch of other things giving me permissions problem (do not remember exactly what now). Couldn't I rise the account to "highest permissions level" once for all in some way?
    LVL 38

    Assisted Solution

    by:Hypercat (Deb)
    The only way to do this is through use of group policies, and it would affect all users who are admin users on Vista machines.  If you have control over group policies for your company, you could put yourself and any other users you want to have these privileges into a separate group and only enable these policies for those users. You can set these following two group policy security settings:
    Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options
    User Account Control: Behavior of the elevation prompt for administrators...(etc.) - set to "Elevate without prompting"
    User Account Control: Run all administrators in Admin Approval Mode - set to "Enable"
    There will still be some things that will require you to run a program or command prompt using the "run as administrator" option, but many fewer.  The downside of this is that if you have a login script running to map drives, etc., it will no longer run for administrators logging on with the privilege elevation set this way.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    Suggested Solutions

    The main issue when installing Vista and XP in dual boot is when you have to reinstall any of the two when something fails, let's say a hard disk failure, a lost partition, virus, etc. What commonly happens is that you lose all your hard work config…
    So who is this article for? If you are like most of the computer users out there, you probably only realize the meaning of 'System maintenance' after something goes wrong. This article is for you if you care about keeping your system working opti…
    The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now