We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Access denied in Vista even when using builtin administrator account

Martin_Radbo asked
Medium Priority
Last Modified: 2012-08-13
I'm logged in with the local administrator account in Vista Ultimate.

But even then I have problem with some permissions. Tried today to use the command:
set time /setsntp:servername and got:
"System error 5 has occurred.
Access Denied"

There are several other things which does not work either but I think this is enough for you to give me some possible sollutions to this.

Watch Question

This is behavior that is by design in Vista.  Even when you are logged on locally with administrative permissions, some actions that require elevation of your priviliges will give you an access denied error message or an elevation prompt.  If it's something that runs from a command prompt, like the example you gave, you'll get the access denied as you described. What you need to do is open the command prompt with administrative privileges.  To do this, right-click the shortcut to the command prompt and click "Run as administrator." Depending on your system configuration, you may or may not get a confirmation prompt.  If a prompt appears, you will either have to click "Continue" or re-type your user name and password (the one with admin rights) to continue. Once you get the command prompt open with administrative permissions, you should be able to execute that command.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


OK, it does work running the command prompt as administrator. Is there a way to do that by default, without rightclick as you describe?

There are also a bunch of other things giving me permissions problem (do not remember exactly what now). Couldn't I rise the account to "highest permissions level" once for all in some way?
Hypercat (Deb)President
The only way to do this is through use of group policies, and it would affect all users who are admin users on Vista machines.  If you have control over group policies for your company, you could put yourself and any other users you want to have these privileges into a separate group and only enable these policies for those users. You can set these following two group policy security settings:
Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options
User Account Control: Behavior of the elevation prompt for administrators...(etc.) - set to "Elevate without prompting"
User Account Control: Run all administrators in Admin Approval Mode - set to "Enable"
There will still be some things that will require you to run a program or command prompt using the "run as administrator" option, but many fewer.  The downside of this is that if you have a login script running to map drives, etc., it will no longer run for administrators logging on with the privilege elevation set this way.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.