Why is standard user able to replace folder ownership with admin?

ossimo

New Member
Hi there,
I have 2 accounts on my Vista Home Premium machine. One is an admin account with password and the other is a standard account without password (UAC off). I have multiple internal hard drives some of which has folders that I want only my admin account to access. I have denied all permissions for the standard account to these folders.
When I login as the standard user and try to open these same folders I get a pop up message saying that I don't have permission to access them and to click “continue” for access. Then I get a second message saying the same thing but there is a clickable link at the bottom to the "security tab" and it's suggesting to use to gain access. Once I click on that I get another "You don't have permission to change security setting" message in the folder properties window under the security tab. At the bottom of that window it's also suggesting to click on the "Advanced" button for special permissions which will lead to taking the ownership from the admin account under the "Owner" tab by clicking "Edit", thus allowing full access to the contents of those folders.
Does that make sense to anyone?
I also noticed that the standard account has the ability to change the type to an administrator account from “User Accounts” in Control panel, is that normal?
 
Last edited:

My Computer

Hi there,
I have 2 accounts on my Vista Home Premium machine. One is an admin account with password and the other is a standard account without password (UAC off). I have multiple internal hard drives some of which has folders that I want only my admin account to access. I have denied all permissions for the standard account to these folders.
When I login as the standard user and try to open these same folders I get a pop up message saying that I don't have permission to access them and to click “continue” for access. Then I get a second message saying the same thing but there is a clickable link at the bottom to the "security tab" and it's suggesting to use to gain access. Once I click on that I get another "You don't have permission to change security setting" message in the folder properties window under the security tab. At the bottom of that window it's also suggesting to click on the "Advanced" button for special permissions which will lead to taking the ownership from the admin account under the "Owner" tab by clicking "Edit", thus allowing full access to the contents of those folders.
Does that make sense to anyone?
I also noticed that the standard account has the ability to change the type to an administrator account from “User Accounts” in Control panel, is that normal?

U need to check in your user rights management.

go to control panel>classic view>administrative tools>local security policy>local policies>user rights assignment the you will be able to find take ownership...... There u can restrict permission for the standard user

Capture.jpg


and for changing the account type, Do u mean that a standard user can downgrade the administrator into standard user? or reset password of administrator?
 

My Computer

System One

  • Manufacturer/Model
    Wipro
    Motherboard
    Intel dq35j0
    Memory
    8 Gb
    Graphics Card(s)
    inter express chipset
    Sound Card
    Realtek
    Monitor(s) Displays
    Wipro
    Screen Resolution
    1024*768
    Hard Drives
    500 gb
    Keyboard
    DELL
    Mouse
    Dell
    Internet Speed
    100 mbps(office lan)
Is this available in Home Premium? Or only in Business,Enterprise,Ultimate?
I reached a dead-end at Administrative Tools.
 
Last edited:

My Computer

System One

  • Manufacturer/Model
    Compaq/SR5130NX
    CPU
    AMD AthlonTM 64x2 3800+
    Memory
    4 GB
    Graphics Card(s)
    NVIDIA GeForce 6150 SE
Is this available in Home Premium? Or only in Business,Enterprise,Ultimate?
I reached a dead-end at Administrative Tools.

:o thanks for hitting right on my head. i misread the thread. That is not available in home premium. Can try that utility
 

My Computer

System One

  • Manufacturer/Model
    Wipro
    Motherboard
    Intel dq35j0
    Memory
    8 Gb
    Graphics Card(s)
    inter express chipset
    Sound Card
    Realtek
    Monitor(s) Displays
    Wipro
    Screen Resolution
    1024*768
    Hard Drives
    500 gb
    Keyboard
    DELL
    Mouse
    Dell
    Internet Speed
    100 mbps(office lan)
Excellent. I will.

Ardneh
 

My Computer

System One

  • Manufacturer/Model
    Compaq/SR5130NX
    CPU
    AMD AthlonTM 64x2 3800+
    Memory
    4 GB
    Graphics Card(s)
    NVIDIA GeForce 6150 SE
Hi guys, this utility is exactly what I need, unfortunately it's not available from the download site anymore (Geocities is no more) and the author's details are not available. Have you guys still got the application downloaded on your local system?
 

My Computer

Found it.
 

Attachments

  • VHPUserMgr.zip
    33.6 KB · Views: 129

My Computer

System One

  • Manufacturer/Model
    Compaq/SR5130NX
    CPU
    AMD AthlonTM 64x2 3800+
    Memory
    4 GB
    Graphics Card(s)
    NVIDIA GeForce 6150 SE
Back
Top