Vista - Administrator incorrectly denied access

I have two administrator accounts, one is the default account and another is
a user account that is a memeber of the administrator group.

The default administrator account can access files that are set to be
available to the administrators group. Also, when this account uses the "run"
command, the user sees a message that the program that is started will be run
with administrative rights. However, the user account that is a member of the
administrator group is always denied access to files and folders that have
permissions only for the administrators group (and no permissions are denied
on those files/folders). The current workaround is for this latter account to
get permission to access files/folders is to have its username specifically
granted permission for those files/folders. Also, this account does not get a
message that programs started with the "run" command will be started with
administrative privelidges. I want this account to be able to access files
that are supposed to be available for the administrators group without
needing to grant specific permissions for that account, and I want this
account to use the run command with administrative rights. Help would be
appreciated!

This is because of UAC. When you access those files using Windows Explorer,
or another unelevated process, you do not have access to things only
Administrators have access to.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"sigmund" wrote:

> I have two administrator accounts, one is the default account and another is
> a user account that is a memeber of the administrator group.
>
> The default administrator account can access files that are set to be
> available to the administrators group. Also, when this account uses the "run"
> command, the user sees a message that the program that is started will be run
> with administrative rights. However, the user account that is a member of the
> administrator group is always denied access to files and folders that have
> permissions only for the administrators group (and no permissions are denied
> on those files/folders). The current workaround is for this latter account to
> get permission to access files/folders is to have its username specifically
> granted permission for those files/folders. Also, this account does not get a
> message that programs started with the "run" command will be started with
> administrative privelidges. I want this account to be able to access files
> that are supposed to be available for the administrators group without
> needing to grant specific permissions for that account, and I want this
> account to use the run command with administrative rights. Help would be
> appreciated!

Thanks for the reply. I wondered if that was the case, but I wish that MS had
not implemented UAC in that manner. I made this user an administrator for a
reason!

Thanks again.

"Jesper" wrote:

> This is because of UAC. When you access those files using Windows Explorer,
> or another unelevated process, you do not have access to things only
> Administrators have access to.
>
> ---
> Your question may already be answered in Windows Vista Security:
> http://www.amazon.com/gp/product/047...otectyourwi-20
>
>
> "sigmund" wrote:
>
> > I have two administrator accounts, one is the default account and another is
> > a user account that is a memeber of the administrator group.
> >
> > The default administrator account can access files that are set to be
> > available to the administrators group. Also, when this account uses the "run"
> > command, the user sees a message that the program that is started will be run
> > with administrative rights. However, the user account that is a member of the
> > administrator group is always denied access to files and folders that have
> > permissions only for the administrators group (and no permissions are denied
> > on those files/folders). The current workaround is for this latter account to
> > get permission to access files/folders is to have its username specifically
> > granted permission for those files/folders. Also, this account does not get a
> > message that programs started with the "run" command will be started with
> > administrative privelidges. I want this account to be able to access files
> > that are supposed to be available for the administrators group without
> > needing to grant specific permissions for that account, and I want this
> > account to use the run command with administrative rights. Help would be
> > appreciated!

It is confusing at first, and the fact that you can't elevate Explorer is
cumbersome. However, once you get used to it you learn how it was intended to
work and then it starts being more useful and less blocking.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"sigmund" wrote:

> Thanks for the reply. I wondered if that was the case, but I wish that MS had
> not implemented UAC in that manner. I made this user an administrator for a
> reason!
>
> Thanks again.
>
> "Jesper" wrote:
>
> > This is because of UAC. When you access those files using Windows Explorer,
> > or another unelevated process, you do not have access to things only
> > Administrators have access to.
> >
> > ---
> > Your question may already be answered in Windows Vista Security:
> > http://www.amazon.com/gp/product/047...otectyourwi-20
> >
> >
> > "sigmund" wrote:
> >
> > > I have two administrator accounts, one is the default account and another is
> > > a user account that is a memeber of the administrator group.
> > >
> > > The default administrator account can access files that are set to be
> > > available to the administrators group. Also, when this account uses the "run"
> > > command, the user sees a message that the program that is started will be run
> > > with administrative rights. However, the user account that is a member of the
> > > administrator group is always denied access to files and folders that have
> > > permissions only for the administrators group (and no permissions are denied
> > > on those files/folders). The current workaround is for this latter account to
> > > get permission to access files/folders is to have its username specifically
> > > granted permission for those files/folders. Also, this account does not get a
> > > message that programs started with the "run" command will be started with
> > > administrative privelidges. I want this account to be able to access files
> > > that are supposed to be available for the administrators group without
> > > needing to grant specific permissions for that account, and I want this
> > > account to use the run command with administrative rights. Help would be
> > > appreciated!