Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I was recently modifying the security settings for my drive C. I did not notice that i was logged in as a user and changed the permissions for users to "read". Later i realized that there was no admin set up on the pc (when switching user). Now with the security settings changed I can't do anything on the computer. I can only read the files that previously existed. And this applies to every drive on my computer. Now the user accounts do not have the privileges to change the permissions. How can i allow users to have full control without having admin on my pc

share|improve this question

migrated from stackoverflow.com Jul 19 '11 at 22:10

This question came from our site for professional and enthusiast programmers.

    
try the run as functionality to pop up a window with admin credentials. But in any case, this is offtopic for this site. –  Marc B Jul 19 '11 at 21:28
    
Run as command no longer is compatible with UAC. –  surfasb Aug 10 '11 at 6:15
add comment

5 Answers

change windows registry to derivated 43 hex on default registry settings under the bios reconstructor, there you could get spicy and add some new windows 7 features at least the trigonal methods for registry ascii mode binary down-loaders, on windows registry bios relations.

share|improve this answer
    
Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. :) –  JoshP Oct 30 '12 at 2:45
add comment

Agreed with "edusysadmin"

You'll want to unlock the hidden admin as you'll inevitably run into permissions issues, lots of them later. I'm not sure if you can get those permissions from where you are now, but you'll want it inevitably. How To Geek walks you through very intuitively.

share|improve this answer
    
Turning on the hidden admin account is a bad idea, since it is a well known attack vector. A better idea is to create a separate admin account, since the "hidden" admin account has no more permissions than a user created admin account. –  surfasb Aug 10 '11 at 6:22
add comment

You may find it helpful to enable the Administrator account (disabled by default). From an elevated command prompt run the following command:

net user administrator /active:no
share|improve this answer
    
You mean net user administrator /active:yes Coincidentally enough, no turns it off. . . –  surfasb Aug 10 '11 at 6:28
add comment

If there's really no admin user on your computer (I don't think that is possible?), you will have no way of changing that permission back under your current Windows installation, because if you can the security model of Windows will be a complete failure (M$ had it certified, so it's probably sound).

What you can do now it to use another system to change the permission, e.g. a Windows PE CD or another Windows installation. You might also use some tools like ERD Commander to create an admin user.

share|improve this answer
    
If there are no admin accounts, Windows automatically activates the hidden Admin account –  surfasb Aug 10 '11 at 6:29
add comment

How can i allow users to have full control without having admin on my pc?

That's impossible.

edit Specifically, you need an admin account to take ownership of files. Only with ownership can you grant other accounts permissions. /edit

I'm surprised how often this happens. There is a reason why Microsoft makes the effort to block user's access to their own drives. . .

Follow the directions here. . .

http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/how-to-reset-all-user-permissions-to-default/9da312d2-c99b-4283-a275-e74d93dcc366

You will need to run ‘Subinacl Tool’ to reset the permission to normal. To reset system permissions, follow the steps:

  1. Download subinacl.msi from the following link, and save it on the desktop. http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en#AffinityDownloads (http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en#AffinityDownloads)

  2. On the desktop, double-click subinacl.msi to install the tool.

  3. Select C:\Windows\System32 as the destination folder. Note This step assumes that Windows is installed in C:\Windows. If Windows is installed elsewhere, select the appropriate path to .\System32.
  4. Open Notepad.
  5. Copy the following commands and then paste them into the opened Notepad window.

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f subinacl /subdirectories %SystemDrive% /grant=administrators=f subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f subinacl /subdirectories %SystemDrive% /grant=system=f

  1. In Notepad click File, Save As, and then type: reset.cmd
  2. In Notepad click Save as type, and then select All Files (.).
  3. Save the reset.cmdfile to your desktop, and close Notepad.
  4. Double-click the reset.cmdfile to reset the Windows Update permissions. Note This step may take several minutes, so please be patient. When the permissions have been reset, you will be prompted with "Finished, press any key to continue."
  5. Press any key to complete the installation. Check if you have the right permissions to all the folders for all users. For more information you may check the article given below. The article given is for Windows XP updates, but still holds good for Windows Vista as well as Windows 7. http://support.microsoft.com/kb/968003 Hope this information is helpful. Amrita M Microsoft Answers Support Engineer

I hope that was a lesson. Please make a backup.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.