No Administrator rights

Hello!
There's a laptop with Win8.1 64bit. There was just one user which was the Administrator. Due to the fact that the person using it had no clue what is he installing or opening the administrator rights were denied by changing the account type to a standard
user using Win+R "control userpasswords2".
Now there is no Administrator and its not possible to install any software or create another user or anything.
I have tried the different options without any success described here: eightforums.com/tutorials/9650-built-administrator-account-enable-disable-windows-8-a.html
Any suggestions?

Thank You for the effort.
However
I can not run the CMD as administrator, since the only account there is has no administrator rights.
When i try to do this - it asks to insert the administrators password, but hey - there is no window where to enter that. And what is funny - there is no administrator AND logically - there is no password for the non-existing administrator.
So that is not an option.
What I don't understand is - how could I (the only user with the admin rights) change myself to a simple User leaving the system without any administrator.
I have solved this using some manual on the internet, using the Win 8.1 installation dvd.
Here it is: www. eightforums.com/user-accounts-family-safety/47747-deleted-admin-account-win-8-1-update-how-restore.html
I hope it helps others.
Winfail

Similar Messages

Can't Open Server Manager - don't have System Administrator Rights

Hi,
I am new to BPC
After i updated the support patch to BPC 7.5 MS SP3 , pack level 2
and Restart the server
Then Server Manager can't open again.
Error Message :
This ID (xxxxxx) don't have System Administrator Rights; you must log on with a user ID that has system administrator privileges
But I have logon the user which is used to install BPC
I have try to restart the service, but it is not working .
Any method reset it ? or solve it?
thx
John

Dear Kong Chong Shun,
From your information, I'm sorry I could not get several information. Did you upgrade your BPC Clients too, lets say BPC Administrators ?.
Kind Regards,
Wandi Sutandi

Is there a way to prevent an account with no administrative rights to install firefox to their local profile on Windows XP?

Our users are normally not allowed to install any programs since their user accounts do not have administrative rights to their pc's. Has this been a feature in FireFox before?
We noticed that one user was able to simply download firefox, run the installation setup, and the setup would default to install firefox under their local desktop profile instead of the usual c:\Program Files folder.
ie. c:\Documents and Settings\userid\Local Settings\Application Data\Mozilla Firefox\
Is there a way to prevent this from happening? We do not want to allow our users to be able to install any programs without our knowledge.

The Skype add-in was the culprit in my case. Disabling it fixed the problem. As soon as I enable it, the problem comes back.

Installation of SAP Business One client and required administration rights

Dear community,
I would like to kindly ask you for your feedback on the installation of SAP Business One client and its patches on end-user computers.
The pain points I have heard so far are the following:
- The installation of SAP Business One client and its patches has to be started by a user with administrator rights. As far as I know (and please correct me if I am wrong), this is also required in case of installation of any other software.
- End users usually do not have administrator rights and therefore the SAP Business One clients have to be manually upgraded by administrator. This is time consuming (and therefore costly) activity.
We are considering to design a new solution which would overcome the above limitations.
I would like to confirm with you if my understanding is correct:
Question 1:
Is it a common situation that the end-users of SAP Business One client do not have administrator rights and therefore cannot install the patches of SAP Business One client by themselves?
If yes, how do you resolve this currently?
Question 2:
Do you use Microsoft System Center Configuration Manager or Active Directory (or any other 3rd party solution) to automatically distribute software packages and updates to client PCs at your customers?
Question 3:
If the SAP Business One client installation (and its patches) is delivered as MSI package with silent installation capability, would you be able to automate the deployment of B1 client updates to client PC using the abovementioned technologies? Or can you still see some obstacles?
Thank you
Best regards
Jan Ruzarovsky
SAP Business One Product Management

Dear all,
Thank you very much for your comments, very helpful!
@Marco - SAP Business One 8.8 client currently does not support the silent installation / upgrade. However we are currently considering this requirement and we would like to deliver it as soon as possible.
We are currently considering several possible designs. One of them is as follows:
1. A new SAP Business One Updater Service will be installed on each client workstation.
It will be a windows service installed and running under a local system account.
2. The updater service will check regularly if there are any new patches of SAP Business One client or add-ons uploaded to a configured shared directory.
3. If a new patch is found in the shared directory, the updater service will SILENTLY install the new patch (add-ons, SAP Business One) on the client workstation.
The service would be able to install patches even if nobody is logged in.
Questions:
If we consider the above design, there are a few open topics:
1. During the upgrade of the SAP Business One server, the client patches (and SAP add-on patches, partner add-ons) would be placed to a SHARED directory instead of into SBO-Common (as it is implemented currently).
- Does this have any impact on your tools, processes or add-ons?
2. SAP Business One upgrade wizard will put the latest patch of SAP Business One client into a configured shared directory. The shared directory will have to be read-only for everybody in the network to avoid that the valid installation files are replaced by malware or virus infected files
- Can you configure such a shared directory?
From customer perspective, if a new patch is put into the shared directory, the updater service can behave as follows:
1. Manually initiated upgrade of the client
Example: Customer starts the old (not upgraded) SAP Business One client. The client will inform him/her that a new patch has been found and it has to be installed in order to continue working with the client. After customer clicks "Yes", the upgrader service starts the silent installation of the client and informs customer about the progress. Once the upgrade is finished, the upgraded SAP Business One client will be started automatically.
2. Automatic update:
- Update the client automatically (e.g. overnight) if customer is not working with SAP Business One
- If SAP Business One client is running, ask customer if he/she wishes to upgrade the client now or to delay the upgrade by X minutes.
Question: Which of the above two scenarios would you and your customers prefer?
If the upgrade is fully silent, automated and handled by the upgrader service, Is it acceptable for customers to trigger the installation manually and wait till the client is upgraded? Or would they prefer to have the client updated for them e.g. overnight so they can immediately start to work?
Best regards
Jan
Edited by: Jan Ruzarovsky on Sep 29, 2010 9:37 AM

User with Farm Administrator rights, but NOT in Farm Administrators Group

I have an account that we recently discovered has Farm Administrator rights and was used to access Central Admin and cause some harm. When I use the "Check Permissions" on the Central Admin site, it says that account has Full Control via
the Farm Administrators Group. However, that account is not in the Farm Adminstrators group.
There is an entry in the Farm Administrators group for "BUILTIN\Administrators" and this account is in the Local Admin group on this server. However, there are other accounts in the Local Admin group too, and when I "Check Permissions"
for them, it returns 'None'.
I am confused as to how this one account has Farm Administration level access, while others in Local Admin do not, and how can I remove this accounts Farm Administration rights if it is NOT in the Farm Adminstrators Group?
What are the potential problems/issues if I remove the "BUILTIN\Administrators" entry from the Farm Adminstrators Group?
Thanks in advance for any feedback/help.

If you have BUILTIN\Administrators as part of the Farm Admins, any user that is a Local Administrator will have Farm Admin rights. SharePoint doesn't enumerate groups when checking permissions, so the behavior you're seeing is correct. If you do not want
Local Admins to have Farm Admin rights, remove BUILTIN\Administrators from the Farm Admins group in SharePoint.
There should not be any issue with removing the group from Farm Admins, only that users will need both rights to fully manage SharePoint.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
How this is technically different?
If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
dhomya

If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing accounts,
groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
I think that is a pretty big difference.
In fact, it is bad practice to perform you daily server management with an AD privileged account.
In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
privileges. Always be carefull when assuming resulting privileges will be the same.
MCP/MCSA/MCTS/MCITP

HT1923 I had to reinstall Itunes due to "runtime error" and the instructions said to run as administrator. I did that but I'm getting a message about administrator rights to my mobile device and it won't load. What do I do now?

Having issues reinstalling ITunes. I ran as administrator but getting message that I do not have administrator rights for mobile device. Any suggestions.

See this User Tip by turingtest2
https://discussions.apple.com/docs/DOC-6562

I am trying to install itunes for my mobile, and I keep getting the message "You do not have administrator rights, please contact the system administrator to preform an update." I have it set as adminstrator as the user.

I am trying to install itunes for my mobile, and I keep getting the message "You do not have administrator rights, please contact the system administrator to preform an update." I have it set as adminstrator as the user. I am running Windows 7 Ultimate. Help please?

Thanks, but I've done that several times & it still says I need administraive privileges. I had itunes installed with no problems until I did the latest update. After that it just disappeared, so I tried reinstalling. Now I can't sync my phone. This is so frustrating!

Administrative Rights Segregation

I'm working with BPM 11.1.1.5.0.
Does anyone know of a way to segregate administrative rights in the workspace such that only certain users can manipulate role membership, others can manipulate task configurations, others can manipulate calendaring, etc.? Seems like a reasonable request to me; however, if I start adding users to the BPM roles available in the BPM context and don't add those users to the BPMAdministrators role, they don't see the Administrative link in the Workspace.

There's difference between Local and Domain user in windows environment.
Local user with ORA_DBA should be able to do most Oracle administrative tasks.
However, Oracle DBA account is usually given local administrator privilege on the server.
Check more information in metalink doc Note:77665.1

Outlook Connector 6.0 and Administrator rights

Hi all!
We want to use the Sun Java System Connector for Microsoft Outlook 6.0 with Windows 2000 with Outlook XP.
To install the generated exe file as an user, he needs admin right. Afterwards we take the administrator rights from the user away. Run the user outlook, it wants to send a problem problem report to Microsoft.
If the user has administrator right, everything functions.
Thanks for your help in advance.

Hi Jens!
To install the generated exe file as an user, he
needs admin right. Afterwards we take the
administrator rights from the user away. Run the user
outlook, it wants to send a problem problem report to
Microsoft.The solution is, to install connector.exe as local admin
an the machine. You can abort installation without providing
user information.
After that you can install connector.exe as
user without administrative rights.
So you need two install turns.
Regards,
Erik

Administrator rights - unable to obtain on new install of leopard

Hi!
I have installed Leopard (10.5) on my new macbook but have been unable to gain administrator rights..... Having contacted Apple, I was advised to use the Install DVD and re-set the password via the Utilities window. Nice idea... but when loading the instal DVD I am asked for the Administrator user name & password..... which I do not have!
Attempts to assign administrator rights to the man user (Me) via System preferences/accounts have also been unsuccessful.
Any advice on the nex steps would be very much appreciated!
Thanks!

Thanks.
The re-boot does not seem to work.
My macbook reverts to the sign-in options (My user account minus administrator rights) or 'guest'. I am unable to remove the sign-in request at the point of re-start. Would I be right in presuming that the sign-in request is preventing me from accessing the Mac OS install disc? Are you able to advise if the removal of sign-in authentication can be achieved without administrator rights?
thanks again!

Local Administration rights for Xcelcius and Crystal Reports

Hello Customercare,
I am currently compiling a list of software that does and does not require local administrator rights to install and run.
I was wondering if you would be able to assist me, we currently use Crystal Reports version 8.5 and Crystal Xcelsius 4.5. I need to find out if these programs require local administrator rights on the computer they are to be used on to a) Install properly and B) run from that computer by a user without local administrative rights for that machine.
Please let me know or point me in the right direction of a resource who would be able to help me with the above information.
Many thanks for your time,
Phil Booth
GroupM
Technical Support Engineer

Hi Joseph,
Download [Product guide/end userdocument|https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000713358&_SCENARIO=01100035870000000202&] select your product.
For Business objects Integration kit for SAP click [here|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a00ee3b2-5283-2b10-f1bf-8c6413e0898f]
Regards,
Shweta

ActiveSync requiring administrative rights to synchronize data with Windows Communication apps

We are currently testing W8.1 Update 1 in our corporate environment and have run into an issue when attempting to synchronize the corporate exchange accounts with the Windows Communication apps (Mail, Calendar, People). The first problem we encountered was
the requirement for each user to log into a Microsoft account just to access the Communication apps, this was handled through GPO by enabling the "Allow Microsoft accounts to be optional" policy. We could then launch the application, were prompted
for exchange server information, but then upon attempting to synchronize received an error message stating that "To sync this account, you first need to make your Windows user account an administrator." Obviously we have no desire to make all of
our users administrators, but for the purpose of testing we added the user account to the administrators group. The same error message appears! A quick search revealed that changing the UAC to a lower setting would resolve the problem, and sure enough we then
received a prompt to Enforce Policies and synchronization completed.
This can't possibly be the intention, that every Windows 8 user using ActiveSync is required to be an administrator and has to lower the UAC. We did determine that once synchronization has been configured, the administrative rights can be removed and UAC
can be increased once again, but this is a ridiculous option.
I would really appreciate an explaination of the reasoning if this is infact the intended setup, and if it is not, then what we are doing wrong. Thank you.

Hi,
In following article, you will see that the admin permission is required to do so:
Activesync Working But Only For Some Users On Exchange 2007 / 2010
http://alanhardisty.wordpress.com/2010/03/05/activesync-not-working-on-exchange-2010-when-inherit-permissions-not-set/
Also, Microsoft's recommendation and best practice is that if you are a domain administrator that you have 2 accounts. One for your everyday user which is restricted in the same way that every other user is and a second for your administration role.
Kate Li
TechNet Community Support

No Administrative Rights in v6.0 for Level 10?

2 questions:
1) I have delivered my first upgrade of Lookout to v6.0.1 for a customer.
Two days later I go to add another person to level 10 and find I do not have administrative rights to do this.
I get a pop-up window that tells me this.
Bad news, I set myself up as Level 10, like always, and now I can't get in to change users?
I mean, like with level 10 I should be able to do *anything*.
2) I cannot find where I get to change the default user variable save period. It's default of 60min is too long and I need to drop it to 10 or so.
It is on the System page in 3.8 "Save State Files every: xxx min". But no such luck in 6.
System is a new PC with XP Pro

Well the forum administrator has prevailed on me to relay the answers.
1) Obviously I did not give myself full administrator functions in Lookout when I set myself up, level 10 doesn't cut it any more. The name being the same as the windows terminology led me to look to the windows administrator function. I wonder what the ghosts at Georgetown would say now, it doesn't come on a single floppy diskette any more guys.
2) The default user save period is called "state", I knew that. Alls you do is search on "state" and not "save" or "variable" or anything else, and when you do figure out the magic word is "state", you find it has migrated from "Options\System" to "File\Modify Service".
Oh that's much more logical...
It's so easy when you know how.
I will now put on my dunces cap and stand in a corner.
Message Edited by Billy d on 03-03-2006 05:24 PM

Find out who has given local administrator rights to standard domain user?

In my Organization i have faced problems with domain administrator, it seem that all of a sudden a standard domain user is having Local administrator rights. Can anyone please help me how to find out who has given local administrator rights to that standard
domain user account?

Hi,
Based on your requirement, you need to enable the auditing in your Active Directory to identify the user/ group changes and WHO made the change etc.
Checkout the below steps to enable auditing for AD User Changes,
1. Open GPMC console, click Start --> Administrative Tools --> Group Policy Management.
2. Right click the Default Domain Controllers Policy, and then click Edit.
3. Navigate to Audit Policy node, “Computer Configuration/ Policies/ Windows Settings/ Security Settings/ Local Policies/ Audit Policy”.
4. Now enable the Success auditing for - Audit Account Management and Audit Directory Service Access.
5. Execute the command “GPUPDATE /FORCE” in the Domain Controller to force apply the GPO settings.
For Windows Server 2008 R2 and later versions, additional configuration is required in “Advanced Audit Policy Configuration” section in Default Domain Controller Policy.
1. Go to the node DS Access (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/DS Access.)
Enable Success auditing for the following settings
- Audit Directory Service Changes
2. Go to the node Account Management (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/Account Management.)
Enable Success auditing for the following settings
- Audit User Account Management
After completing the audit settings, configure SACL in Active Directory Users and Computers console for enabling the geneartion of AD Change events in the eventlog as shown below,
Checkout the below KB article on complete list on Event ID and Description for AD Changes,
http://support.microsoft.com/kb/947226/en-us
Regards,
Gopi
JiJi Technologies

Deploying msi via group policy without administrative rights

We are having a problem with flash player not working without
Administrative right on the machine. We thought we could get around
this by using the flash_player_active_x.msi and installing through
group policy. The install during a computer reboot (if assigning to
a computer) or during a user sign on (if assigned to a user) seems
to work fine.
However, when you actually try to load a webpage with flash,
nothing. The component doesn't actually get installed into the
browser. As soon as you log on with a privilaged account, and
browse to a flash enabled page, the install finishes, the active x
control is loaded and now all users can see it.
However, I'd really prefer not to have to go around to each
computer and log on with the administrator account - kind of
defeats the purpose of group policy.
All computers are Win XP sp2 with IE 7. The active directory
server is a Win2k server.
Any thoughts would be appreciated.

I am having this issue also. Has anyone found a solution?
I found this reference on this website, but there is no
solution given:
I
have installed Adobe Flash Player but still don't see any Flash
content. What is wrong?
quote:
Restricted User accounts are unable to display Flash Player
content
After successful installation under the Windows Administrator
account, Restricted User accounts are unable to display Flash
Player content. This issue has been reported on Microsoft Windows
XP Service Pack 2 systems and occurs sporadically. It may also
affect other versions of Windows, such as Windows 2000.
If you installed Flash Player 8.0.24.0 prior to April 6,
2006, then you must remove it using the Flash Player uninstaller
released on May 11, 2006. Remove Flash Player using the
instructions in How to uninstall the Adobe Flash Player (TechNote
14157).

No Administrator rights

Similar Messages

Maybe you are looking for