GPO task run as user but with administrator right?

We need to change a Java setting in the appdata folder of a restricted user on hundreds of computer.
As they use different user but on local profile, we need to be able to run a task as User but be able to write in a folder that the user don't have access to.
We try to use the Schedtask and run it at the current logon user with the "Run with highest privileges" but this doesn't seem to work
Any input?

> We try to use the Schedtask and run it at the current logon user with
> the "Run with highest privileges" but this doesn't seem to work
Highest privileges is only meaningful when the user is member of local
admins - then (and only then) the task will run with admin privs.
Might be a solution to use GPP files or GPP INI-Files or something like
that. These can run in user GPOs but with system privs.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Similar Messages

Adobe Updater can be run only by users with administrator rights error on 2003 termianl server

I just installed the latest security update of 8.1.7 on my two terminal servers. Now when each users logs in, they get the following error.
Insufficient Rights (title)
Adobe Updater can be run only by usrs with administrator rights.
They simply click OK and it goes away but it is very annoying. It seems like every time their is an update to Adobe Reader, something goes wrong.
Does anybody have any thoughts on how to stop the Adobe Updater from loading when my users login? Thanks,
Justin

I ended up finding the solution at this link.
http://forums.adobe.com/message/1770665
Erech_Belt said
5. Aug 14, 2008 7:22 AM in response to: (LeaAnn_Coldren)
Re: Insufficient Rights Window for non-admins after 8.1.2 successful install
Here is the solution I found.
"Renaming %program files%/Common Files/Adobe/updater5 to something else removed the error."
This seems like a brute force approach, but it does work. I checked the event logs after doing this and don't see any errors in the App or System logs. This folder is the location of AdobeUpdater.exe and all of the Adobe .cer files, so it makes sense that this works, but seems like it should generate other errors...
This is not how I wanted to solve the problem but it did solve it.
Justin

How to change Analyzer user password with Administration API?

Hi, I would like to change Analyzer user password with Administration API. Can someone post some sample commands to do the task? I would just like to write an application to change end user's Analyzer password. As I see I would need to do the following: 1. login with admin userid/password 2. execute some method to change password for required userid. I think the input parameter should be userid (of the user I would like to change password) and new password (the new password for the user). 3. logout Can someone post some sample code (commands to execute)? Thanks, grofaty My system: Analyzer Server 7.0.1. Essbase server 7.1 Windows XP SP2 

<blockquote>quote: <hr>Originally posted by: knightrich Hello Mr. Jordan. I would like to exchange some thoughts about "housekeeping" Analyzer reports in preparation for migration from Analyzer 7.0.0.0.01472 to 9.x: ... Did you solved such a problem or do you have an idea if it could be solved with the Admin API methods? ... Migration from 7.00 to 9.x: As we heard last week the "Migration Wizard for Reports" in 9.3 should be able to migrate reports. Do you have experience or more detailed information about that Wizard? Many thanks in advance knigthrich<hr></blockquote> knighrich, I'd like to be more help, but I have no experience with System 9. I did substantial cleanup when we migrated from Analyzer 6 to Analyzer 7.1, and even more cleanup when moving up to 7.2, but our installation is smaller in scale than yours and we didn't need to automate report cleanup. You might be able to get the ownership information you need through the back door, doing a direct query on the database, but simpler might be an export users, at least from 7.0. (This facility probably doesn't exist in system 9; it was dropped in 7.2 in favor of an undocumented API) The export file is an xml file that could easily be parsed to identify reports that have the administrator as user and then a second pass to delete those with otuer ownership as well. As previously suggested, you might be able to get this by a well crafted SQL query against the repository. Procedurally, we have both public reports that have the blessing of management and are widely available, owned by a "public owner", and private reports developed by indivdual users and shared or not. Our team maintains the public reports, but not the private reports. We may be asked to make a previously private report public and take over maintenance of it. I hope that you can find a solution that meets your needs. Certainly a call to customer support to identify a poorly documented feature would be in order.

Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
How this is technically different?
If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
dhomya

If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing accounts,
groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
I think that is a pretty big difference.
In fact, it is bad practice to perform you daily server management with an AD privileged account.
In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
privileges. Always be carefull when assuming resulting privileges will be the same.
MCP/MCSA/MCTS/MCITP

I have windows vista user account with administrator privilege. I am unable to update mozilla firefox to the latest version. It is saying "do not have required privileges". I already uninstalled the previous version :(

I am unable to update mozilla firefox. I have user account with administrator privilege.

Try to run the installer as Administrator via the right-click context menu (Run as Administrator).

Only with administrator rights?

Hi,
when I launch the web page www.vh-t.de on my XP machine
(fully patched, Flash Player 9 installed) with IE6, I can see in
the middle of the page a little Flash intro - but only with
administrator rights. Without administrator rights there only is a
white area.
Does someone know how to configure the system for making work
Flash animations for normal users as well?
Thanks a lot for a hint.
Regards,
Tim

I ended up finding the solution at this link.
http://forums.adobe.com/message/1770665
Erech_Belt said
5. Aug 14, 2008 7:22 AM in response to: (LeaAnn_Coldren)
Re: Insufficient Rights Window for non-admins after 8.1.2 successful install
Here is the solution I found.
"Renaming %program files%/Common Files/Adobe/updater5 to something else removed the error."
This seems like a brute force approach, but it does work. I checked the event logs after doing this and don't see any errors in the App or System logs. This folder is the location of AdobeUpdater.exe and all of the Adobe .cer files, so it makes sense that this works, but seems like it should generate other errors...
This is not how I wanted to solve the problem but it did solve it.
Justin

Secure, multi-section form with administrative rights

I want to create a form that has sections we'll call "yes", "no", and "maybe". Only one section is visible at any time, and only someone with administrative rights can choose which section is visible. Once the section is chosen and the form saved, that section cannot be changed by anyone without admin rights. Can this be done in Acrobat?
The proposed use process would go something like this:
1. Admin receives order and pulls the form.
2. Admin clicks "yes", "no", or "maybe" (tab? radio button?) to reveal the applicable section.
3. Admin fills in some portions, saves the form, and passes it down the line.
4. Down the line, the form is opened and the rest of the form is filled. If "yes", "no" or "maybe" is clicked, nothing happens because this user has no admin rights.
5. The completed form is saved.
I know it would save a lot of effort to make three separate forms. The reason for the single, multi-section form is so the other two sections can be filled on a later date. This saves the effort of refilling the other parts of the form with same data, or changing same data on three separate forms. In addition, admin can open a filled form and click among the different sections to review each section off the one form.
Did that make sense? If so, can it be done in Acrobat?

Please also tell me if what I have in mind can't be done so I can stop chasing this idea.

RUNAS another user: assistance with my batch file for control panel and explorer

Hello, for desktop support on end user or multi/generic user pcs it is nice to access common commands quickly from a batch file to run under your account. In xp both explorer and control panel apps launched without issues. The primary issue for explorer
is it appears to ignore the runas command (but the user has permissions to explorer so no error) while the control panel apps ignores run as well but does not have permissions so generates an error. The other commands all execute as the attempting admin's
account.
who it is for: the user with the admin account to execute on the user's desktop whom is a nonadmin
**please note, the commands appear to work if you do have admin rights**, the logged in user does not have admin rights to these utilities like in a common corporate environment.
"windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item."
Issue#1:
With win7 if you do a run as for explorer.exe via batch it will open, but will still be running under the signed in user. I have searched many threads on various sites and have not found a working solution for batch, this may be something I need to retire.
Issue#2: all control panel applets fail to launch through various methods.
SECTIONS THAT I AM STRUGGLING WITH:
runas /user:%auser%@DOMAINNAME "explorer.exe /separate"
runas /user:%auser%@DOMAINNAME "cmd /c Start /B rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl"
"cmd /c start appwiz.cpl" also fails
alternative also fails:
runas /user:%auser%@chwi "cmd /c Start /B control.exe"
cls
@ECHO OFF
set /p auser= Enter your account login id:
:MyMenu
CLS
Echo Use the options below to run as with your admin account id:
echo.
ECHO 1 - Explorer C:\ - may not work with win7
ECHO 2 - Device Manager
ECHO 3 - Event Viewer
ECHO 4 - Services
ECHO 5 - Computer Management
ECHO 6 - REGEDIT
ECHO 7 - Command prompt
ECHO 8 - Local Users and Groups
echo 9 - launch task manager
ECHO a - Control Panel - may not work with win7
Echo b - Add/Remove programs - may not work with win7
Echo 0 - Exit
echo.
SET /P OPT=Please make a selection, and press enter:
if %OPT%==1 GOTO OPTION1
if %OPT%==2 GOTO OPTION2
if %OPT%==3 GOTO OPTION3
if %OPT%==4 GOTO OPTION4
if %OPT%==5 GOTO OPTION5
if %OPT%==6 GOTO OPTION6
if %OPT%==7 GOTO OPTION7
if %OPT%==8 GOTO OPTION8
if %OPT%==9 GOTO OPTION9
if %OPT%==a GOTO OPTIONa
if %OPT%==b GOTO OPTIONb
GOTO exit
:OPTION1
ECHO Executing Explorer C: window
echo.
runas /user:%auser%@DOMAINNAME "explorer.exe /separate"
GOTO:mymenu
:OPTION2
ECHO Executing Device Manager
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B devmgmt.msc"
GOTO:mymenu
:OPTION3
ECHO Executing Event Viewer
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B eventvwr.msc"
GOTO:mymenu
:OPTION4
ECHO Executing Services
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B services.msc"
GOTO:mymenu
:OPTION5
ECHO Executing Computer Management
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B compmgmt.msc"
GOTO:mymenu
:OPTION6
ECHO Executing regedit
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B regedit"
GOTO:mymenu
:OPTION7
ECHO Executing command prompt
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B cmd"
GOTO:mymenu
:OPTION8
ECHO Executing Local Users and Groups
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B lusrmgr.msc"
:OPTION9
ECHO Executing task manager
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B taskmgr.exe"
:OPTIONa
ECHO Executing control panel
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B control.exe"
:OPTIONb
ECHO Executing add/remove programs
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl"
GOTO:mymenu
GOTO EXIT
:EXIT

You guys I appreciate the feedback but please read my entire post and help if related, this is getting a bit frustrating.
a. I am not developing a powershell solution or "how do I launch them via command prompt" that is well known. The goal is to create an easy to use "run as helper" script for those that are not as savvy or do not have the commands memorized.
Even so many of your suggestions do not work because the user logged in does not have admin rights and the commands are blocked because of this restriction.
b. This is for the batch file in question, NOT "how do I launch command prompt as an admin"
c. Again, several options work, several do not (network connections and programs and features do not) must likely due to same limitations as explorer.exe or UAC
d. this is not "how do I launch the utilities by command line" it is "how do I launch them as the admin WHEN the current user does not have admin rights". The entire script works on a pc if you have admin rights because its launching
it instead AS the current user, in that case the current user has admin rights therefore it doesnt reproduce the issue.
e. running by control.exe using the app name or with cpl does not resolve the issue.
f. I did not post that command prompt is having issues launching, I wrote a couple times that the options in my script do work such as command prompt. Even if you launch command prompt you cannot launch programs and features or network connections with your
admin account with or without an additional runas command.

Create user like ias_admin user but with less previlege in Oracle 10g AS

Hi Friends,
I am using Oracle 10g AS(10.1.2.0.2).
I am using ias_admin user to admistrate it.
Is it possible to create one more user like ias_admin but with less previleges like Read-only previlege and if so whats the procedure.
Please suggest
Regards,

If you are talking about creating additional admin users for AS Control for Oracle Application Server 10gR2 (v10.1.2), than that's not possible. It does not support role based access administration. You can do it though with EM Grid Control and AS Control in Oracle Application Server 10gR3 (v10.1.3.x).
Thanks
Shail

Users with Administrator rights not being allowed to install programs.

I have 3 users in my office that are not able to download and install programs due to a security prompt that says that they are unable to install the program due to not having administrator rights. But in the users menu the user accounts are setup with
full administrator rights. Is this a common problem?

Hi,
Are they domain administrator or local administrator? Is there any group policy restriction?
Please refer to this similar thread:
http://answers.microsoft.com/en-us/windows/forum/windows_7-desktop/unable-to-install-program-and-getting-error-do-not/cd28bdae-ae0c-4dcc-96cb-00fb2490dd24
Karen Hu
TechNet Community Support

Unable to bulk copy data. - Random failure, running as SQL Agent with Admin rights and timeouts=0

Hello,
My setup is SQL Server 2012 (11.0.5522) and SSIS, but still running the 2008 R2 created packages. The server is Windows Server 2008 R2 with 32GBs of memory.
I am running a control package which calls 4 packages at once to run simultaneously for performance reasons. It runs every day with issues, but maybe once a month I get the failure:
'Unable to bulk copy data. You may need to run this package as an administrator.'
The SQL Agent is setup as admin, it has access to the create global objects the source and destination databases are on the same server and the timeout is set to zero. Each package has the standard batch size and takes about 3-4 minutes to complete.
Its not easily re-creatable and always runs fine when I re-start the package.
Any help would be appreciated.
Kind regards, Graham.

see
https://popbi.wordpress.com/2012/09/03/ssis-unable-to-bulk-copy-data-you-may-need-to-run-this-package-as-administrator/
https://support.microsoft.com/kb/2216489?wa=wsignin1.0
Please Mark This As Answer if it solved your issue
Please Vote This As Helpful if it helps to solve your issue
Visakh
My Wiki User Page
My MSDN Page
My Personal Blog
My Facebook Page

Cannot access folders and files even with Administrator rights

Hours & days gone trying to solve niggling issues that Microsoft cannot fix (using the built-in diagnosis tools/compatibility options/MS promises to advise when solutions found). But I am stopped from progress by restrictions to folder & file access preventing self-diagnosis. Why are administrator rights not effective? How do I as Administrator give myself access rights? If not available how do I return to XP and retrieve the cost of Windows 7? Note that the PC compatibility test tool for Win7 upgrade from XP noted no significant problems!

It appears that these are symbolic links and that WIn7 hasn't got the wherewithal to follow the symlink to the real folder to assess the security settings. - Hence everyone's frustration.
For those of us who are extremely technical, we'd like to be able to remove and re-create a link as needed to test a scenario...
I've done it for years with Altos Xenix, SCO Xenix, SCO OS/5, AIX and Linux from Caldera 2.2 through todays versions... Windows has been moving in a direction to incorporate more *nix like concepts as they move away from their DOS orientation, but in the process
they have focused on the "general user" at the expense of the "administrative user" (i.e. "root" in *nix)
I've always wanted to try a stripped down, non-backwards compatible, Windows Server. I'm sure it could be made admin-friendly and allow push updates without spending thousands of dollars on push-update software mechanisms... But so far, they've missed the boat.
I have 1 Win7Prof PC at home, 1 Mac and 2 Debian systems. Both the Win and OS/X systems make it very hard to administer/customize/etc. the OS. The 2 Debian systems give more bang for the buck and don't inhibit the root user at all once you make 2 changes (using
"su root" as a user) in /etc/pam.d to allow logging into the desktop as root.
We can always hope MS will see those of us who recommend server platforms as a market at some point. (Wouldn't it be awesome to have basic *nix constructs available for admins? And "bash" vs. "cmd"?)
I certainly don't see any need to utilize Windows except in those cases where some vendor/site is compatible with MS/IE only. There are a few of them and I rail on them constantly to be platform independent. Our software is. It takes a lot of work, but
we use Apache/MySQL/PHP to deliver our medical practice management application from any of the *nix-OS/X-WinServer server platforms to anyone who has Chrome/FireFox/Safari/Opera/IE or
similar browsers. But administering the server platform under Windows is about 5 times more time intensive to install and about 10 times more time intensive to maintain than *nix platforms.
We have about 200 Linux servers we are able to support with 4 staff. We have about 50 Windows servers we are able to support with 4 staff.
With numbers like that, I don't see us leaning toward Windows in the foreseeable future.

How to create a new user aaa with same rights as existing user bbb ?

Assume user bbb already exists in Oracla 10g database.
How can I create a new user aaa with the same rights/permissions as the old user bbb?
Is this procedure/command also working if the old user is user "system" (=dbadmin)?

There is some possibilty to generate a EXPDP dump file which contains only DDL statements related to account and
privileges: EXCLUDE/INCLUDE parameter can help.
For example, following EXPDP statements seem to work with SYSTEM account:
expdp / schemas=system content=metadata_only exclude=table,sequence,package,function,procedure,synonym,,type view dumpfile=DPD:system.dmp logfile=DPD:system.log
Export: Release 10.2.0.2.0 - Production on Thursday, 14 February, 2008 9:41:36
Copyright (c) 2003, 2005, Oracle. All rights reserved.
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - Produc
tion
With the Partitioning, OLAP and Data Mining options
Starting "OPS$XXX"."SYS_EXPORT_SCHEMA_01": /******** schemas=system con
tent=metadata_only exclude=table,sequence,package,function,procedure,synonym,type view dumpfile=DPD:system.dmp logfile=DPD:system.log
Processing object type SCHEMA_EXPORT/USER
Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
Processing object type SCHEMA_EXPORT/ROLE_GRANT
Processing object type SCHEMA_EXPORT/DEFAULT_ROLE
Processing object type SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
Master table "OPS$XXX"."SYS_EXPORT_SCHEMA_01" successfully loaded/unload
ed
Dump file set for OPS$XXX.SYS_EXPORT_SCHEMA_01 is:
C:\TEMP\SYSTEM.DMP
Job "OPS$XXX"."SYS_EXPORT_SCHEMA_01" successfully completed at 09:41:41
impdp / sqlfile=dpd:system.sql dumpfile=DPD:system.dmp logfile=DPD:system.logImport: Release 10.2.0.2.0 - Production on Thursday, 14 February, 2008 9:42:46
Copyright (c) 2003, 2005, Oracle. All rights reserved.
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - Produc
tion
With the Partitioning, OLAP and Data Mining options
Master table "OPS$XXX"."SYS_SQL_FILE_FULL_05" successfully loaded/unload
ed
Starting "OPS$XXX"."SYS_SQL_FILE_FULL_05": /******** sqlfile=dpd:system
.sql dumpfile=DPD:system.dmp logfile=DPD:system.log
Processing object type SCHEMA_EXPORT/USER
Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
Processing object type SCHEMA_EXPORT/ROLE_GRANT
Processing object type SCHEMA_EXPORT/DEFAULT_ROLE
Processing object type SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
Job "OPS$XXX"."SYS_SQL_FILE_FULL_05" successfully completed at 09:42:50and system.sql is:
-- CONNECT OPS$XXX
-- new object type path is: SCHEMA_EXPORT/USER
-- CONNECT SYSTEM
ALTER USER "SYSTEM" IDENTIFIED BY VALUES '970BAA5B81930A40'
TEMPORARY TABLESPACE "TEMP";
-- new object type path is: SCHEMA_EXPORT/SYSTEM_GRANT
GRANT GLOBAL QUERY REWRITE TO "SYSTEM";
GRANT CREATE MATERIALIZED VIEW TO "SYSTEM";
GRANT SELECT ANY TABLE TO "SYSTEM";
GRANT CREATE TABLE TO "SYSTEM";
GRANT UNLIMITED TABLESPACE TO "SYSTEM" WITH ADMIN OPTION;
-- new object type path is: SCHEMA_EXPORT/ROLE_GRANT
GRANT "DBA" TO "SYSTEM" WITH ADMIN OPTION;
GRANT "AQ_ADMINISTRATOR_ROLE" TO "SYSTEM" WITH ADMIN OPTION;
GRANT "MGMT_USER" TO "SYSTEM";
-- new object type path is: SCHEMA_EXPORT/DEFAULT_ROLE
ALTER USER "SYSTEM" DEFAULT ROLE ALL;
-- new object type path is: SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
BEGIN
sys.dbms_logrep_imp.instantiate_schema(schema_name=>SYS_CONTEXT('USERENV','CURRENT_SCHEMA'), export_db_name=>'BAS002.REGRESS.RDBMS.DEV.US.ORACLE.COM', inst_scn=>'1456160');
COMMIT;
END;
-- new object type path is: SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
BEGIN
SYS.DBMS_AQ_IMP_INTERNAL.CLEANUP_SCHEMA_IMPORT;
COMMIT;
END;
/ These export and import steps don't take into account privileges granted on schema objects belonging to another user likely due to to the EXCLUDE statements.
Message was edited by:
Pierre Forstmann

Business Data Connectivity Metadata Store is currently unavailable for users but not administrator

Hello,
We have a SharePoint 2013 Enterprise Multi Tenant deployment. Our customers Site Collection Administrators can not create external content types in SharePoint Designer 2013.
When clicking on "External Content Types" in the menu they are getting the message "The Business Data Connectivity Metadata Store is currently unavailable." but users are still able to click on "External Content Type" in the "New"
section of the ribbon. However, when doing that the are getting throwed another error message: "The remote server returned an error: (401) Unauthorized."
When logged in as the Active Directory Administrator via SharePoint Designer on one of the Site Collections everything works as it should.
It seems that there is some permissions missing but I can not figure out how to set this properly for the site users. I have tried to add users as administrators at both the Managed Metadata Store Applications and the Business Data Connectivity Application
with no result. I have also added the users with permissions on the Managed Metadata Store via the Tenant Administration panel for each site.
I would need this to work, and when it works I need to set the required permissions programatically via Powershell when provisioning sites and users.

Hi Anders,
Thanks for posting your issue here, Kindly check out the details in below mentioned URLs to fix this issue.
http://www.c-sharpcorner.com/UploadFile/anavijai/the-business-data-connectivity-metadata-store-is-currently-u/
http://blogs.technet.com/b/namkh/archive/2013/04/18/quot-the-business-data-connectivity-metadata-store-is-currently-unavailable.aspx
I hope this is helpful to you. If this works, Please mark it as Answered.
Regards,
Dharmendra Singh (MCPD-EA | MCTS)
Blog :
http://sharepoint-community.net/profile/DharmendraSingh

Set up an account with administrator rights, but did not choose a password for it

Essentially now, cannot complete anything without the non existent password. How do I reset it or create on. It won't let me see my account unless I login as a standard account, then prompts my admin account for a password that does not exist.

Hi Old Pappy59,
All account should be shown in manager account interface when you logon as an administrator if you did not hide them by using register.
I suggest you delete this account and recreate it with a password. Since according to your description you could not see this account in GUI as an administrator, you could run lusrmgr.msc to confirm user information or use
net user command to do this job if this account is really currently existing.
To run lusrmgr.msc
right click start->run->type lusrmgr.msc-> OK
To delete an account
net user [username] /delete
if you don’t want to delete this account, also could create a password for this account.
To create a password for an account
net user [username] [password]
For more information about net user command (also apply to Windows 8):
http://support.microsoft.com/kb/251394/en-us
Regards

GPO task run as user but with administrator right?

Similar Messages

Maybe you are looking for