Administrator cannot access other other users My Documents

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

On a XP PRO sp2 computer I have created a user 'allan' who is in the
administrator's group.
When I login as administrator and use Explore to access the 'my documents'
of user 'allan' a message pops up 'Is not accessible. Access is denied'.
Shouldn't the administrator be able to access * every * users 'my
documents'.

--

Regards,

Allan C

 

[Juan]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Logon with the user account and go to 'allan's profile folder in
C:\Documents and Settings\allan\properties\Sharing... and remove the check
mark from 'Make this folder private'.


---------------------------
"Allan C" <proven_solutions@hotmail.com> escribió en el mensaje
news:OHoxjA4cFHA.2128@TK2MSFTNGP15.phx.gbl...
> On a XP PRO sp2 computer I have created a user 'allan' who is in the
> administrator's group.
> When I login as administrator and use Explore to access the 'my documents'
> of user 'allan' a message pops up 'Is not accessible. Access is denied'.
> Shouldn't the administrator be able to access * every * users 'my
> documents'.
>
> --
>
> Regards,
>
> Allan C
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Yes, I realize that 'allan' can do that if he so chooses.
However, isn't user 'administrator' supposed to have * total * access to
* everything * without 'allan' having to allow it?
Otherwise, it seems to partially defeat the purpose of the user
'administrator' as files can be hidden from him.

Am I missing a basic concept somewhere?

--

Regards,

Allan C
"Juan" <soyquiensoy@terra.com> wrote in message
news:O%23M5NH4cFHA.612@TK2MSFTNGP12.phx.gbl...
>
> Logon with the user account and go to 'allan's profile folder in
> C:\Documents and Settings\allan\properties\Sharing... and remove the check
> mark from 'Make this folder private'.
>
>
> ---------------------------
> "Allan C" <proven_solutions@hotmail.com> escribió en el mensaje
> news:OHoxjA4cFHA.2128@TK2MSFTNGP15.phx.gbl...
> > On a XP PRO sp2 computer I have created a user 'allan' who is in the
> > administrator's group.
> > When I login as administrator and use Explore to access the 'my
documents'
> > of user 'allan' a message pops up 'Is not accessible. Access is denied'.
> > Shouldn't the administrator be able to access * every * users 'my
> > documents'.
> >
> > --
> >
> > Regards,
> >
> > Allan C
> >
> >
>
>

 

[Juan]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

That's a feature of the NTFS file system a user can make his profile folder
private and the administrator will not be able to access his files. To
achieve your purpose, you'd have to use the FAT32 file system but that would
require a reinstallation. You can convert the file system from FAT32 to
NTFS but not viceversa.

---------------------------------------------------
"Allan C" <proven_solutions@hotmail.com> escribió en el mensaje
news:ezJxcT4cFHA.3280@TK2MSFTNGP09.phx.gbl...
> Yes, I realize that 'allan' can do that if he so chooses.
> However, isn't user 'administrator' supposed to have * total * access to
> * everything * without 'allan' having to allow it?
> Otherwise, it seems to partially defeat the purpose of the user
> 'administrator' as files can be hidden from him.
>
> Am I missing a basic concept somewhere?
>
> --
>
> Regards,
>
> Allan C
> "Juan" <soyquiensoy@terra.com> wrote in message
> news:O%23M5NH4cFHA.612@TK2MSFTNGP12.phx.gbl...
> >
> > Logon with the user account and go to 'allan's profile folder in
> > C:\Documents and Settings\allan\properties\Sharing... and remove the
check
> > mark from 'Make this folder private'.
> >
> >
> > ---------------------------
> > "Allan C" <proven_solutions@hotmail.com> escribió en el mensaje
> > news:OHoxjA4cFHA.2128@TK2MSFTNGP15.phx.gbl...
> > > On a XP PRO sp2 computer I have created a user 'allan' who is in the
> > > administrator's group.
> > > When I login as administrator and use Explore to access the 'my
> documents'
> > > of user 'allan' a message pops up 'Is not accessible. Access is
denied'.
> > > Shouldn't the administrator be able to access * every * users 'my
> > > documents'.
> > >
> > > --
> > >
> > > Regards,
> > >
> > > Allan C
> > >
> > >
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

"Allan C" <proven_solutions@hotmail.com> wrote in message
news:ezJxcT4cFHA.3280@TK2MSFTNGP09.phx.gbl...
> Yes, I realize that 'allan' can do that if he so chooses.
> However, isn't user 'administrator' supposed to have * total * access to
> * everything * without 'allan' having to allow it?
> Otherwise, it seems to partially defeat the purpose of the user
> 'administrator' as files can be hidden from him.
>
> Am I missing a basic concept somewhere?
>


As an administrator, yes you can override permissions on any folder. See
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421&sd=tech But
until you do so, you are limited to what permissions are assigned.

The "make my folder private" thing is intended mainly for home use where
most users are probably administrators anyway (unfortunately, a lot of apps
and games require this), and just want to casually keep other people out of
their docs.


--
Colin Nash
Microsoft MVP
Windows Shell/User

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Yes, it would make sense to me that the * user administrator * would have
capabilities over and above those users in the
* administrators group *.

--

Regards,

Allan C
"Colin Nash [MVP]" <cnash x@x mvps.org> wrote in message
news:%23u4oE$4cFHA.2128@TK2MSFTNGP15.phx.gbl...
>
> "Allan C" <proven_solutions@hotmail.com> wrote in message
> news:ezJxcT4cFHA.3280@TK2MSFTNGP09.phx.gbl...
> > Yes, I realize that 'allan' can do that if he so chooses.
> > However, isn't user 'administrator' supposed to have * total * access
to
> > * everything * without 'allan' having to allow it?
> > Otherwise, it seems to partially defeat the purpose of the user
> > 'administrator' as files can be hidden from him.
> >
> > Am I missing a basic concept somewhere?
> >
>
>
> As an administrator, yes you can override permissions on any folder. See
> http://support.microsoft.com/default.aspx?scid=kb;en-us;308421&sd=tech
But
> until you do so, you are limited to what permissions are assigned.
>
> The "make my folder private" thing is intended mainly for home use where
> most users are probably administrators anyway (unfortunately, a lot of
apps
> and games require this), and just want to casually keep other people out
of
> their docs.
>
>
> --
> Colin Nash
> Microsoft MVP
> Windows Shell/User
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

"Allan C" <proven_solutions@hotmail.com> wrote in message
news:uvguzG7cFHA.220@TK2MSFTNGP12.phx.gbl...
> Yes, it would make sense to me that the * user administrator * would
> have
> capabilities over and above those users in the
> * administrators group *.
>
> --
>
> Regards,
>
> Allan C


Actually in this case, it doesn't matter. Any member of the administrators
group can take ownership+reset permissions.


--
Colin Nash
Microsoft MVP
Windows Shell/User