Do not, under any circumstances, do this if you have Win2K

[KingNothing]

Under the Security tab, next to the Sharing tab, do not uncheck Everyone's Full Control, Modify, Read & Execute, and Write privileges if you are logged in as the Administrator on your machine. The Administrator account will suddenly lose most of its administrative rights if you do this and you will not be able to get it back unless you have another account created with these items intact that you can login as.

There's an hour of my day I'll never get back. :|

 

[amnesiac]

Well, THAT was smart.

While we're on the topic of dispensing obvious, but nevertheless handy advice, do NOT chop off your fingers with a meat cleaver.

 

[dman]

Been a while since I fooled with permissions, but, couldn't you log in as local admin and get those things back? I seem to recall that working in NT v4 but haven't played w/ 2K enough to know.

 

[KingNothing]

Originally posted by: dman6666
Been a while since I fooled with permissions, but, couldn't you log in as local admin and get those things back? I seem to recall that working in NT v4 but haven't played w/ 2K enough to know.

How can you get any more local than the Administrator account?

Amnesiac, can you explain to me why Everyone affects the Administrator account but not another account I had created with administrative rights?

 

[MrCodeDude]

Heh, nah really?
-- mrcodedude

 

[dman]

If you are logged into a domain you don't have the same permissions as if you logon to the same workstation as "local". Of course, if you are using it in workgroup mode (no domain) then there is no difference IIRC.

 

[IcemanJer]

Originally posted by: dman6666
If you are logged into a domain you don't have the same permissions as if you logon to the same workstation as "local". Of course, if you are using it in workgroup mode (no domain) then there is no difference IIRC.

that is correct.

 

[KingNothing]

I'm not logged into a domain, just into my workstation. Luckily I had another account with adminstrative rights so I just logged into that and reset Everyone's security rights, but it still strikes me weird that you can mess with the Administrator account privileges like that.

 

[IcemanJer]

well, when you're logged in as administrator.. you can do some pretty destructive things.

 

[Anubis]

Originally posted by: amnesiac 2.0
Well, THAT was smart.

While we're on the topic of dispensing obvious, but nevertheless handy advice, do NOT chop off your fingers with a meat cleaver.

thanks that just became my sig

 

[yakko]

Originally posted by: amnesiac 2.0
While we're on the topic of dispensing obvious, but nevertheless handy advice, do NOT chop off your fingers with a meat cleaver.

Why couldn't you have posted this before I got down to five on each hand?

 

[phatcow]

ummm no....


what you do is either re add in the Everyone group for all priveledges, or you add computername\Administrator. EIther way you are never locked out as administrator.

 

[Skyclad1uhm1]

Administrator can take back all privileges. No way to lock that account out.

 

[KingNothing]

The Security tab *disappeared* after my little stunt though. Only way I could get it back (that I could see) was to log in as another account.