Answered by:
Permission required from other users

Question
-
Hi everyone!
In a shared folder i receive this error:
the user acquisti has lower privileges than mine, because i'm an administrator.
In the properties i have this:
Why do the user "michela" has the full control?
in mine WS2012 i'm an administrator, and she's only a normal user. How can fix this?
Thursday, March 14, 2019 10:24 AM
Answers
-
From the GUI:
1. Right-click Start > select Computer Management.
2. Expand Local Users and Groups.
3. Select Groups.
4. Double-click Administrators group.
5. Click Add..
or from the Command Prompt (Admin):
net localgroup Administrators yourusername /add
Blog:
https://thesystemcenterblog.com LinkedIn:
- Edited by Leon Laude Monday, March 18, 2019 11:36 AM
- Marked as answer by andrea vironda Monday, March 18, 2019 2:45 PM
Monday, March 18, 2019 11:36 AM
All replies
-
Hello!
These are the NTFS permissions, have you checked the Share permissions? These are two totally different permissions.
Best regards,
LeonBlog:
https://thesystemcenterblog.com LinkedIn:
- Proposed as answer by Hamid Sadeghpour SalehMVP Thursday, March 14, 2019 11:29 AM
Thursday, March 14, 2019 10:28 AM -
Hi,
yes, and "andrea" has also the tick on "Full Control", that "michela" has not
Thursday, March 14, 2019 3:33 PM -
Is this the properties of a file ? It might be that the user has created a file, therefore has full control of it because he/she is the owner of the file.
Blog:
https://thesystemcenterblog.com LinkedIn:
Thursday, March 14, 2019 3:36 PM -
That's the properties of a folder. How can different people manage that stuff? i would all the people have a chance of erasingThursday, March 14, 2019 4:20 PM
-
Even if Michaela does not have "Full Control" on the Share permissions, she will be able to create folders within the share, and if Michaela creates a folder she will be the owner of the folder, which means she will have "Full Control" NTFS permissions.
Blog:
https://thesystemcenterblog.com LinkedIn:
Thursday, March 14, 2019 4:30 PM -
Can i avoid this behavior?Thursday, March 14, 2019 4:54 PM
-
-
Perhaps she is owner of this folder?Thursday, March 14, 2019 5:17 PM
-
Yes, by giving only Read permissions to the share.
Normal end-users don't need more than Read anyways in most cases.
Blog:
https://thesystemcenterblog.com LinkedIn:
- Edited by andrea vironda Friday, March 15, 2019 9:25 AM
Friday, March 15, 2019 9:20 AM -
No they will not, so in this case you would have to give them Read & Change share permissions.
Blog:
https://thesystemcenterblog.com LinkedIn:
Friday, March 15, 2019 9:36 AM -
ok understood, thank you.
Last question: i would to add my account to administrator group, how can i do it?
i don't have any active directory service because i'm using a workgroup
Monday, March 18, 2019 11:32 AM -
From the GUI:
1. Right-click Start > select Computer Management.
2. Expand Local Users and Groups.
3. Select Groups.
4. Double-click Administrators group.
5. Click Add..
or from the Command Prompt (Admin):
net localgroup Administrators yourusername /add
Blog:
https://thesystemcenterblog.com LinkedIn:
- Edited by Leon Laude Monday, March 18, 2019 11:36 AM
- Marked as answer by andrea vironda Monday, March 18, 2019 2:45 PM
Monday, March 18, 2019 11:36 AM -
I succeed. As test i removed my account from sharing and NTFS permission but i kept the "administrators" group, of which i am member.
The result is that i'm not able to enter now. Why?
Monday, March 18, 2019 2:22 PM -
This is actually normal/correct behavior, an administrator user is treated like a standard user and gets that admin challenge that you get.
This is caused by the User Account Control also known as "UAC", so even if you have administrative rights, you don't actually have them unless you explicitly request them.
For testing purposes you can disable UAC and see how it works, but I do NOT recommend disabling UAC as it's purpose is to protect you from vulnerabilities in your browser and other applications.
You can find very good information about this over here:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd835564(v=ws.10)Blog:
https://thesystemcenterblog.com LinkedIn:
Monday, March 18, 2019 2:31 PM