[help] Policies And Permissions

I've had this problem for quite a long time, and I did try to fix it so many times, without any further success :( but I'd never mind since it didnt bother me much, but now I want to fix it and thats why I need some help.

the problem is whenever I try to install MSN messenger I get this message: "The system administrator has set policies to prevent this installation" or "you do not have the permissions required to install MSN Messenger on this computer"

This happens when I try to install some other programs, for example Adobe Acrobat 6.

Notice: I'm the administrator of the computer, and I already have MSN Messenger v4.7 and Adobe Acrobat v5.0 installed.. so how do I fix the problem?

thankful for help!

#172444

Did you create a separate username for yourself (other than Administrator)? That's what I do (for example: I have two username's on my Windows 2K Server setup, one is Administrator, and the other is benm). If you do, you may have forgotten to give yourself adequate rights. Simply go to the Control Panel, click on Users, select the name that's giving you trouble, click Properties, then go to "Group Membership." Select the "other" radio button and select Administrator from the drop down menu.

#172445

Did you create a separate username for yourself (other than Administrator)? That's what I do (for example: I have two username's on my Windows 2K Server setup, one is Administrator, and the other is benm). If you do, you may have forgotten to give yourself adequate rights. Simply go to the Control Panel, click on Users, select the name that's giving you trouble, click Properties, then go to "Group Membership." Select the "other" radio button and select Administrator from the drop down menu.

Thx for the help, but in the Control Panel there is no "Users" only "User Accounts".. I selected that, and then my ?name? and after the I cant find "Properties" .. maybe XP is different.. :(

#172449

Oh, thought you were on 2K, my bad. Um... yeah, we don't use XP here at work, I'm not sure about doing what I did on XP. Anyone care to enlighten?

Edit: Be sure you have classic view turned on in the Control Panel (to check open up the CP and there is a tab on the left side bar that should say "Switch to Classic View.") And the icon isn't called "Users" (I know, I said it was, but I was trimming :)) it's called "Users and Password" (in 2K).

#172452

mm .. but iI only have one account.. ?

#172461

anybody help? :cry:

#172584

XP... right click on My Computer and select Manage.

Then open Local Users and Groups and then open Users.

Find the ID you want to update and right click on it and select properties.

The rest should be self explanitory.

#172591

XP... right click on My Computer and select Manage.

Then open Local Users and Groups and then open Users.

Find the ID you want to update and right click on it and select properties.

The rest should be self explanitory.

properties > Member Of .. already Administrator.. :huh:

#172597

Are you on a network and is the PC part of a domain?

If so, then you may be getting a GPO pushed down to your PC that will prevent you from doing what you want regardless of wether you are an admin or not.

#172599

Are you on a network and is the PC part of a domain?

no Iam not on a network..

#172603

I hate to say this, but it looks like you are F'd.

Somehow your Admin account is not really an admin.

Or at least from a local security policy you aren't.

Were you playing with any policy settings?

It is possible to block an Administrator from having God priviledges.

#172609

Other reason could be that you were hacked and the hacker stripped your priviledges.

#172612

Other reason could be that you were hacked and the hacker stripped your priviledges.

is that possible?? I have norton and zonealarm! I know that these programs still can be penetrated, but only from high skilled hackers.. and who would want to hack my 40gb, 500k connection??

I maybe should reinstall windows.. :rolleyes: maybe its time to get a MAC :rock: (damn microsoft and bill gates!!) :rant:

#172712

I think this is the same thing as the manage--> Local Users/Groups thing, but it couldn't hurt to try...

Pull up the Run Dialog (Start Menu--> Run, or Windows Key + R), and enter "control userpasswords2" but without the quotes.

Select your username, and click properties. Then go to the Group Membership Tab, select Other, and pick what you want.

Hope this works! Ultimately, though, buying a Macintosh would probably fix this :D .

@rjohnstone- About blocking the administrator account, how exactly do you do that? Or were you just kidding with the god privileges thing?

-nightcrawler1089

#172732

@nightcrawler1089

You can actualy block the local admin account from being god.

There are a few flaws in the way security policies are implemented in Windows 2000 and Windows XP that would allow you to remove certain priviledges to an account or group.

The messed up part is, if you, as admin remove yourself or your admin group from a security policy, you cannot add yourself or the group back.

This is why they stress the proper usage of the local security policy editor.

If you don't know or are not sure of what you are doing, leave it alone.

@n00b

It is highly unlikely that someone actualy hacked into your system and f'd it up.

It is very likely that either you SAM db or system regsitry hive is/was corrupted and trashed the permissions.

If you are going to rebuild, scan you HD for bad sectors or errors before you re-install.

#174838

@rjohnstone- That's an interesting bug, with removing permissions from the admin account.

I doubt I'll mess with it, but I just want to know- how exactly do you give yourself god permissions? Or is Google my friend here (and if so, what should I search for)?

Sorry to be getting back so late,

nightcrawler1089

#182341