Chenge from Administrator to Power user

[Guest]

Hello Everyone!
I need to change a user rights from Administrator to Power user but when I
do it - the system after logging off and On says that it cannot access the
Desktop folder - and the best part of user settings get corrupted!
When I return the rights of Administrator - everything is OK!
What is the best and 100% way of changing rights from Admin to PU?

 

[Juan]

The best way is to create a new power user account... you can migrate the
administrator account files and settings to the power user account by means
of the Transference Assistant in Start\Programs\Accessories\System
Tools\Files and Settings Transfer Wizard. And/or you may need to modify the
Security Permissions to access the administrator files by the power user but
that poses no real problem, if the problem should appear, you can read how
to
modify the security permissions in the KB 308418 and 308419 articles.

How To Use the Files and Settings Transfer Wizard By Using the Windows XP
CD-ROM
http://support.microsoft.com/kb/306186/en

How to use the Files and Settings Transfer Wizard with a wizard disk in
Windows XP
http://support.microsoft.com/kb/306187/en-us

List of Programs Whose Settings Are Migrated When You Use the Files and
Settings Transfer Wizard
http://support.microsoft.com/kb/304903/en-us

How to set, view, change, or remove special permissions for files and
folders in Windows XP
http://support.microsoft.com/kb/308419/en-us

How to set, view, change, or remove file and folder permissions in Windows
XP
http://support.microsoft.com/kb/308418/en-us

How to take ownership of a file or folder in Windows XP
http://support.microsoft.com/kb/308421/en-us

 

[Jesper [MSFT]]

Why do you need to change a user from administrator to Power User? It buys
you almost nothing from a security perspective. A Power User is just an
administrator that has not made himself an administrator yet. If anything
you need to change it to a regular user.

More than likely the creator/owner on the user's profile is listed as
"Administrators" not the user account. The Files and Settings Transfer
Wizard is the easiest way to more the profile.

--

Please do not send e-mail directly to this e-mail address. This address is
for newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

The best way is to create a new power user account... you can migrate the
administrator account files and settings to the power user account by
means
of the Transference Assistant in Start\Programs\Accessories\System
Tools\Files and Settings Transfer Wizard. And/or you may need to modify
the
Security Permissions to access the administrator files by the power user
but
that poses no real problem, if the problem should appear, you can read how
to
modify the security permissions in the KB 308418 and 308419 articles.

How To Use the Files and Settings Transfer Wizard By Using the Windows XP
CD-ROM
http://support.microsoft.com/kb/306186/en

How to use the Files and Settings Transfer Wizard with a wizard disk in
Windows XP
http://support.microsoft.com/kb/306187/en-us

List of Programs Whose Settings Are Migrated When You Use the Files and
Settings Transfer Wizard
http://support.microsoft.com/kb/304903/en-us

How to set, view, change, or remove special permissions for files and
folders in Windows XP
http://support.microsoft.com/kb/308419/en-us

How to set, view, change, or remove file and folder permissions in Windows
XP
http://support.microsoft.com/kb/308418/en-us

How to take ownership of a file or folder in Windows XP
http://support.microsoft.com/kb/308421/en-us

--------------------------------

 

[Juan]

"Jesper Johansson" [MSFT] said:

Why do you need to change a user from administrator to Power User? It buys

you almost nothing from a security perspective.
Your statement conflicts with many MVPs but coming directly from Microsoft I
don't doubt you are correct, but still I'd be interested to know the facts.

A Power User is just an administrator that has not made himself an

administrator yet. If anything you need to change it to a regular user.
I didn't know that a power user could make himself an administrator, would
you care to elaborate.

More than likely the creator/owner on the user's profile is listed as

"Administrators" not the user account.
That can easily easily be changed.

The Files and Settings Transfer Wizard is the easiest way "to more the

profile".
(?) You lost me here. I'd be interested to know your meaning; any tip is a
good tip specially coming directly from Microsoft.

And I responded to the OP request with what seems to me the most practical
approach and because I believe it's best to have more than one
administrative account, and I didn't mention it but seems obvious he should
leave the administrative account as it is and instead of converting it to
power or regular user, he should instead create a new account, and the File
and settings wizard seems to me the most practical approach to transfer
files and settings to the new account without modifying the administrative
account.. but that's just my point of view of course and just a suggestion.

 

[Guest]

I forgot to say that the user and the workstation are part of a domain, so i
cannot create another user account so easily. Moreover i must mention that I
have to change rights not of one user but of 30 in a short time. Some of them
have outlook base up to 4 Gb - so the process of migrating data will take too
much time.
Sometimes I change permissions to registry branches for the user to full
control and make him the owner of the folder with his accont settings in Docs
and settings and it works but sometimes it doesn't! And I cannot guarantee
the user that in the future he will have no problem because of it.
--
Best regards,
Oiprox

"Jesper Johansson" [MSFT] said:

Why do you need to change a user from administrator to Power User? It buys

you almost nothing from a security perspective.
Your statement conflicts with many MVPs but coming directly from Microsoft I
don't doubt you are correct, but still I'd be interested to know the facts.

A Power User is just an administrator that has not made himself an

administrator yet. If anything you need to change it to a regular user.
I didn't know that a power user could make himself an administrator, would
you care to elaborate.

More than likely the creator/owner on the user's profile is listed as

"Administrators" not the user account.
That can easily easily be changed.

The Files and Settings Transfer Wizard is the easiest way "to more the

profile".
(?) You lost me here. I'd be interested to know your meaning; any tip is a
good tip specially coming directly from Microsoft.

And I responded to the OP request with what seems to me the most practical
approach and because I believe it's best to have more than one
administrative account, and I didn't mention it but seems obvious he should
leave the administrative account as it is and instead of converting it to
power or regular user, he should instead create a new account, and the File
and settings wizard seems to me the most practical approach to transfer
files and settings to the new account without modifying the administrative
account.. but that's just my point of view of course and just a suggestion.

 

[Juan]

You could configure security permissions to reduce the administrative group
accounts down to the power user group level instead of changing the
administrative accounts to the power user group. see in any folder's
security that the default permissions for the power user group are checked
on three boxes only, so uncheck the admistrative group permissions to that
level.

Tip: In Folder Properties\Security\Advanced Options\Permissions\Modify\ and
check 2nd, 3rd, 4th, 5th and 12th boxes, check box to apply the same
permissions to objects and containers within the folder, apply and accept.
That will make the administrative group have the same permissions than those
of the power users. You may also modify the security policies so they can
not take ownership and be able to modify permissions, do it in
Start\Run\secpol.msc\Security Settings\Local directives\User Rights
Assignment\Take Ownership of Files or other objects\remove administrators.

How to set, view, change, or remove special permissions for files and
folders in Windows XP
http://support.microsoft.com/kb/308419/en-us

How to set, view, change, or remove file and folder permissions in Windows
XP
http://support.microsoft.com/kb/308418/en-us

---------------------------------

I forgot to say that the user and the workstation are part of a domain, so i
cannot create another user account so easily. Moreover i must mention that I
have to change rights not of one user but of 30 in a short time. Some of them
have outlook base up to 4 Gb - so the process of migrating data will take too
much time.
Sometimes I change permissions to registry branches for the user to full
control and make him the owner of the folder with his accont settings in Docs
and settings and it works but sometimes it doesn't! And I cannot guarantee
the user that in the future he will have no problem because of it.
--
Best regards,
Oiprox

"Jesper Johansson" [MSFT] said:

Why do you need to change a user from administrator to Power User? It

buys
you almost nothing from a security perspective.
Your statement conflicts with many MVPs but coming directly from Microsoft I
don't doubt you are correct, but still I'd be interested to know the facts.

A Power User is just an administrator that has not made himself an

administrator yet. If anything you need to change it to a regular user.
I didn't know that a power user could make himself an administrator, would
you care to elaborate.

More than likely the creator/owner on the user's profile is listed as

"Administrators" not the user account.
That can easily easily be changed.

The Files and Settings Transfer Wizard is the easiest way "to more the

profile".
(?) You lost me here. I'd be interested to know your meaning; any tip is a
good tip specially coming directly from Microsoft.

And I responded to the OP request with what seems to me the most practical
approach and because I believe it's best to have more than one
administrative account, and I didn't mention it but seems obvious he should
leave the administrative account as it is and instead of converting it to
power or regular user, he should instead create a new account, and the File
and settings wizard seems to me the most practical approach to transfer
files and settings to the new account without modifying the administrative
account.. but that's just my point of view of course and just a suggestion.

--------------------------------
"Oiprox" <[email protected]> escribió en el mensaje

Hello Everyone!
I need to change a user rights from Administrator to Power user but when
I
do it - the system after logging off and On says that it cannot access
the
Desktop folder - and the best part of user settings get corrupted!
When I return the rights of Administrator - everything is OK!
What is the best and 100% way of changing rights from Admin to PU?