Effective permissions suddenly admin for limited users

FredBEubanks · 09-10-2009, 03:00 AM

The oddest thing just started happening.

I have 3 limited users running on my XP SP3 box. These users are members of the Users group only.

All of a sudden, all of the users are now like administrators with full access to everything including the other limited users' private directories. Looking at the "Effective Permissions" on any of these supposedly hidden directories gives ALL of the permissions. The users can even write to the "\Program Files" and "\WINDOWS" directories; obviously a catastrophic state if security is at all important.

I have no idea what to do about this. Can this be a virus? Is there something in some hidden group policy or other tweak that will restore these users back to being unable to access other directories?

These users can also see and write to all areas of the registry too.

I am worried that this is the result of some sort of bug in a Microsoft update, since how else but the O/S allowing this access at the NT level could this occur?

Any advice most gratefully accepted.

TIA.

Stevie C · 09-10-2009, 08:52 AM

Hi,

The only way i can think of going about it is going into the computer management console/local users and groups/groups and making sure in the admin and power user groups that none of the limited users have been added. If thats ok then its probably a good idea to scan your computer and find out if there is a virus or spyware present.

Hope this helps.

**TheOutcaste** · 09-10-2009, 09:50 AM

Welcome to TSF!

First thing I'd try is a System Restore.

If that doesn't fix it, see if this article will help:
How do I restore security settings to the default settings?

HTH

Jerry

FredBEubanks · 09-11-2009, 11:13 AM

Thanks for the replies.

System Restore is not an option... I turned it off - my bad...

"secedit /analyze" on the broken system shows thousands of mismatches. The troubling thing is that running the same secedit command on a working system shows the same pattern of mismatches.

I guess I can try the secedit /configure option first and then if that doesn't work, a repair installation with new users. I am not at the broken system right now so I can't try another suggestion to see if "net localgroup administrators" shows these users in that group where "computer management"->users/groups would not.

09-10-2009, 03:00 AM	#1 (permalink)
FredBEubanks Registered User Join Date: Sep 2009 Posts: 2 OS: XP SP3	Effective permissions suddenly admin for limited users The oddest thing just started happening. I have 3 limited users running on my XP SP3 box. These users are members of the Users group only. All of a sudden, all of the users are now like administrators with full access to everything including the other limited users' private directories. Looking at the "Effective Permissions" on any of these supposedly hidden directories gives ALL of the permissions. The users can even write to the "\Program Files" and "\WINDOWS" directories; obviously a catastrophic state if security is at all important. I have no idea what to do about this. Can this be a virus? Is there something in some hidden group policy or other tweak that will restore these users back to being unable to access other directories? These users can also see and write to all areas of the registry too. I am worried that this is the result of some sort of bug in a Microsoft update, since how else but the O/S allowing this access at the NT level could this occur? Any advice most gratefully accepted. TIA.

09-10-2009, 08:52 AM	#2 (permalink)
Stevie C Registered User Join Date: Aug 2007 Location: Glasgow,Scotland Posts: 117 OS: Windows 7 RC, Windows Vista, Windows Xp, Windows Server 2003 My System	Re: Effective permissions suddenly admin for limited users Hi, The only way i can think of going about it is going into the computer management console/local users and groups/groups and making sure in the admin and power user groups that none of the limited users have been added. If thats ok then its probably a good idea to scan your computer and find out if there is a virus or spyware present. Hope this helps. __________________ Stevie and the Amazing Technicoloured Laptop!!! featuring hit songs such as "Any Operating System Will Do" and "Close Every Laptop"

09-10-2009, 09:50 AM	#3 (permalink)
TheOutcaste TSF Enthusiast Join Date: Mar 2009 Location: Portland, OR Posts: 815 OS: MS-Dos 6.22 - Win7	Re: Effective permissions suddenly admin for limited users Welcome to TSF! First thing I'd try is a System Restore. If that doesn't fix it, see if this article will help: How do I restore security settings to the default settings? HTH Jerry __________________ Microsoft MVP - Windows Desktop Experience Of course I know all the answers; I just don't always match the answers to the right questions. Rated R for Violence -- When your PC flies through a window, that's violent, right?

09-11-2009, 11:13 AM	#4 (permalink)
FredBEubanks Registered User Join Date: Sep 2009 Posts: 2 OS: XP SP3	Re: Effective permissions suddenly admin for limited users Thanks for the replies. System Restore is not an option... I turned it off - my bad... "secedit /analyze" on the broken system shows thousands of mismatches. The troubling thing is that running the same secedit command on a working system shows the same pattern of mismatches. I guess I can try the secedit /configure option first and then if that doesn't work, a repair installation with new users. I am not at the broken system right now so I can't try another suggestion to see if "net localgroup administrators" shows these users in that group where "computer management"->users/groups would not.