View original (French)

No administrative rights even when being an administrator

root -  
thev Posted messages 2005 Registration date   Status Member Last intervention   -
Good evening,

I no longer have certain administrative rights on my Windows 10 system.
For example, to install, uninstall, or modify software. Furthermore, I do not have access to the net user command, yet I can access lusrmgr.msc. I can disable services, etc., but certain rights are denied to me, such as those mentioned above (among others).

My user is still in the following groups: administrators & users. I've tried just with the administrators group, but it's the same thing. Also, I have access to the administrator account as I activated it some time ago with the command net user administrator /active:yes, but even under this account, I cannot do certain things and my rights are denied.

What is causing this? It's quite problematic in the sense that I can't even install or uninstall software, nor can I update them... I consistently get error 5 or a classic missing privileges error from the installer...

Thank you in advance for your help!

P.S: my system is healthy and clean. I have run a complete chkdsk, regular cleanings, no malware, firewall based on custom rules... I honestly do not understand.

5 answers

  1.
    thev Posted messages 2005 Registration date   Status Member Last intervention   721
     
    This could be due to incorrectly set parameters in group policy management.
    What version of W10 do you have?

    --
    0
    1. root
       
      Windows 10 Professional

      I thought about it!!! Because I recently fiddled with that editor. I must have messed something up, if that's where it comes from.
      Could you tell me what might be the misconfigured setting?
      Thanks to you :)
      Edited: I no longer have access to gpedit.msc. Access denied...
      However, I have access to the local security policy manager.
      0
  2. thev Posted messages 2005 Registration date   Status Member Last intervention   721
     
    The best thing to do is to create the report corresponding to the configured options. To do this, you need to use the Group Policy Management Console. Since this console is not included in the pre-installed features of Windows 10, you need to download and install it
    https://www.microsoft.com/en-US/download/details.aspx?id=45520
    Once this console is open, you just need to click on the report button located in the second half of the window to obtain the configured options

    If you have access to the Local Security Policy manager, you could take a look at the Software Restriction Policies and Application Control Policies items.

    0
    1. root
       
      Installation impossible, j'obtiens cette erreur : Only one instance of wusa.exe is allowed to run.

      What is this process? I restarted the system and opened no program, yet I still have this error... Phew, this is getting annoying.

      Thank you for your help.
      0
  3. thev Posted messages 2005 Registration date   Status Member Last intervention   721
     
    This installation goes through Windows Update. The latter may be busy with automatic updates.
    Anyway, I just noticed that this console only works in domain mode and not in Workgroup mode.
    So, take a look at the software restriction policies and application control policies items in the local security manager since you have access to it.

    That said, the simplest solution might be to perform a restore to an earlier date, which will restore the correct settings in your registry.

    0
    1. root
       
      Neither of these two parameters has been changed.
      And for the restore, I disabled the setting during the system installation... so no earlier restore point...
      0
  4. thev Posted messages 2005 Registration date   Status Member Last intervention   721
     
    To unlock access to gpedit.msc, try this via the administrator command prompt: 
    c:
    cd\windows\system32
    regsvr32 /n /I userenv.dll
    cd\windows\system32\wbem
    mofcomp scersop.mofs
    gpupdate /force


    If this works, you can try: 
    gpresult /v
    which will give you the enabled settings, but is harder to read than with the Group Policy Management Console
    --
    0
    1. root
       
      I'm getting an Access Denied error after typing the commands...
      It's frustrating. I absolutely need to install software but I can't...
      Is there an alternative other than formatting the system?
      Thank you again.
      0
      1. SerieusGames Posted messages 31 Registration date   Status Member Last intervention   3 > root
         
        You can always reset without touching your files and folders; it will restore your admin rights like new!
        0
    2. root
       
      That's what I'm going to do if nobody finds a solution...
      It's really a mess the permissions under the Windows system, if it were up to me, I would already be on Linux or BSD.
      0
      1. thev Posted messages 2005 Registration date   Status Member Last intervention   721 > root
         
        There is indeed a real issue regarding the rights on C and its subfolders. The best course of action is indeed to proceed with a system reset, but beforehand I recommend that you:
        1- run a check on drive C
        2- back up your personal data in case the reset accidentally deletes them.
        0
  6. thev Posted messages 2005 Registration date   Status Member Last intervention   721
     
    Have you checked the access rights on c:\windows\system32?

    --
    -1
    1. root
       
      I'm going to do it.
      In the meantime, I loaded the recovery utility from the installation CD to access an unrestricted console. Results:
      http://www.noelshack.com/2015-48-1448820698-img-20151129-190346.jpg
      Apart from this, I'm getting errors when running usual software: like the resource is not found, that Windows cannot execute it, with a yellow triangle. Also, that I need to contact my system administrator (lol...) so there you go, some kind of holes in the system. I don't understand anything anymore.
      0
    2. root
       
      You’ve hit the nail on the head, I think:

      http://image.noelshack.com/fichiers/2015/48/1448821249-01.png

      How do you solve the permission issue?
      0
    3. thev Posted messages 2005 Registration date   Status Member Last intervention   721 > root
       
      For the administrators group, you need to lower the slider (special permissions) and click on advanced to display access permissions.
      To resolve any permission issues:
      1- change the owner = TrustedInstaller to your username (run netplwiz --> properties of your account).
      2- modify the permissions of the administrators group
      3- check replace the permissions of child objects

      Following your feedback, I conducted a review of the script that needs to be corrected as follows 

      cd\windows\system32
      regsvr32 /n /I userenv.dll
      cd\windows\system32\wbem
      mofcomp scersop.mof
      cd\windows\system32
      gpupdate /force
      0
    4. root
       
      I changed the owner to Administrators. It was set to TrustedInstaller. In addition, I granted full control to the Administrators group, as follows:
      http://image.noelshack.com/fichiers/2015/48/1448821930-02.png
      Should it work after a reboot?
      0
    5. thev Posted messages 2005 Registration date   Status Member Last intervention   721 > root
       
      The permissions seem correct to me. I will check with those I have.
      We need to see if this manipulation has resolved the issue.
      0