Windows Forum

Ask something
Discussion Locked

Perms assigned to an account

0 helpful
6 replies

by tim marshall - houston

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What tools(free preferably) can I use to see what permissions are assigned to my Administrator account. I use a different Admin account other than the default and I would like to remove all admin rights to it and remove it from ACL's. Thanks.

6 replies

by sixfourtykilo

Win2k and XP come with a snap-in called RSOC.MSC or Resultant Set of Policy. That should tell you what you want to know.

by joseph moore

Well, you can use the IFMEMBER.EXE tool from the Resource Kit to get the group membership of the account.
IFMEMBER is also a free download from Microsoft:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/ifmember-o.asp

Now, if you need to see if your Administrator has some specifically defined advanced rights, like Log On As A Service for example, then it really depends on if you are in a Win2K Active Directory domain or not. If you are, then open Group Policy -> Windows Settigns -> Security Settings -> Local Policies -> User Rights Asseignment. Check if your Administrator account is in there. If so, then remove it and add your new admin account.

Now, if you are running NT4 PDC/BDCs, then open User Manager for Domains -> Policies -> User Rights, and check the Advanced box on the bottom. Scroll through and see if the Administrator account is in there.

Other then that, if you need to run a NTFS security audit of any file/folders that only the Administrator account can access, that is harder. You can run XCACLS.EXE against your machines and pipe the output to a text file for later analysis.
XCACLS is also a free download:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asphope this helps

This discussion is closed to new replies.