Administrator/User Accounts

[Summer1]

Hello All.

I was under the impression that only an 'Administrator' could install and
remove programs but even in 'User' mode (which is how I am signed in all of
the time, even though I am the administrator), I am still able yo install and
remove programs.

Why is that? Is there a setting that has to be changed so that a 'User'
cannot install or remove programs?

 

[Mike S]

On 6/18/2010 74 PM, Summer1 wrote:
>
> Hello All.
>
> I was under the impression that only an 'Administrator' could install and
> remove programs but even in 'User' mode (which is how I am signed in all of
> the time, even though I am the administrator), I am still able yo install and
> remove programs.
>
> Why is that? Is there a setting that has to be changed so that a 'User'
> cannot install or remove programs?

Is it a Power User account? The reason I ask is it looks like there is a
significant difference between that and a User account (shortened
excerpt from page shown here, more content is on the page):

http://www.microsoft.com/resources/...ndows_security_default_settings.mspx?mfr=true

Power Users

....The default permissions that are allotted to this group allow this
group's members to modify computerwide settings.

....Members of the Power Users group have more permissions than members
of the Users group and fewer than members of the Administrators group.
Power Users can perform any operating system task except tasks reserved
for the Administrators group.

Power Users can:

• Install programs that do not modify operating system files or install
system services.
• Customize systemwide resources including printers, date, time, power
options, and other Control Panel resources.
• Create and manage local user accounts and groups.
• Stop and start system services which are not started by default.

Mike

 

[Summer1]

No, I am referring to a 'regular' User account.

"Mike S" wrote:

> On 6/18/2010 74 PM, Summer1 wrote:
> >
> > Hello All.
> >
> > I was under the impression that only an 'Administrator' could install and
> > remove programs but even in 'User' mode (which is how I am signed in all of
> > the time, even though I am the administrator), I am still able yo install and
> > remove programs.
> >
> > Why is that? Is there a setting that has to be changed so that a 'User'
> > cannot install or remove programs?
>
> Is it a Power User account? The reason I ask is it looks like there is a
> significant difference between that and a User account (shortened
> excerpt from page shown here, more content is on the page):
>
> http://www.microsoft.com/resources/...ndows_security_default_settings.mspx?mfr=true
>
> Power Users
>
> ....The default permissions that are allotted to this group allow this
> group's members to modify computerwide settings.
>
> ....Members of the Power Users group have more permissions than members
> of the Users group and fewer than members of the Administrators group.
> Power Users can perform any operating system task except tasks reserved
> for the Administrators group.
>
> Power Users can:
>
> • Install programs that do not modify operating system files or install
> system services.
> • Customize systemwide resources including printers, date, time, power
> options, and other Control Panel resources.
> • Create and manage local user accounts and groups.
> • Stop and start system services which are not started by default.
>
> Mike
> .
>

 

[Jose]

On Jun 18, 104 pm, Summer1 <Summ...@discussions.microsoft.com>
wrote:
> Hello All.
>
> I was under the impression that only an 'Administrator' could install and
> remove programs but even in 'User' mode (which is how I am signed in all of
> the time, even though I am the administrator), I am still able yo installand
> remove programs.
>
> Why is that? Is there a setting that has to be changed so that a 'User'
> cannot install or remove programs?

Your system could be set to restrict many operations in many different
ways.

There is a setting that can prevent users from installing and removing
programs but still allow them to perform other general administrative
tasks.

Malicious software can also modify your settings so that even though
you are 100% sure you are logged into a user account with Computer
Administrator access, you will still get messages like:

System Restore had been turned off by group policy. To turn on System
Restore contact your domain Administrator.

All we know right now is you are unable to install and remove
programs.

Tell us what program or system operation is not working
If it does not compromise personal information, what program is giving
you problems
Tell us the error message you see when you try to install/remove
programs or attempt the system operation (it doesn't work is not a
good answer)
Tell us about your system:

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.

This will minimize back and forth Q&A and eliminate guesswork.



If you specify what happens when you try to install/remove a program
using a regular user account that is configured as a Computer
Administrator, you will get solutions that work instead of things to
try.