User account permissions need resetting.

[kol12]

I've converted my administrator account to a standard user account and created a new administrator account.

As a standard user I am able to access the admins user folder which I should not be able to do. There must some issues with the permissions somewhere but I'm not sure how to go about troubleshooting it.
@fdegrove has already suggested running an acl.bat as detailed here, post #39 http/www.tenforums.com/antivirus-firewalls-system-security/64477-standard-user-account-necessary-tight-security-home-user-4.html

but it has not fixed my user permissions.

Has anyone got any ideas?

 

[captaincharisma]

sooooo you converted your only administrator account into a standard account leaving you with no windows account that has administrative privileges?

 

[kol12]

sooooo you converted your only administrator account into a standard account leaving you with no windows account that has administrative privileges?

No I created another admin account before converting the original admin account...

 

[Chicano]

You can't delete or convert the Administrator account... it's a system account and if for example you delete it, it is recreated automatically, and as you can see, converting it didn't make it a regular user account... it can still access the Administrator's folder because it still has administrative privileges.

I don't see the point in trying to make the Admin account a regular account, you could disable it instead and create a new user account with administrative privileges... and if you want to use a regular user account, create one.

To reset user permissions, do it with Subinacl or Secedit.exe

Reset All User Permissions To Default
http/www.bleepingcomputer.com/forums/t/509474/reset-all-user-permissions-to-default/


Using SECEDIT.EXE
Reset the Registry and the File Permissions in Windows XP (should apply to any windows version)
http/www.winhelponline.com/blog/reset-the-registry-and-the-file-permissions-in-windows-xp/

 

[kol12]

You can't delete or convert the Administrator account... it's a system account and if for example you delete it, it is recreated automatically, and as you can see, converting it didn't make it a regular user account... it can still access the Administrator's folder because it still has administrative privileges.

I don't see the point in trying to make the Admin account a regular account, you could disable it instead and create a new user account with administrative privileges... and if you want to use a regular user account, create one.

To reset user permissions, do it with Subinacl or Secedit.exe

Reset All User Permissions To Default
http/www.bleepingcomputer.com/forums/t/509474/reset-all-user-permissions-to-default/


Using SECEDIT.EXE
Reset the Registry and the File Permissions in Windows XP (should apply to any windows version)
http/www.winhelponline.com/blog/reset-the-registry-and-the-file-permissions-in-windows-xp/

You can convert the administrator account, it's what I done... http/www.tenforums.com/tutorials/6917-account-type-change-windows-10-a.html

The reason I wanted to convert was so I didn't have to set it up again, install programs, personalize etc.

The converted account is listed as local account, not local account/administrator. It is prompted for the administrator password for everything that needs administrative privilege's bar the administrators user folder.

"I don't see the point in trying to make the Admin account a regular account, you could disable it instead and create a new user account with administrative privileges... and if you want to use a regular user account, create one."

That's what I done, created a new admin account and then converted the original admin account (when Windows first installed) to a standard user.

 

[Chicano]

What I meant is that the Administrator account is a System account... it is created automatically when you install Windows, it is part of Windows and it's meant to be used only when necessary so it should be left alone and instead a new administrative account created for regular use... That's what captaincharisma told you in

sooooo you converted your only administrator account into a standard account leaving you with no windows account that has administrative privileges?

So I repeat: There is no point in converting the Administrator account when you can create all the administrative or regular user accounts you want. And then you want to reset the default user permissions?... That will restore all users including the Administrator to their default permissions, thereby reverting your conversion of the account. So which is it?.. Do you want to keep the account converted, or restored to default permissions?

I still don't understand what you meant here:

The reason I wanted to convert was so I didn't have to set it up again, install programs, personalize etc.

 

[kol12]

I think the whole issue here is that I've created a homegroup at some stage that has altered the permissions allowing certain folders to be "shared" including the Users folder.

This shows all currently shared folders. I'm not sure what this should look like as default.

 

[Chicano]

Just right click the share > click on Stop Sharing > OK twice.

 

[kol12]

Just right click the share > click on Stop Sharing > OK twice.

There's no option to stop sharing in the right click menu...