win7 Embedded: User is in Admin group but has less permissions than local admin - windows-7

During the installation of windows embedded 7, a user named 'MYUSER' is created.
This user belongs to the "Admin" group.
From this user, I can change IP, disable drivers etc.
I have a shortcut to an application written by a collegue.
In the shortcut propertieis, the checkbox compatability->Run this program as an administrator
is not set.
If it's not set, the application crashes.
I do not understand why.
'MYUSER' is like 'Administrator'
Why this checkbox is required ?
How can I bypass this ?
Thank you,
Zvika

Related

Windows 2019 Autologin Domain User

I have downloaded Autologin from here : https://learn.microsoft.com/en-us/sysinternals/downloads/autologon
This works perfectly in a Domain in my test environment with normal user . ( non admin )
If I try this on the Company Domain, the software says User Unknown or Password incorrect .
BUT if I add the user to the Local Administrators it works and it can also log in. BUT this is not allowed.
Can anyone please tell me which GPO or Settings might be preventing a normal user from using Autologin to a Server ?
Thank you

How to reset admin password from guest account

Son of my collegue accidently created new user account in windows 8.1 and set it as admin. He also set password which of course doesn't know now. Is there any chance how to reset this password from guest account? Any software from third part or live linux? Thank you for helping
I tried some commands in cmd, but everything finished of course on admin permissions
visit C:/home windows/system32.
replica cmd.exe and paste it on laptop.
Rename cmd.exe to sethc.exe.
Replica the brand new sethc.exe to gadget 32,while home windows asks for overwriting the report,then click on sure.
Now log off from your guest account and on the user pick out window,press shift key 5 times.
6)In preference to Sticky Key affirmation conversation,command activate with complete administrator privileges will open.
Now kind “ net user ADMINISTRATOR “come 2 learn” where “come 2 learn” can be any password you want and press input.
You’ll see “ The Command finished successfully” after which go out the command set off and login into administrator together with your new password.
Bravo !! Now you have got hacked admin thru guest account.

Option "start Server" in BOBI4.2 is not displayed

I use BOBI4.2. When I access the CMC with Administrator, then go to "Servers", and right-clic on a server, I find the options "Start Server, Stop Server...".
Now, when I access the CMC with another user that belongs to the group Administrators, and right-clic on a server, I don't find these options.
Administrator:
Options displayed for Administrator
Another user:
Options not displayed for other users
Do you have any idea how I can let them appear?
Thanks in advance for your response.
Best regards.
Check top-level security settings for Servers. The Administrator user automatically has Full Control over everything, but that is not necessarily true for the Administrators group.

Local user account created with Powershell is NOT shown in settings "Family & Other people"

I am working on Windows 10 Assigned Access for Desktop for version 1607.
Mission: I need to get Assigned Access to work with Powershell.
Steps done:
I create a new LocalUser account with New-LocalUser and I enable the account with Enable-LocalUser. To check if the account is added, I run Get-LocalUser and see that the account is created (see attachment).
Issue:
To double check I go to the PC settings for Accounts-Family & other people, but I cannot see the new local user account "KioskTest".
I have restarted the computer but the account is not added to "Family & Other people".
I have spent some time on this and I would really appreciate your help, How can I make sure that the added Local user "KioskTest" is shown in the PC Accounts settings-Family & other people, when using Powershell?
I can Set-AssignedAccess, when I do Get-AssignedAccess I can see that it is there. Trouble is, I cannot login to the local user account because I cannot find the account in the settings for the PC.
It's like powershell has "hidden" the local user account from my client computer!!!
ADDED information + updated images:
After some trial and error I found out the following:
Using NET USER username password/ADD --works perfectly! I can find the user account and login as a customer would. The account is part of the LocalGroupMember
The local user account created with New-LocalUser with Powershell does NOT appear in the PC account settings BUT if you click on set assigned access in the Family & other people the system finds the local user account (see attachment). However you cannot login to the account as it seemingly does not have a group membership! Not great for testing :(
Thanks for taking the time,
Karina
See attachment:
Powershell Get-AssignedAccess
PC Account settings Family & other people
In my case it was a group membership issue. I have created some users with powershell new-localuser, but they did not show up in any GUI and I was unable to log on. The users were only visible in powershell with get-localuser and lusmgr. In settings, control panel 'user accounts' and login screen they did not show up.
I just had to add the new users to the local 'users' group. Once this was done, the new users were visible in all settings and available for login.
I was unaware of that local security policy (local policy/user rights assignment/allow log on locally) restricting login to 'Guest,Administrators,Users,Backup Operators'.
Either add the users to one of these groups or add them to the local security policy.
This isn't really a PowerShell issue and might be better suited for SuperUser. But I would guess that this is an issue with group membership. Unfortunately get-localuser doesn't give membership. So something like this would be the PowerShell way to check which user objects belong to which local groups.
Get-Localgroup | % { "`n$($_.name)`n"; get-localgroupmember $_}
Then check through which groups other user objects are a member of and add the KioskTest account to that group using this:
Add-LocalGroupMember -Group "ExampleGroup" -Member "KioskTest"
To validate user is created or not, the below simple command helps. You may try it.
In case user is created you will get below output
Command- net user TestUser2
Output-
User name TestUser2
When user is not present
Command- net user TestUser
output-
The user name could not be found.
I had the same issue. The problem was that when specifying the group I didn´t take into account that before the name of the group needs to go domain or in my case, name of the virtual machine. Therefore the command will look like this:
... -Group "DomainName\ExampleGroup" ...
You can check the existing groups on your machine by typing lusrmgr in Window´s run window.

Strange folder creation in windows

I need some help in understanding a problem. Here is the scenario. We have a windows domain controller machine and several machines in that domain. (Everything in windows 2008). In one of the machines in that domain (machine name AlphaSiter) our own custom java based product is installed. To log on into our product, you have to provide a user/password combo which is validated against the active directory. Now here is the scenario.
Log into the domain controller and create a user (say David) in the active directory and set the “User must change password in next login option”.
Go to the machine called AlphaSiter where our custom product is installed and try to login to our product with the newly created user credentials and then change password successfully.
The side affect is that in the AlphaSiter machine in C:\Users the user folder is created..that is c:\Users\David. Also this folder is only created if at the time of user creation the “User must change password in next login option” is set. This user folder is not created if the option is unchecked. We are not creating the folder programmatically from our code. So I am wondering how this folder is getting created.Is it something that windows does internally?
Any help on this would be appreciated as I have to give explanation to our customer ---:)
The user's profile folder is always created when there is some profile information that needs to be stored. It may be some registry settings in HKCU hive.
You can use RegMon to track regitry activity.

Resources