RE: UAC--argh...

2009-07-16 Thread David Lum
NICE, the confirmation message said nothing about time zone... and obviously I didn't pat enouth attention on the web page... From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Thursday, July 16, 2009 10:32 AM To: NT System Admin Issues Subject: RE: UAC--argh... Huh?!? It's al

RE: UAC--argh...

2009-07-16 Thread Miller Bonnie L .
I love when I hear that "the Internet is down" 8) From: David Lum [mailto:david@nwea.org] Sent: Thursday, July 16, 2009 10:22 AM To: NT System Admin Issues Subject: RE: UAC--argh... LOL - yeah "what kind of login do you mean?" It keeps us busy, to be sure. Few things are

RE: UAC--argh...

2009-07-16 Thread Maglinger, Paul
Huh?!? It's already over. It was at 11:30am eastern time. Shookie has left the building... From: David Lum [mailto:david@nwea.org] Sent: Thursday, July 16, 2009 12:22 PM To: NT System Admin Issues Subject: RE: UAC--argh... LOL - yeah "wh

RE: UAC--argh...

2009-07-16 Thread David Lum
: Thursday, July 16, 2009 9:35 AM To: NT System Admin Issues Subject: RE: UAC--argh... Exactly-that is what we do and what I'm talking about, so I think we are doing the same things. RDP to the server and use an admin account when logging on at that point. Normal user logon when on workst

RE: UAC--argh...

2009-07-16 Thread Miller Bonnie L .
o: NT System Admin Issues Subject: Re: UAC--argh... I use server admin console with the remote desktop snap-in from my workstation to connect and enter the domain admin credentials at that point, or I use the run-as whenever necessary. I never use my normal user account to log onto a server

Re: UAC--argh...

2009-07-16 Thread Sherry Abercrombie
ervers. You’re saying you log onto both > as your user and then elevate where needed, right? > > > > *From:* Sherry Abercrombie [mailto:saber...@gmail.com] > *Sent:* Thursday, July 16, 2009 8:21 AM > > *To:* NT System Admin Issues > *Subject:* Re: UAC--argh... > >

RE: UAC--argh...

2009-07-16 Thread Miller Bonnie L .
ombie [mailto:saber...@gmail.com] Sent: Thursday, July 16, 2009 8:21 AM To: NT System Admin Issues Subject: Re: UAC--argh... I have two user accounts. One is my regular account that is associated with my Exchange mailbox that only allows me access to my dept. share etc. it's a limited acces

Re: UAC--argh...

2009-07-16 Thread Don Kuhlman
: Re: UAC--argh... Another comment, now would be a good time to implement something like this as you're changing server OS etc.  We did this when we migrated to ActiveDirectory from NT4.0.  Had a lot of whining and complaining at first, but once they got used to the new procedures, it wasn&#x

Re: UAC--argh...

2009-07-16 Thread Sherry Abercrombie
sider in a gray area where we could do >> it better, like a DBA that logs on as an admin on the server. But, when we >> tried to limit things down, it was tough enough to get it to the desktops. >> Even our admins get upset about having to elevate permissions to do things >> l

Re: UAC--argh...

2009-07-16 Thread Sherry Abercrombie
get upset about having to elevate permissions to do things > like connect to a share with another user name, etc. > > > > *From:* Sherry Abercrombie [mailto:saber...@gmail.com] > *Sent:* Thursday, July 16, 2009 7:18 AM > *To:* NT System Admin Issues > *Subject:* Re: UAC--argh... >

RE: UAC--argh...

2009-07-16 Thread Miller Bonnie L .
h enough to get it to the desktops. Even our admins get upset about having to elevate permissions to do things like connect to a share with another user name, etc. From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: Thursday, July 16, 2009 7:18 AM To: NT System Admin Issues Subject: Re:

Re: UAC--argh...

2009-07-16 Thread James Rankin
c > > Phone: 847-890-4021Fax: 847-255-1896 > > ccoo...@aurico.com > > > > *From:* Sherry Abercrombie [mailto:saber...@gmail.com] > *Sent:* Thursday, July 16, 2009 9:18 AM > *To:* NT System Admin Issues > *Subject:* Re: UAC--argh... > > > > E, that

RE: UAC--argh...

2009-07-16 Thread Cameron Cooper
...@aurico.com From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: Thursday, July 16, 2009 9:18 AM To: NT System Admin Issues Subject: Re: UAC--argh... E, that has been a no-no for best security practices for years. I'm sure if you dig around long enough you could come up

Re: UAC--argh...

2009-07-16 Thread Sherry Abercrombie
other servers I use my daily > use account. > > > > Dave > > > > *From:* Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] > *Sent:* Thursday, July 16, 2009 5:05 AM > > *To:* NT System Admin Issues > *Subject:* RE: UAC--argh... > > > > Dave—do

RE: UAC--argh...

2009-07-16 Thread David Lum
I use my daily use account. Dave From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Thursday, July 16, 2009 5:05 AM To: NT System Admin Issues Subject: RE: UAC--argh... Dave-do your people who log onto servers log on with limited accounts there as well? If so, how many people

Re: UAC--argh...

2009-07-16 Thread James Rankin
That's more or less the way I've always done file permissions. As long as you don't have anyone getting creative (my boss springs to mind) it always works pretty flawlessly, and with a minimum of admin YMMV 2009/7/16 Tom Miller > It took me a while to get used to it too, and some folks on this

Re: UAC--argh...

2009-07-16 Thread Tom Miller
It took me a while to get used to it too, and some folks on this list provided suggestions. My biggest issue what that I didn't want many shares under a root folder such as f:\deptdata\. This is important here, since we are migrating file and print to Windows from a non-Windows system. Presently

RE: UAC--argh...

2009-07-16 Thread Miller Bonnie L .
used. From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 2:02 PM To: NT System Admin Issues Subject: RE: UAC--argh... I think the only time an admin account would be used would be specifically to install software - I'm thinking kind of like changing a Citrix serv

RE: UAC--argh...

2009-07-16 Thread Miller Bonnie L .
n for now. The scenario below is not a common one, but just something I could think of that might be able to happen. -B -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, July 15, 2009 7:39 PM To: NT System Admin Issues Subject: Re: UAC--argh... On Wed, J

RE: UAC--argh...

2009-07-15 Thread Ken Schaefer
remy Anderson [mailto:jer...@mapiadmin.net] Sent: Thursday, 16 July 2009 4:10 AM To: NT System Admin Issues Subject: RE: UAC--argh... I think I remember this happening at my house. If i logged in as a user with domain admin priviliges, I recieved all sorts of UAC prompt errors, and creating file shares was

Re: UAC--argh...

2009-07-15 Thread Ben Scott
On Wed, Jul 15, 2009 at 4:39 PM, Miller Bonnie L. wrote: > So question on disabling AAM—Wouldn’t that defeat the “malware protection” > component of UAC ... That assumes that, the unknown admin, having been conditioned to click "Allow" every time it pops up -- because it pops up constantly durin

RE: UAC--argh...

2009-07-15 Thread David Lum
r Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 1:40 PM To: NT System Admin Issues Subject: RE: UAC--argh... LOL-that happens a LOT in the school applications world with permissions in general-"it needs to be administrator". So question on disabling AAM-

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
would disabling AAM allow it to run without consent? From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 1:21 PM To: NT System Admin Issues Subject: RE: UAC--argh... +1 on keeping UAC on. Disabling AAM is sufficient to remove the annoyances, UAC has real benefits. My opinion c

RE: UAC--argh...

2009-07-15 Thread David Lum
9 12:30 PM To: NT System Admin Issues Subject: Re: UAC--argh... On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. wrote: > So, I've been trying REALLY hard to just get used to UAC with WS08 ... The following is my opinion and analysis. It differs significantly from the Microsoft part

Re: UAC--argh...

2009-07-15 Thread Ben Scott
On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. wrote: > So, I’ve been trying REALLY hard to just get used to UAC with WS08 ... The following is my opinion and analysis. It differs significantly from the Microsoft party line. Disable admin approval mode (AAM) for all administrators.Ke

RE: UAC--argh...

2009-07-15 Thread Phillip Partipilo
not, you cannot drag/drop or copy/cut/paste between. Phillip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 _ From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 2:35 PM To: NT System Admin Issues Subject: RE: UAC--argh

RE: UAC--argh...

2009-07-15 Thread Carl Houseman
Yes, prompting disabled is automatic approval of the dimmed-background UAC prompts. From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 2:35 PM To: NT System Admin Issues Subject: RE: UAC--argh... The only difference I can see is that I used windows

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
Thanks Mike-I will find it then. That would be easiest. From: Mike Gill [mailto:lis...@canbyfoursquare.com] Sent: Wednesday, July 15, 2009 11:26 AM To: NT System Admin Issues Subject: RE: UAC--argh... This setting can be controlled via GPO in Win2K8 natively, or in Win2K3 using Vista's

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
th read access. But, if I don't, it just comes up and I get the access denied errors. Does UAC prompting disabled make it automatically click through as allowed? From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 10:46 AM To: NT System Admin Issues Subject: RE:

RE: UAC--argh...

2009-07-15 Thread Mike Gill
This setting can be controlled via GPO in Win2K8 natively, or in Win2K3 using Vista's RSAT. -- Mike Gill From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Wednesday, July 15, 2009 10:49 AM To: NT System Admin Issues Subject: RE: UAC--argh... I'm curious. Sure I h

RE: UAC--argh...

2009-07-15 Thread Phillip Partipilo
bject: RE: UAC--argh... Wow Phillip-That was EXACTLY the problem Now, when I right-click explorer and run as administrator, it does exactly what I think it should. So no, apparently they haven't changed that behavior (that I didn't know about-didn't really do this much before V

RE: UAC--argh...

2009-07-15 Thread Jeremy Anderson
sure if that applies here or not. From: Miller Bonnie L. [mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 11:06 AM To: NT System Admin Issues Subject: RE: UAC--argh... Hear hear! And thanks to everyone else who chimed in to help out. After some

RE: UAC--argh...

2009-07-15 Thread Carl Houseman
o errors as before. Carl From: David Lum [mailto:david@nwea.org] Sent: Wednesday, July 15, 2009 2:01 PM To: NT System Admin Issues Subject: RE: UAC--argh... An amazing thread his, all coming down to a friggin' checkbox. I can't count the hours I've spent troubleshooting va

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
: RE: UAC--argh... An amazing thread his, all coming down to a friggin' checkbox. I can't count the hours I've spent troubleshooting various things over the years just to find it's a checkbox someplace, or an option down some menu list I've never used before... Davi

RE: UAC--argh...

2009-07-15 Thread David Lum
NEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 10:57 AM To: NT System Admin Issues Subject: RE: UAC--argh... Wow Phillip-That was EXACTLY the problem Now, when I right-c

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
do I send gifts??? This is going to make my life so much easier... -B From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Wednesday, July 15, 2009 10:49 AM To: NT System Admin Issues Subject: RE: UAC--argh... I'm curious. Sure I have an '08 machine on the test bench but its disconn

RE: UAC--argh...

2009-07-15 Thread Carl Houseman
urity. FWIW the domain group I added has no members... Carl From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 1:37 PM To: NT System Admin Issues Subject: RE: UAC--argh... Stopping all AV (Trend Officescan) didn't help. Your "explorer

RE: UAC--argh...

2009-07-15 Thread Phillip Partipilo
15, 2009 1:07 PM To: NT System Admin Issues Subject: Re: UAC--argh... We, as administrators, need to get more in tune with the OS again. This is not like the days of NT 4 and Win 98. I blew hours last week because I forgot something as simple as what Carl just said. Jon On Wed, Jul 15, 2009 a

RE: UAC--argh...

2009-07-15 Thread Carl Houseman
Carl From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 1:27 PM To: NT System Admin Issues Subject: RE: UAC--argh... Carl-thanks for trying it. Are your machines at SP2 and IE8 (like ours)? I'm just can't figure out what might be so darn uniq

RE: UAC--argh...

2009-07-15 Thread mse...@ont.com
Date: Wed, 15 Jul 2009 10:08:35 -0700 To: ntsysadmin@lyris.sunbelt-software.com Subject: RE: UAC--argh... Yes-If I run cmd as administrator and then run explorer.exe, I still have trouble. That's why I had the question about whether explorer really runs as administrator or whether it is cha

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
urity again. Adding yourself back in explicitly makes the problem go away. -B From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 10:27 AM To: NT System Admin Issues Subject: RE: UAC--argh... Carl-thanks for trying it. Are your machines at SP2 and IE8 (li

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
interacting. I guess I'm going to try this on my Vista Home computer tonight. From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 10:22 AM To: NT System Admin Issues Subject: RE: UAC--argh... I should have said "type 'explorer .' at the command

RE: UAC--argh...

2009-07-15 Thread Carl Houseman
oblems. Carl From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] Sent: Wednesday, July 15, 2009 1:09 PM To: NT System Admin Issues Subject: RE: UAC--argh... Yes-If I run cmd as administrator and then run explorer.exe, I still have trouble. That's why I had the question about w

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
If so, I guess I will try creating a separate domain group and add our "file management" admin users. -B From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Wednesday, July 15, 2009 9:56 AM To: NT System Admin Issues Subject: Re: UAC--argh... I am just bringing up my first and should b

RE: UAC--argh...

2009-07-15 Thread Steven M. Caesare
ch to ask for clear error feedback. Ya know..even for us lazy admins who want to manage things Win3.1 style. -sc From: Jon Harris [mailto:jk.har...@gmail.com] Sent: Wednesday, July 15, 2009 1:07 PM To: NT System Admin Issues Subject: Re: UAC--argh... We, as administrators, need to get

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
[mailto:jk.har...@gmail.com] Sent: Wednesday, July 15, 2009 10:11 AM To: NT System Admin Issues Subject: Re: UAC--argh... Try right clicking on Explorer and run as administrator. Jon On Wed, Jul 15, 2009 at 1:08 PM, Miller Bonnie L. mailto:mille...@mukilteo.wednet.edu>> wrote: Yes-If I run cmd

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
onfig...@gmail.com] Sent: Wednesday, July 15, 2009 9:46 AM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. mailto:mille...@mukilteo.wednet.edu>> wrote: So, I

Re: UAC--argh...

2009-07-15 Thread Jon Harris
gt; > > *From:* Carl Houseman [mailto:c.house...@gmail.com] > *Sent:* Wednesday, July 15, 2009 9:49 AM > *To:* NT System Admin Issues > *Subject:* RE: UAC--argh... > > > > Or elevate a command prompt, then type "explorer" at the command line and > now you hav

RE: UAC--argh...

2009-07-15 Thread Miller Bonnie L .
A0534.36EB0290] -B From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 9:49 AM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate a command prompt, then type "explorer" at the command line and now you have an elevated Explorer. Carl Fr

Re: UAC--argh...

2009-07-15 Thread Jon Harris
ore clearly separate object permissions errors from > errors generated as a result of lack of elevation, IMO. > > > > -sc > > > > *From:* Carl Houseman [mailto:c.house...@gmail.com] > *Sent:* Wednesday, July 15, 2009 12:49 PM > *To:* NT System Admin Issues > *Subject:

RE: UAC--argh...

2009-07-15 Thread Steven M. Caesare
MS really needs to more clearly separate object permissions errors from errors generated as a result of lack of elevation, IMO. -sc From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, July 15, 2009 12:49 PM To: NT System Admin Issues Subject: RE: UAC--argh... Or elevate

Re: UAC--argh...

2009-07-15 Thread Jon Harris
gt; Carl > > > > *From:* Rob Bonfiglio [mailto:robbonfig...@gmail.com] > *Sent:* Wednesday, July 15, 2009 12:46 PM > *To:* NT System Admin Issues > *Subject:* Re: UAC--argh... > > > > Have you tried assigning permissions via an elevated command line or > powershell?

Re: UAC--argh...

2009-07-15 Thread Jon Harris
I am just bringing up my first and should be only 08 File server. I am having the same issue so I just put my user ID on the root folder and then after everything is done I will back out removing my direct access as I reset the permissions, owners and auditing. Jon On Wed, Jul 15, 2009 at 12:41

RE: UAC--argh...

2009-07-15 Thread Carl Houseman
Or elevate a command prompt, then type "explorer" at the command line and now you have an elevated Explorer. Carl From: Rob Bonfiglio [mailto:robbonfig...@gmail.com] Sent: Wednesday, July 15, 2009 12:46 PM To: NT System Admin Issues Subject: Re: UAC--argh... Have you tried

Re: UAC--argh...

2009-07-15 Thread Rob Bonfiglio
Have you tried assigning permissions via an elevated command line or powershell? On Wed, Jul 15, 2009 at 12:41 PM, Miller Bonnie L. < mille...@mukilteo.wednet.edu> wrote: > So, I’ve been trying REALLY hard to just get used to UAC with WS08, but > now that we have some actual file servers coming

UAC--argh...

2009-07-15 Thread Miller Bonnie L .
So, I've been trying REALLY hard to just get used to UAC with WS08, but now that we have some actual file servers coming online, using windows explorer to assign permissions is driving me absolutely batty. Example: While logged on with a domain admin account on a WS08 SP2 member server, I creat