Account types Windows Vista

[TechClint]

We have a Dell E521 with Vista Home Premium in the shop that has 4 users on it. One of which is a Guest account. The other three users are standard account type and the Guest account is set as Guest and Administrator account type.

I have tried everything I could think of to try to change the account types to what they should be, but when ever i do it tells me "Access denied." I have booted to Safe Mode and no Admin account. I can't even create another user because no matter what I name the user it tells me that it has invalid characters in the name, when all I was trying to name the new user account was "Test."

Any help would be appreciated.

P.S.

I ahve already scanned all users with MalwareBytes and SuperAntiSpyware so I think its clean.

 

[ChinoNYC]

Just the fact that Guest is the only available Administrator account means that you have to log in as Guest and set one of the other standard account types as the main Administrator account. Once you do that, log off as Guest, log on as the new Administrator account, then change the Guest account to the Standard account. At no point, whatsoever, should you have a Guest account as the Administrator.

Let me know how it turns out.

 

[example1013]

I'm a little confused here. If you go to Computer Management > Local Users and Groups > Users, is the guest account that's listed as an administrator account have a description of "Built-in account for guest access to the computer/domain"? Or is there another account with that description? Are there two Guest accounts in the location listed?

 

[ChinoNYC]

What he did is that he made the Guest account as the only usable Administrator account, under Control Panel > User Accounts, and had the other three accounts as Standard accounts.

TechClint, try this link and see if it solves anything that I haven't covered already in my previous posts.

Vista 4 Beginners - Manage User Accounts

 

[example1013]

Well, that's not necessarily the case. It could be that whoever created the computer put Guest as the original User, so what he sees as the Guest account could actually be an Administrator account that's named "Guest".

Because I think the Administrator and Guest accounts are both disabled by default, which is why he can't see the local Administrator account.

 

[ChinoNYC]

That could also be the case. You're right. The Administrator is disabled by default, the Guest not so much as it could still be accessible.

 

[example1013]

Well, I know the guest account is disabled upon install for Windows 7, I'm pretty sure it is for XP, and I'm also fairly certain it is for Vista as well. So unless someone undisabled it, it shouldn't be available.

 

[ChinoNYC]

I shall correct myself. The Guest account is not disabled by default, but is turned off. However, unlike the Administrator account that is created upon installing Windows and is kept disabled under normal boot, the Guest account can be turned on as a Limited/Standard account after logging on.

 

[example1013]

Ah, I understand. Hopefully we're talking about an Administrator account that's named Guest, rather than an account that's in both the Administrators and Guests group.

 

[ChinoNYC]

We'll find out soon enough.

 

[TechClint]

Thanks for the replies.

The Guest account is actually in both account groups guests and administrators. When I login to the Guest account and try to change one of the other accounts to administartor, I get an error that states..."Access Denied"

 

[TechClint]

I'm a little confused here. If you go to Computer Management > Local Users and Groups > Users, is the guest account that's listed as an administrator account have a description of "Built-in account for guest access to the computer/domain"? Or is there another account with that description? Are there two Guest accounts in the location listed?

Oh!! btw in computer management the local users and groups snap-in doesnt exist

 

[TechClint]

I have tried running netplwiz as administrator to change the account types but that said access denied also.

What he did is that he made the Guest account as the only usable Administrator account, under Control Panel > User Accounts, and had the other three accounts as Standard accounts.

TechClint, try this link and see if it solves anything that I haven't covered already in my previous posts.

Vista 4 Beginners - Manage User Accounts

I didn't do this. It is something I'm trying to fix.

 

[example1013]

This is something I'd have to replicate to come up with a solution to. Unfortunately, I don't have a Vista machine. All I can think of is to reinstall windows, but I should think you'd want to wait until you've exhausted all other options.

I'm thinking that you'll want to probably try removing the Guest group from the Guest account, and see if it works then.

To open up the Local Users and Groups MMC directly, you'll want to run "lusrmgr.msc". From there, you'll want to try to remove the "Guests" group from the user "Guest"

You can also use the net localgroup command in the command prompt.

This is quoted from here, an article I found looking here. It's the syntax for what you type into Command prompt.

net group

Adds/modifies global groups on servers. Without parameters will list global groups.

Syntax:

net group <group name> [/command:"<text>"] [/domain]
net group <group name> [/add [/comment:"<text>"] or /delete] [/domain]
net group <group name> <user name> /add or /delete [/domain]

Options:
groupname Name of the global group
/comment:"<text>" Comment if a new global group is created. Up to 48 characters
/domain Performs the function on the primary domain controller
username Username to which apply the operation
/add Adds the specified user to the group or the group to the domain
/delete Removes a group from a domain or a user from a group

net localgroup

Performs actions on local groups. Same parameters as net group.

net name

Adds/removes a name to which messaging may be directed to. Running the command on its own will list all messaging names eligible on the machine.

Options:
name The messaging name to be added/removed
/add Add the name
/delete Remove the name

You'll also want to make sure that you right-click on Command Prompt and select "Run as
Administrator" to do this. Then you'll enter

net localgroup guests guest /delete

or some variation on that. I can't tell you for sure, since I'm at home running OSX, but that looks to be correct. Just make sure the syntax matches what's in the section I quoted for you.

And if none of this works, I really don't know what you can do.

 

[TechClint]

Well I do thank you for all the help. The customer had actually installed vista themselves. They said it was ok to just put it back to XP.

 

[DelJo63]

interesting thread.

To clarify Account Types in Windows/*:

• Any account with Admin status can change anything and is a member of the Administrators group (note the trailing 's')
• the Administrator account is a built-in account and a member of Administrators
• the Guest account is frequently used for Print/File Sharing & should be set as disabled (meaning ONLY that keyboard login is disallowed)
• any other account name will be a Limited Account and frequently is a member of the Users Group

In addition, there is the <everyone> NTFS group which controls the permissions of shared folders.

With Fast User Switching enabled, (b) & (c) do not appear in the login Splash screen
and to get to the (b) account, you boot into Safe Mode (especially in the Home editions).
However, any (a) account will be visable in the list of logins