Vista Bugs

[strider74]

Accessing files through a Standard user account.

Firstly like to say hello to the forum, already picked up some great tips here!

Was wondering whether someone could clear up an issue I have. I was logged into a standard user account yesterday and I needed a file in my Administrator account so I accessed the folder by going to to C:\Users\My Account.

UAC prompted me for a password and I accessed the file just fine. Today I needed another file and used the same process. However this time it didn't prompt me for a password as I expected it would and let me straight into the Administrator account documents!

Once I had opened the Admin doucments the first time it had been automatically set with permissions. I solved it by removing the permissions from the security tab, but I assumed anytime you wanted to access files from an Admin account through a Standard account it would require a password.

Is there something I'm missing here or is this Vista? Seems like a pain to have to remove permissions everytime you access a file like this.

Another bug I've come across is when using the simple file sharing wizard if you share a subfolder in your documents it shares out the entire C:\Users folder! Simple solution is to use advanced file sharing but thats one hell of a flaw!!!

If anyone could post their opinions on this issue it would be greatly appreciated.

 

[Pbb321]

You Running SP1? Reason I ask is because I remember having this issue as well and since SP1 it hasn't reappeared.

As far as the folder sharing goes, even though simple sharing shares out the entire users folder, you will still need a particular users credentials to open their folder. Generally, I find simple file sharing useless and use advanced so I can have more control over who has access.

 

[strider74]

Thanks for the reply on simple file sharing, tried it and it does what you say, just found it odd to see the shared icon on the entire Users folder.

And yes I'm running SP1, everything up to date.

First time around I accessed it, it was the root folder hence everything was accessable. This time i did it on single folders and it does this automatically everytime you open them after a UAC prompt for the password.

Just checked the event viewer and none of them show up as shared even though they have the shared icon next to them! Seem like they are automatically gaining permissions when opened through a standard account and adding the shared icon next to the folder. Once I remove the permissions the shared icon goes away.

Surely this cant be normal behaviour lol. I dont want the account to gain permissions automatically after I've opened them. Seems to defeat the object of security in my opinon.

 

[Pbb321]

Actually, now that you mention it, the shared icon is always been there for me on the users folder. Unlike xp, i believe vista displays that icon on the folder that contains the subfolder thats being shared just so you'll know when browsing in explorer (My Theory at least).

Have you tried looking around the local security policy? (Control Panel, Admin tools, Local Security Settings) Under Local Policies->Security options, there are a lot of network settings that you can configure... Specifically the "Do not allow the storage of credentials"

 

[strider74]

Found this post on the same subject.

Vista security problem?

Apparently this is how its supposed to work. Once you have supplied an admin password Vista changes the settings to permanent access giving the folder Read & Execute, List Folder Contents & Read permissions.

I would think that the amount of times UAC bugs you for a password this would be one of them but apparently not!

 

[Pbb321]

Somehow, I find that funny. UAC bugs you about running solitare, but says nothing when someone tries to access your files. I love the irony!

Personally, I disabled UAC the same day I upgraded to vista. In my opinion microsoft did good in using something like this for people who have no idea what they're doing and have a difficult time doing anything on a computer besides turning it on. Working In IT, it has saved me many a headache.

The lesser of 2 evils of that vista security problem post sounds like the best solution at the moment. Grand read access which will prompt UAC.

Would that work for you?

 

[strider74]

Read access sounds the easiest way I agree. I only reactivated UAC since I was gonna use a standard account for everyday use. This is when I noticed this issue.

Been less than 24 hours and the prompts are already getting on my nerves! Think I'll just turn it off again and be done with it. Thanks for the replies Pbb321.

 

[Pbb321]

No problem. Glad to help.