Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
From: "Herb Martin" <HerbM AT learnquick DOT com>
To: <cygwin AT cygwin DOT com>
Subject: RE: Administrator vs Administrators
Date: Tue, 6 Sep 2005 01:32:27 -0500
MIME-Version: 1.0
Content-Type: text/plain; 	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <20050906035725.2C21483C6F@pessard.research.canon.com.au>
Message-ID: <EIMDU5S-000GCC-5V@mail2.learnquick.com>
X-Sign-LQC: HerbM AT learnquick DOT com/2005-09-06 01:32:18/<cygwin AT cygwin DOT com>=dnclcvrv

> >  I think you have an extra s in the user name :-) (I have an 
> > Administrator user,  but no Administrators user).
> 
> Can someone correct my understanding if I've got this wrong?  
> I think "Administrator" means the administrator account on 
> the local machine, "Administrators" means the administrative 
> account for the machine in the domain (workgroup).

No, that is not correct in various ways.

Adminstrator is a user account on each local machine AND
also a different account on each domain.

Administrators is a group in each such place.

Both the user and group are built-into NT class machines
and to NT-class domains.  (And they are not ever the
"same" user or group.)

Expect admin users to be a (direct or indirect) member
of Administrators in the context (machine or domain)
where that user has such privileges.

Permissions can be granted (or denied) through either,
since both groups and users are "security principals."

[Also note that in Windows 'permissions' do NOT equal
'rights' although it likely doesn't matter in your
situation.  Permission are assigned to objects (files,
shares, printers, registry keys, etc.) to allow access
to THAT object -- while rights are given to users or
groups (Security Principals really) to allow some 
action to be taken that it unrelated to a particular
object (e.g., change the time, logon locally, run as
batch, etc.]


--
Herb Martin, MCT, MCSD, MCSE, MVP
HerbM AT LearnQuick DOT Com http://LearnQuick.Com
512 388 7339   -or-   1 800 MCSE PRO
Accelerated MCSE in a Week Seminars 


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/