Windows 10: User Permissions Get Mixed Up When Using Switch User

I am having a permissions issue when using "switch user". I have one account which is a domain administrator with full rights to most things on the internet (including yahoo.com). I have another account which is mostly locked out of internet access. If the non-admin employee is using the PC and has an issue, and then uses "switch user" and the admin person signs in, the admin cannot get to anything on the internet, it appears the permissions of the first user take over.

The same thing happens if I reverse the process. I rebooted the PC and had the admin sign in. We could access Yahoo. Then did a "switch user" and had the non-admin sign in and now she could also get to yahoo.

I am running a test now to see if the permission will clear up after some time. So far they have not. ** update, the permissions finally cleared up and the non-admin person cannot get to internet. Took about 30 minutes **

Is this by design? If so, does anyone know why? If not is anyone else experiencing this issue or have ideas as to why I am having it?

Thoughts appreciated!

:)

 

Run as administrator Windows 10 Pro

You might have heard about the System "user".

Thanks for the detail Denis,

The section above is indeed where I was getting mixed up and I thought when you select Run as administrator it was using settings from the "System" permissions.

Thanks again, you learn something every day.

Neil

 

Change microsoft account associated with built in administrator account

Log in as that user, switch it to a local account (Disconnect).

Log back in as the local user, switch it back to a Microsoft Account. The dialogue will allow you to use any valid email address, it does not have to be the same one as initially set up.

Because you are changing the same account all the permissions will still be in effect.

 

Welcome to the forum. Is this on a domain using a profile download from the DC?

 

Yes, we are a Microsoft shop and use active directory. These accounts are both in AD.

 

If it pulls profile from DC it can take time to replicate it will use cached profile not updated

 

Thanks so much for the info!