Is there a way to "lock" XP user account types? I need to share this
computer with other users, if users with limited accounts are simply
able to change thier account type to administrator so they are able to
download software etc the distinction between limited and
administrator accounts is useless. Is there a way to "lock" the user
account settings to prevent an unauthorized change to administrator?
Thank you. |
Request for Question Clarification by
legolas-ga
on
25 Jan 2005 10:34 PST
A person without administrative access can not elevate themselves to
administrator on your XP machine. Have you attempted to create a user
account, login as that user and elevate your permissions? In other
words, are you asking because you HAVE done that on your installation
of XP? Or, because you simply thought you could? :-)
Also, please tell me if you have XP Pro or Home.
Thanks,
Legolas-ga
|
Clarification of Question by
dmacp-ga
on
31 Jan 2005 19:13 PST
Hello Legolas-ga,
(Sorry it has taken a few days to get back to you) it is the Home
Version 2002 Service Pack 2, two user accounts can't automatically
promote themselves but my son seems to have found away around it and
there are only so many times you can have the same discussion with a
sixteen year old.
Thanks,
Debbie
|
Request for Question Clarification by
legolas-ga
on
31 Jan 2005 20:24 PST
I'd bet you have no password on the Administrator account.. He boots
into Safe Mode and changes his permissions from the unpassworded
(hidden) account.
See if this works:
Restart the computer
Once Windows shuts down, start tapping F8
From the menu, select Safe Mode and hit Enter
The computer will boot. Click on the icon for Administrator (or
another administrative account).
Click on Start.
Click "Run"
type "mmc.exe" and hit the OK button
Go to File, then Add/Remove Snap-in
Click "Add..."
Click "Local Users and Groups"
Click Finish, then OK
Double click the local users and groups (local) on the left-hand side of the screen
click Users
Right click 'Administrator' and select Set password...
Set the password you'd like (ignore the warnings)
change your sons account to limited access
see if he can change it now :)
Legolas-ga
|
Clarification of Question by
dmacp-ga
on
01 Feb 2005 04:08 PST
Hi very helpful Legolas-ga,
It has been partially fixed. It said I couldn't use this snap in on
the Home Version. HOWEVER when I restarted in safe mode there WAS
another administrator account which I could not delete there or reset
the account type but may have eventually been able to delete through
RegEdit.
Prior to our whole system crash it used to list his account under
documents and settings with several sub folders Hunter, HunterDELL,
HunterDELL001 and on and on. I got someone to devirus this machine and
ended up deleting his whole account but somehow the "administrator"
must have remained and is a hidden account only accessible through
safe mode. How can I get rid of this once and for all, lock whatever
needs to be locked, set whatever is my and only my administrator
password (which apparently is seperate from my own user account
password) and ensure this safe mode creation of a hidden administrator
is not done again?
|
Request for Question Clarification by
legolas-ga
on
01 Feb 2005 08:27 PST
You can not (and should not) delete the administrator account.
However, try the procedure above again, but, instead of choose local
users and groups, choose, "computer management" then once that's
loaded choose the local users and groups, etc...
Legolas-ga
|
Clarification of Question by
dmacp-ga
on
01 Feb 2005 14:01 PST
THANK YOU brilliant one! I think, for all intents and purposes it
worked. I ended up using system restore to get the administrator
account back but in the process of all this safe mode, setting of
supervisor passwords etc, it looks like all the parts that need to be
there and no users can go into safe mode or change their settings with
out a password - so its fixed!
Thanks. If you ever need help with graphic, architectural or exhibit
design work let me know. I owe you one.
Debbie MacPherson
Projects Director, Accuracy&Aesthetics A Nonprofit Organization for
the Advancement of Education, Cultural Heritage, and Science
PO Box 52, Vienna VA 22183 USA phone 703 585 8924
|
