Re: New User security questions

From: Ricardo M. Urbano - W2K/NT4 MVP (rmu1@columbiaSPAM.SUCKSedu)
Date: 08/12/02 

Date: Mon, 12 Aug 2002 11:33:42 -0400
From: "Ricardo M. Urbano - W2K/NT4 MVP" <rmu1@columbiaSPAM.SUCKSedu>

Jethro, while the other answers were excellent, I don't think anyone
addressed one of your questions which was why you need the built in
Administrator account. Think of it as the master key. Since security
is built into every aspect of NT, the built in Administrator account is
your only guaranteed way into the system if you accidentally blow stuff
up or "secure yourself out of the system".

That is why it is so crucial that you always know what the password for
the built in Administrator account is and that you maintain a current
ERD (using ntbackup.exe), since it can restore the Administrator
password to a point in time w/ the ERD.

Just as a for instance, the password for the built in Administrator
account is the only one that cannot be locked out by repeated incorrect
attempts.

hth

JethroUK wrote:
>
> I've just installed Win2K and user logins are new to me
>
> 1/ Can I delete the "Administrator" user ? (Is there a specific reason i
> shouldn't)
> I already have administrator privileges under my login
> I dont want other users to have this privilege
> I dont want to create the "Administrator" user with a password (it
> just a waste of space, since no one will ever use it)
> I just dont want it available (but it wont let me delete it)
>
> The only answer i can figure, is to delete myself (i already have customised
> my environment), and rename the "Administrator" to "Me", then do alllllll my
> customising again
>
> 2/ Which is the user type with the least priveleges?
> From the help it looks like "Guest", but i cant really tell
>
> 3/ I have set up a guest user as "Guest" (no password) but i would like any
> guest to have access to the web via my dial-up connection
> They can dial up as they login, but if the connection goes, they
> will have to log out & back in again
>
> Maybe I chose the wrong type of user (I want them to have access to all
> application & web access but no settings)
>
> P.S. I know i should post these one-by-one but im sure you've all been
> through this 100's times 

-- 
Ricardo M. Urbano
Microsoft Windows 2000/NT MVP

Relevant Pages

  • Re: Administrator access
    ... the password of the built in administrator account. ... built in administrator account at the command line with the net user command ... However by default with UAC enabled you probably will get an access denied ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Locking the computer
    ... Go to Control Panel, User Accounts, and assign a password to the built in Administrator account, and you're own account. ... And last, when you walk away, press the Windows key and L at the same time to "lock" the work station. ... You restrict access by assigning permissions to drives, folders and files. ...
    (microsoft.public.windowsxp.basics)
  • Re: forgotten password problem
    ... administrator account to users that have full physical access to a computer. ... available to whoever can logon as the built in administrator account. ...
    (microsoft.public.win2000.security)
  • Re: User Accounts
    ... Boot to Safe Mode and Windows' built in Administrator account becomes available The built in Administrator is like any other Administrator account. ... If your daughter does not know the password to any other account, and if her own account is not Administrator, the only way she could access other accounts is through guessing the password or hacking. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Try again: Scheduled task but no password
    ... Even though you have no password for your login, ... Administrator account and use that for the login and password for your ... Also, its not safe to not use a password, you can setup the ... least set a password for the built in administrator account. ...
    (microsoft.public.windowsxp.general)