Re: Can a standard user access the Admin account via Safe Mode?

"mgr" <guest@xxxxxxxxxxxxxxxxx> wrote in message

I have a situation where I want to be the administrator for my son's
laptop, and convert him to a standard (non-admin) account. He originally
set up the laptop, giving himself admin privileges, but he is no longer
allowed to use it in that condition :(

I am now the passworded local admin account (same account used to
install Vista),

Not really, that account was created afterward.

and AFAIK do not have the system Administrator
(upper-case A) account activated. He has a "standard" account. However,
he is clever, and will try to work-around to get admin access.

Activate and create a password for the *real* administrator, then
deactivate it again. That way he won't be able to easily access that

I've read
the "recover password / activate Admin /etc." links in the forum, and I
have a few questions:

1. Can my local admin account OR the system Admin account be accessed
and altered by a standard user in Safe Mode?

It shouldn't be possible.

2. Is it possible to block Method 3 (DVD boot for password reset) if
the system is already properly set up for one admin's access?

Disable or resequence the CD/DVD boot option in the CMOS and
apply a password to the CMOS to make it more difficult to modify.

3. I do not see the "user groups" folder in Comp Mmgt Control Panel to
enable or disable the system Admin account. How can I check its status?

Type "net user Administrator" at the command prompt.

Type "net help user|more" at the command prompt for usage of the
net user command switches and options.


Relevant Pages