Re: Administrator/Power Users/Limited Users

From: Doug Knox MS-MVP (dknox@mvps.org)
Date: 03/23/03 

From: "Doug Knox MS-MVP" <dknox@mvps.org>
Date: Sun, 23 Mar 2003 17:06:06 -0500

For downloading its in User Configuration, Administrative Templates, Windows
Components, Internet Explorer, Browser Menus, Disable Save this program to
Disk.

Installs are pretty much covered under Computer Configuration,
Administrative Templates, Windows Components, Windows Installer.

As I said before, you'll have to do some exploring to find all the options
that can be enforced. 

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"C Shirey" <shireyc@adelphia.net> wrote in message
news:36f201c2f182$bc407aa0$3401280a@phx.gbl...
> Thanks again Doug. Could you point me in the direction,
> once I get to the Group Policy Editor, where to give
> permission for downloading and installing. I read through
> quite a bit of it but I don't know where to find it.
> Thanks.
> >-----Original Message-----
> >You can use the Group Policy Editor (Start, Run and
> enter GPEDIT.MSC) to
> >modify the permissions for users (upgrading or
> downgrading).  You may have
> >to do some exploring to find the exact options you want.
> >
> >--
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Associate Expert
> >ExpertZone -
> http://www.microsoft.com/windowsxp/expertzone
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >
> >"C Shirey" <shireyc@adelphia.net> wrote in message
> >news:2b6401c2f17d$75bfdf30$a501280a@phx.gbl...
> >> Thank you, Doug, for your response. I went to your
> >> website as suggested and downloaded the script and now
> >> can access the Administrator Account from the Welcome
> >> Menu.
> >>
> >> I have a few follow up questions:
> >>
> >> In addition to the Administrator account, I have three
> >> Limited User accounts. I need one of the accounts to be
> >> able to download and install programs, etc. and, at the
> >> same time, be used for day-to-day operations including
> >> surfing the internet. Since it is not advised to run
> from
> >> the Administrator account for security reasons, how do
> I
> >> change one Limited User account to download, install
> and
> >> even run programs the require higher levels of
> >> Administrative authority?
> >> Again, thanks for your response.
> >> >-----Original Message-----
> >> >The built in Administrator account is there to allow
> you
> >> to do things like
> >> >System Restore, various maintenance tasks and the
> like.
> >> At the Welcome
> >> >Screen press CTRL-ALT-DEL twice, with no users logged
> >> on. You'll get the old
> >> >Windows 2000 style logon. Enter Administrator and any
> >> password that you
> >> >setup at install.
> >> >
> >> >You can also enable the Administrator account on the
> >> welcome screen.  To
> >> >enable the Administrator account on the new Windows XP
> >> logon screen, visit
> >> >my web site, www.dougknox.com and go to the Windows XP
> >> section.  Follow the
> >> >link for Enable Administrator Account ......
> >> >
> >> >This small VB Script will make the registry change
> >> necessary for the
> >> >Administrator account to be available on the Welcome
> >> Screen.  If you prefer
> >> >to do it manually, click Start, Run and enter REGEDIT
> >> Navigate to:
> >> >
> >> >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> >> >NT\CurrentVersion\Winlogon\SpecialAccounts\UserList\
> >> >
> >> >Note: There is a space between Windows and NT in the
> >> above Key.
> >> >
> >> >Add the Administrator account if necessary and/or
> change
> >> the Administrator
> >> >value to 1
> >> >
> >> >
> >> >--
> >> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >> >Win 95/98/Me/XP Tweaks and Fixes
> >> >http://www.dougknox.com
> >> >--------------------------------
> >> >Associate Expert
> >> >ExpertZone -
> >> http://www.microsoft.com/windowsxp/expertzone
> >> >--------------------------------
> >> >Please reply only to the newsgroup so all may benefit.
> >> >Unsolicited e-mail is not answered.
> >> >
> >> >"C Shirey" <shireyc@adelphia.net> wrote in message
> >> >news:330501c2f0d0$4cf6c620$3401280a@phx.gbl...
> >> >> Windows XP Pro was set up on my home/business
> computer
> >> >> with an Admin account with administrator privileges
> and
> >> >> three additional Limited User accounts in addition
> to
> >> the
> >> >> Administrator account automatically provided.
> >> >> I understand that the computer should not be run
> from
> >> the
> >> >> administrator account (the automatically provided
> >> account
> >> >> or any account with administrative privileges
> though?)
> >> >> for security reasons, however, running as a Limited
> >> User
> >> >> is very inconvenient. I have to change back and
> forth
> >> >> between Limited User and the Admin account to
> download
> >> >> and install and in some cases, just to run specific
> >> >> programs. I changed from a Limited User to a Power
> User
> >> >> but I haven't noticed a difference.
> >> >> What is the automatically provided administrator
> >> account
> >> >> used for and how is it accessed? I have been
> searching
> >> >> for info but am not able to find these specific
> >> answers.
> >> >> Thanks to anyone who can help.
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Installing applications on a new XP-Pro installation
    ... Your last sentence - "Do /not/ use Windows' built-in Administrator as your Administrator account" - leaves me a bit confused, ... Also, at the time of XP-Pro installation, the XP-Pro installer prompted me into what is apparently the XP-Pro default mode of immediately creating a user account that appears to have most, if not all, of the Administrator permissions. ... In an Administrator account I can temporarily disable the security software before the install. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Installing applications on a new XP-Pro installation
    ... The final result is the same, because in both cases you are running the installer with Administrator credentials. ... In an Administrator account I can temporarily disable the security software before the install. ... Since I am the only user of the PC in question, it isn't clear to me why I would want to install applications as a user. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Vista Admin Privileges appear to be load
    ... Vista is supposed to activate the hidden administrator and to ... a new account for your general use. ... I could download and install ...
    (microsoft.public.windows.vista.security)
  • Re: How to explicitly invoke Auto Update
    ... and when it checks for an updated version of Windows Update, ... My login-id is also a part of the Administrator group and I am ... > to install softwares on my machine. ... I am able to download the updates. ...
    (microsoft.public.win2000.security)
  • Administrator password during WinXP installation?
    ... password when WinXP Professional boots up to the WinXP ... Professional installation for the Administrator account ...
    (microsoft.public.windowsxp.security_admin)
Loading