Re: Admin problem(s)! please help!!

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 12/01/03 

Date: Mon, 1 Dec 2003 17:31:23 -0500

If you're not using NTFS as your file system, then you have little control
over what user's can and cannot do, file system wise, without 3rd party
software.

To apply group policies to all users but the Administrator:

http://support.microsoft.com/?id=293655
HOW TO: Apply Local Policies to all Users Except Administrators on Windows
2000 in a Workgroup Setting

You may also be interested in a small utility that I've written, which
allows you to apply a vast number of the group policy settings, that apply
in a workgroup or stand alone environment, on a per user basis. See
www.dougknox.com, Win XP Utilities, Windows XP Security Console.

For the password issue, go back to the Group Policy Editor and go to
Computer Configuration, Windows Settings, Security Settings, Account
Policies, Password Policy. Set the Minimum password length to 0 (zero).
This allows for the use of blank/no passwords. 

-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"A. Cowan" <ally@cowan1057.freeserve.nospam.co.uk> wrote in message
news:bqg3mp$tpd$1@news8.svr.pol.co.uk...
> Hello, I'm running Windows XP Prof SP1 and im using the FAT file system, I
> want to set up my user name to be an admin, and the rest of my family to
be
> normal limited users. I've done this via control panel, but I want to
> configure their user options in more detail using the group policies
editor
> to disable things such as control panel access and certain folder access.
> there's a few things i need help with!:
>
> 1.. How do i alter my account so that it is registered as full admin
access,
> and how do i alter theirs so they are registered as restricted?
>
> 2.. How do i change my setup so that the option i choose only makes
changes
> to their user accounts and not mine aswell (currently when i disable
control
> panel access it disables the access in my account also)
>
> 3.. Is there a way of locking them out of certain folders? As my disk
isn't
> formatted in NTFS, I can't use the normal encryption function, so I'm
> wondering if theres another way to lock them out of my folders without
> encrypting them
>
> 4. When I'm in control panel, managing users, trying to delete ANY users
> pswrd, even if its my own, it won't let me, it brings up a msg dialog
saying
> 'Windows cannot remove the password. Password and/or account policies
> require the account to have a password.'. Any idea where I can find this
> policy to turn it off? I'm pretty sure I didn't used to need a pswrd,
> anytime I create a new account it now automatically has a default password
> that just needs changed upon logon.
>
> sorry about all the questions! any help greatly appreciated!
> Alistair
>
>

Relevant Pages

  • Consider Windows XP File Security and Group Policies
    ... If you are running Windows XP and are using the NTFS file system, ... Account from being able to purge its history footprint files. ... Changing Folder permissions to Read-Execute instead of Full ... you globally apply Full Control for the Administrators group and the SYSTEM ...
    (microsoft.public.windowsxp.general)
  • Re: *hidden* new user account/error (control userpasswords2)
    ... Maybe you didn't create an account, just logged on as a Guest. ... MS-MVP Windows Shell/User ... use the User Accounts tool in the Control Panel]] ... >> The only thing you should use control userpasswords2 for with XP ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: "Account" with * in front of it???
    ... > policies have a security setting with a long, ... group, not a particular account. ... accounts that were defined under a different instance of Windows whose SIDs ... I wouldn't until after searching the registry on the numeric portion of the string to see what other dependencies there were (assuming they aren't listed in hashed registry key or data items). ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How, what do we need..?
    ... "Account policies and Public Key policies have domain-wide scope and are set ... Account lockout policy. ... network authentication. ... Windows 2003 Server is like Shakespeare. ...
    (microsoft.public.windows.server.networking)
  • Re: Rather small, but...
    ... Click on Start/Run and type CONTROL USERPASSWORDS2 ... Hit apply and supply the username and password for the account under which you want Windows to ... Click on Start and click on control panel. ... Microsoft MVP- Windows Shell/User ...
    (microsoft.public.windowsxp.customize)