Mr. Abell, a follow up on the no local admin account

anonymous_at_discussions.microsoft.com
Date: 02/06/04 

Date: Fri, 6 Feb 2004 06:53:19 -0800

I will try to boot to the XP disk and repair the install.
If you would have read my message you would have
discovered that I was not the one to do this. I work as a
network admin and support around 600 nodes. You would be
suprised to see some of the things end users do. As
network admins it is our job to try to prevent end users
from doing things that damage their computers. I would
think MSFT would have the same responsibility. If only
local admins can disable accounts why would MSFT allow a
person to disable the account they are logged on as? Keep
in mind this is in a workgroup or a local environment. We
are talking home users here. There is no network admin to
come and fix the problem. I installed the software and
sent them on their merry way. You asked why would you???
This is people that are over 60 and didn't grow up with PC
such as we did. Why would you want to turn them lose to
do whatever they want to do? That is just asking for
trouble? Or is your idea to only have users who have an
MBA to use PCs? My parents use PCs and they are in their
60s also. I monitor it closely though.

So from your message I take it that you think it ok that
the accounts can be deleted while logged in as that user?
And that the admin account can be disabled? I can see
renamed but disabled???

>-----Original Message-----
>No matter how much idiot proofing M$ adds, there is
always
>something...
>
>Don't ask why they allow it. More blocking of
>functionality to prevent stupidity hurts everyone by
>taking power from the users. There is too much of that
>already; I half expect in 10 years to be unable to
>configure anything besides eye candy because "users are
>too stupid to have access to that." Ask instead why you
>would do this to yourself? Are you just clicking random
>things? You can also deny access to your hard disk to
>everyone, including the os. But why would you? You can
>delete a decent chunk of the OS from the windows folder,
>and if you do enough it can't self repair without the
>disk. But why would you?
>
>Try booting from the xp disk and repairing the accounts.
I
>am not sure if it will work, or even if its avail as I
>have not had to do this since nt 4. But give it a shot.
>
>
>>-----Original Message-----
>>I failed to mention it was XP Pro. I saw somewhere you
>>can press ctrl-alt-del at the welcome screen twice and
>log
>>in as a disabled administrator account. Can you verify
>>this?
>>
>>>-----Original Message-----
>>>Just thought I would try to get your attention again.
>Any
>>>other ideas on this problem.
>>>
>>>With XP you can not log in while in safe mode with the
>>>administrator account if it is disabled. I am about
>>>ready to reload.
>>>
>>>Why would Microsoft allow a person to disable an
account
>>>while logged in as that account? I can see renaming
the
>>>admin acct. but disabling it? And being able to disable
>>>the account you are logged in as??? Why?
>>>
>>>>-----Original Message-----
>>>>she is telling me she is not able to log in as
>>>>administrator in safe mode with the account being
>>>>disabled. Should she be able to log in with the admin
>>>>account if it is disabled while logging into safe mode?
>>>>
>>>>>-----Original Message-----
>>>>>Just boot into safe mode using F8 during the bootup,
>>>>>and then log in with the disabled built-in
>Administrator
>>>>>account (whatever it may have been renamed to).
>>>>>You will then have access to the tools you need.
>>>>>
>>>>>--
>>>>>Roger Abell
>>>>>Microsoft MVP (Windows Server System: Security)
>>>>>MCSE (W2k3,W2k,Nt4) MCDBA
>>>>>"Lisa" <lisacor@yahoo.nospam.com> wrote in message
>>>>>news:a89f01c3eb82$bb9536e0$a601280a@phx.gbl...
>>>>>> OK. I built a computer for my aunt and uncle. I
>>>>created
>>>>>> two new accounts for them and made both local users
>>>>>> members of the admin group. They got the PC and the
>>>>>> promptly disabled the administrator user and the
two
>>>>new
>>>>>> users I created. they then created two new users
>but
>>>>they
>>>>>> did not make them members of the admin group. So
>now
>>>>none
>>>>>> of the local users that are active are memebers of
>the
>>>>>> admin group. I can not re-enable users or create
>new
>>>>user
>>>>>> or add group membership unless I am logged in as a
>>>>local
>>>>>> admin.
>>>>>>
>>>>>> Any way to fix this?
>>>>>>
>>>>>> Thanks in advance. And again this was my aunt that
>>>did
>>>>>> this and not me. Try to suppress the laughter.
>>>>>
>>>>>
>>>>>.
>>>>>
>>>>.
>>>>
>>>..
>>>
>>>
>>>.
>>>
>>.
>>
>.
>

Relevant Pages

  • Re: find out whether a disk has used at all
    ... >> documentation previous admins kept on the box that outlines what each ... >> disk used along with filesystems associated with it. ... Is there some account naming policy that works for all systems in the ... How guessable are user passwords? ...
    (comp.unix.solaris)
  • Re: Program Errors
    ... Online Virus Scan. ... then a "repair install". ... Account, creating another Administrator account for backup in case your ... > closing and coming up with the Program Error Message. ...
    (microsoft.public.win2000.general)
  • Re: XP secure during repair?
    ... account or account entrance that is built in or could they run ... personal information I have on my hardrive should it need repair. ... and ways to extract your passwords and gain ... || don't care what spam you get, or what Aunt Sally's goiter is up to ...
    (alt.computer.security)
  • Re: Blue Screen with no log-in information
    ... If you have to use the hidden machine administrator account do so, ... Once Windows starts loading, you've missed it and will have ... Assuming your system is set to boot from the CD-ROM drive, ... To Repair a Windows XP Installation using Recovery Console press R. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: cant verify disk
    ... DU verified my disk without asking ... If you have startup up the computer from the hard drive, ... I verified my startup disk from my admin account with several apps open. ...
    (comp.sys.mac.system)