Re: Administrator(s)

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/12/04


Date: Wed, 11 Feb 2004 23:44:44 -0700

After you have used the tool to zap a new, known
password on the Administrator account, if you are
unable to extract it from the child (which would be
safer for your system), then
log in as the admin
strart run a cmd window and at its prompt enter
net localgroup administrators
That is the complete list of admin accounts.
Now, change each and every one of them to
strong passwords.

Strong passwords are long, contain digits, special c
haracters, even alt characters, do not contain word,
and can be remembered without being written down.
How long ? Well definitely more than 8 characters,
but XP can use passwords that are longer than 200
- you choose. 10 or 12 ?

Next, locate any account that he has and disable it.
Next, list out the limited accounts
net localgroups users
and see how many you do not recognize.
There may be some that you need but do not recognize,
but others you should be able to say which is used by
what family member. Diable any that you believe this
child has knowledge of.

The point of all this is to let the child experience your
exerting control over your property/computer and perhap
some withdrawal from not being allowed to use it.

As a part of this you need to make sure there are no back
door programs now installed.
Scan for things that may have been installed and remove
any dangerous junk like Kazaa, etc.. that you do not use.

Turn on the firewall, get the machine up to date on critical
updates, and scan it for spyware/trojans (not just antivirus).
etc.
Finally, wait a couple weeks and see if anything changes
(in your machine or your child).

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Curtis" <anonymous@discussions.microsoft.com> wrote in message
news:e8fb01c3f0b6$c558c870$a401280a@phx.gbl...
> I have been the "administrator" since I installed XP
> months ago. Now my son has changed the "administrator" to
> himself and won't give me his password to change it back.
> Besides threatening him, what can I do to regain
> administrator capabilities.


Relevant Pages

  • Re: Password questions/problems
    ... your server as the administrator to do something on the server. ... Here are some recommendations on your user account and passwords ... Reason: User MUST change passwords within 90 days. ...
    (microsoft.public.win2000.security)
  • RE: Mysterious "Support" account created on Win2k server
    ... Once a worm/trojan or an attacker successfully connect to a system via port ... Once a system is compromised with an administrator account, ... > for guessing admin ids and passwords. ...
    (Incidents)
  • Re: Securing workstations from IT guys
    ... use of the local administrator account and ... create a new account with local admin rights ... machines and the file server and you will have a basic access log with ... Advise HR guys to assign passwords to their excel/word files. ...
    (Security-Basics)
  • Re: HELP - My son has taken control of administrator privileges and disallowed acces
    ... Get you child to logon and give you account back it's admin rights ... Administrator - the password is the one you set while installing the ... > J. Fletcher ...
    (microsoft.public.windowsxp.security_admin)
  • IE6 password autocomplete doesnt work as Administrator
    ... account "Administrator" the AutoComplete function of IE6 ... dialogs or forms containing passwords. ... want it to memorize these items and I click the "Yes" ... If I log onto a different user account, ...
    (microsoft.public.windowsxp.security_admin)