Re: User Accounts
From: JW (JustPostYourReply_at_ToTheNewsGroup.pls)
Date: 05/29/04
- Next message: Kaylene aka Taurarian: "Re: ActiveX not disabled, still get prohibited message"
- Previous message: Carey Frisch [MVP]: "Re: problem with windows installer"
- In reply to: JW: "Re: User Accounts"
- Next in thread: cquirke (MVP Win9x): "Re: User Accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 May 2004 17:03:15 -0500
On the other hand, I'm not sure if XPhome has a check box labeled "Use
Simple File Sharing".
"JW" <JustPostYourReply@ToTheNewsGroup.pls> wrote in message
news:ujfHh2PREHA.568@TK2MSFTNGP12.phx.gbl...
Don't change your Admin account to Limited, if it's your only Admin account.
(I think XP will not allow it anyway.) I use XPpro, which automatically
sets up an account named Administrator. If another name is listed during
installation, it will be a second account with Admin privileges. I don't
know if it works this way in XPhome. From what you're telling me, XPhome
does not automatically name it Administrator, so since it's not
Administrator, you have no need to rename it. In XPpro, it's easy to rename
the Administrator account, because there is an option in Security Policies
(secpol.msc). I think it can also be done quickly in XPhome, by typing
Control Userpasswords2 in a command prompt window, but I've never tried
this. You might want to try it, just to see if you have another account
named Administrator.
I've heard advice against using names and passwords that can be easily
guessed, because even if you're using a Limited account, a Trojan or hacker
might try to start a program with Admin privileges, by using the Runas
command, and trying a common ID/password (e.g. Administrator/God). I have 4
accounts total, just as you described them. Two were built during
installation - Administrator and Guest. Guest is disabled. I built the
other two Limited accounts later. Then I changed the folder permissions on
\Program Files and \Windows to allow only Read/Execute permission for the
Users group (which includes the Limited accounts). Now Limited accounts
cannot monkey with the system files and registry in the \Windows folder.
This arrangement also prevents Trojans and hackers from installing
spyware/crippleware in the \Program Files and \Windows folder, but it
doesn't stop everything. There is plenty of other vermin on the internet.
Without installing themselves on disk, mobile code (e.g. Javascript,
VBscript, ActiveX), Trojans, worms and Zombies can still run in memory
(suffocating system resources), steal Email addresses and mail themselves
out again, masquerading as messages from you. Cookies can still spy on your
surfing habits, because they are installed in your \Documents and Settings
folder. (Don't go monkey with permissions on the \Documents and Settings
folder.) That's why it is still so very important to install anti-spyware,
anti-virus software, and a 2-way firewall. (Don't rely solely on the
one-way, intrusion-detection feature built into XP - Internet Connection
Firewall.)
Whenever I work with private family records using the second Limited
account, I modify permissions for only this account (not the User group), if
I get any Access Denied errors trying to use the \Program Files folder. If
this gets to be burdensome, I'll make my life easier, by changing the second
Limited account to become a member of the Power Users group, instead of the
Users group. I don't think this can be done in XPhome normally, but I've
read in some other postings, that the Windows-2000 style interface to folder
permissions is accessible by rebooting in Safe Mode.
In XPpro, one Limited account cannot view files in other Limited accounts.
I don't know if it works this way in XPhome. Would you do me a favor ?
When you set up 2 Limited accounts, build some files in both, see if one
Limited account can view files in the other Limited account, and let me know
back here. If for some reason, we lose this conversation thread, and don't
link up again, then note that clicking on the box labeled "Make This Folder
Private" will prevent other accounts, including the Administrator, from
viewing documents stored within. If you don't see this check box on folder
properties, then toggle the check box labeled "Use Simple File Sharing" in
Folder Options.
"James P." <anonymous@discussions.microsoft.com> wrote in message
news:37EDE146-E04A-4ACA-83C4-F1144DF9E428@microsoft.com...
Hello JW,
Thanks for the details on how your using your system and user accounts. I'm
confused by something you said about the Administrator account ... what did
you mean about needing to rename it ("Rename it to something else though,
because it is too easily guessed.")? What specifically can be "guessed" and
by whom?
If you only list one user during XP Home's installation it makes that
primary acct an administrator with the user's name ... I'm guessing you
changed that acct to "limited" and created a new administrator acct? So how
many accts are you currently using?
Based on your post I'm guessing at least 4 user accts:
Admin (hardware & software installs)
Limited (web surfing)
Limited (productivity computing)
Guest
My computer usage is very simple and straight-forward ... 70% emailing, 20%
web, 10% productivity. I think that all that switching between user accounts
would drive me nuts!
- Next message: Kaylene aka Taurarian: "Re: ActiveX not disabled, still get prohibited message"
- Previous message: Carey Frisch [MVP]: "Re: problem with windows installer"
- In reply to: JW: "Re: User Accounts"
- Next in thread: cquirke (MVP Win9x): "Re: User Accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
