Re: What good are XP Pro User Accounts?

From: JW (JustPostYourReply_at_ToThisNewsGroup.pls)
Date: 02/26/05


Date: Sat, 26 Feb 2005 15:42:48 GMT

correction.

...you could easily set up a new Admin account, and then set Deny on
every privilege for that specific account on every folder, except
Read/Execute privilege on \Windows, and Read/Execute/Write/Modify
privilege on the folder in which the game is installed.

JW wrote:
> there are zillions of examples of programs that run fine in all accounts
> and do not require Admin rights. software can be designed to run in all
> accounts, or can be designed to run in only the Admin account. your
> problem is with the Sims software, and not a problem with XP.
>
> is it possible to create an account that allows her to play this game
> without gaining full system access ? with NTFS permissions, you could
> easily set up a new Admin account, and then set Deny on every privilege
> on every folder for that specific account, except
> Read/Execute/Write/Modify on the folder in which the game is installed.
> use CyberPatrol to restrict her access to programs and the internet.
>
> finally, there is No 100% guarantee of security, as long as you have an
> internet connection. you are definitely safer with anti-virus,
> anti-spyware, and firewall protection, but this is No 100% guarantee of
> security for several reasons.
>
> for example, anti-virus, anti-spyware, firewall software, and especially
> Internet Explorer, have been defeated by infections in the past (either
> shut down or compromised for escalation of privileges). this is besides
> the fact that anti-virus and anti-spyware development is reactive by
> design (always reacting to new infections), and consequently you will
> always be behind the timing of new infection development/release --
> always vulnerable between the time new infections are
> developed/released, and the time you finally get an update for your PC
> protection (which might be hours or days).
>
>
>
> Kurt M. Sanger wrote:
>
>> My daughter has a game, Sims 2, that requires her to run it from my
>> admin account. What good does it do to have Win XP Pro and require
>> all users to have admin rights to run the software you want?
>>
>> Is it possible to create an account that allows my daughter to play
>> this game without gaining full system access? She's not old enough to
>> know what not to do.
>>
>> Can I create an admin account that may not access the internet so she
>> can run the game without me worrying about her installing additional
>> features, ie trojans, viruses, and spyware? I can't rely on her to
>> unplug eithernet, nor block internet traffic. She does know how to
>> turn it on, log in, and run her game though.
>>
>> We're running XP Pro, SP2, with EZ Firewall, EZ Antivirus, Roadrunner,
>> adaware, and spybot. (And we're still vulnerable).



Relevant Pages

  • Re: domain admin account impersontating
    ... i guees that the bottom line is that the domain admin account can be ... with the same username and password. ... Starting with Windows XP this became less simple, ...
    (microsoft.public.windows.server.security)
  • RE: runas issue
    ... to Power Users per new company policy,so then only one local built-in admin ... user account was at one time an admin account and was changed to power user. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Virus is getting domain account listing
    ... In 2003 you can change the process ID of the admin account. ... Play with the net user command at your command prompt and see what ... dictionary attack against every single account could happen. ...
    (Focus-Microsoft)
  • Re: How to restore Admin account??
    ... Remote Operator group from Administrator User. ... SBS 2003 by default don't allow the Admin account to logon through TS? ... "Frank McCallister SBS MVP" wrote: ...
    (microsoft.public.windows.server.sbs)
  • Re: Having two Administrators
    ... "Administrator" (accessible through safe mode in XP home ... I noticed that in control panel user accounts ... >> they do in the Admin account I get to though normal ...
    (microsoft.public.windowsxp.basics)