Re: Restriction

A regular user can NOT add themselves to the local administrators group.
What may have happened is that the built in administrator password is blank
and they used that. That is very common in XP Home and can be changed by
booting into Safe Mode to access the administrator account. Any user that is
also an administrator must also use a strong password that can not be
guessed. Another possibility is that they used a free utility to boot the
computer from a floppy or cdrom to change the built in administrator account
to gain administrator access to the computer. Though not foolproof it can
help if the computer's cmos settings are password protected and configured
to allow the computer to boot only from the hard drive. Given enough time,
determination, and skill any computer that can be physically accessed by a
malicious user can be taken over by that user. --- Steve



"Jon" <Jon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:787104D2-F26B-4AC2-BA24-A80A44D8DC78@xxxxxxxxxxxxxxxx
I've put myself on the XP system as administrator and my partner's kids on
limited accounts. To my horror, a limited account user can change
*themselves* to administrator, with all that that gives acess to, and
there
appears to be no way in XP to stop this. Is there any way to truly limit a
limted account, and why would XP have what's effectively an unlimited
limited
account anyway? Or have i just missed something really obvious?

Jon


"Brandon" wrote:

Thanks for the help. It worked the way I wanted and more than I
expected.
-Brandon

"Mike Bright MSP" wrote:

Brandon,

Ok, so you can use Doug's tool for this one,

Login to your sisters account and run Dougs "Security Console" tools
and you
can disable Desktop changes and a number of different settings in
their.
Apply the settings then log off. The next time your sister logs in it
will
apply the restirctions. Dougs tool is available from:

http://www.dougknox.com/xp/utils/xp_securityconsole.htm

The two options groups and the program to look at are "Disaply Options"
and
"Desktop Settings".

Regards

Mike Bright MCP, MSP

e:mike.bright@xxxxxxxxxxxxxxx





.

Relevant Pages

  • Re: XP Home with Two Administrators - Aggravations
    ... On a clean operating system with default settings both users should be able ... administrator to see if both users have the same group membership. ... Mode and logon as an administrator to examine folder NTFS permissions to see ... one account cannot do all the things the other can do. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SP2 has stopped me being an Administrator and upgrading
    ... This behavior may also occur if there are incorrect restriction settings on ... Log on as an administrator or follow the instructions in the Windows ... Update error message to use the Run As command with an administrator ... |>> | log into my normal account and the Administrator account with my ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: XP Users
    ... desktops created for each account. ... there was only one user profile. ... > administrator login. ... > app specific settings are all taken from either the Owner or the ...
    (microsoft.public.windowsxp.general)
  • Re: PC folder has stopped sharing over network!
    ... So following Jim's principle I've just tried creating a new user account on the PC - "Kids2", and enabled sharing on its component folders. ... There is a security tab that lists the access permissions and you can add to these to "open" the account in any way you wish. ... I've just been in to the security tab, and the access permissions for both kids and administrator are set to "Full Control". ... I browsed around all the tabs, and can't see any differences at all between the settings for kids and administrator. ...
    (uk.comp.misc)
  • Re: XP home Administrative Password Hacked Over internet..HOW?
    ... What settings are most likely the ... off - took advantage of lax security settings they found on the moms ... After getting the Administrator account password reset to a pass phrase, ...
    (microsoft.public.windowsxp.general)