Re: My limited user is not so limited

Limited users can indeed install software that does NOT write to HKLM in the
registry, to the program files folder, or the \Windows folders and
subfolders. Software writers have created software that can be installed
entirely in the user's profile which is probably what you are seeing. In XP
Pro you can use Software Restriction Policies to prevent unauthorized
software from being installed or executed from a user's profile. For XP Home
the free Shared Computer Toolkit can also do the same for user accounts you
want to restrict. You can also change permissions on the folders in your
user account to give your account deny permissions for execute for files
only if you want to configure special permissions. If you want to try that
do NOT try it on the built in administrator account.

Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419 --- XP
special permissions

<burnedtechie@xxxxxxxxx> wrote in message
news:1156907448.207473.172310@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I tried to improve the security of my home machine by making the
accounts my wife and I use into "limited user" accounts in XP Home. I
first created a new admin account, of course, with a really long
password.

Now, when I've restarted my computer and logged into my old account
(which is now *limited* and no longer admin), it shows *some* signs
that it's limited but I don't think it really is completely.

Signs it is NOT really limited:
I can install software!! Seriously, I thought limited users could not,
but I totally installed a trojan simulator which even modified my
registry (TSServ.exe). Also installed Google Earth for fun. All
logged in as this limited user and I did NOT do any "run as", nor did I
EVER have to provide that long admin password I mentioned. Ever.

Signs is IS limited:
Norton AV will no longer let me change settings.
Windows won't let me change the time on my clock (says I must have
admin privs)
Windows won't let me create files on c:\ (the root folder).

So, what's up with this? I'm no more secure than I was!!



.

Relevant Pages

  • RE: Shortcuts not working in non-Owner account
    ... What's happened is that MSoftWin when 1st installed makes the ADMIN account ... The first user account is the one that installed all ... was with each software install. ... Why you can't acces the Program Files folder though is a Mystery - you sure ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Cumulative security update fails to install...
    ... Well, I found the folder: ... F:\WINDOWS\system32>attrib dllcache ... which account was this install log run under? ... another account E.g. if your account is not ...
    (microsoft.public.windowsupdate)
  • RE: User Accounts
    ... Some programs ask if you want to install the application for the current user ... out the Startup tab of msconfig. ... All Users' Sartup folder. ... > account. ...
    (microsoft.public.windowsxp.customize)
  • Re: Major systems change and XP
    ... > My Gigabyte motherboard was limiting the speed of my processors. ... Each time you install windows, you create a new Windows installation ("Duh!" ... I currently have, for example, a guest account on this machine ... create a folder for it in 'documents and settings' and finds a folder named ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Dual Administrator Access / assigning user privelages and Admin ac
    ... Administrators it ought to be able to install SP2. ... > 'Documents and Settings' folder. ... > to her they created her account and simply gave it Ad min access ...
    (microsoft.public.windowsxp.help_and_support)