Re: Limited account user can change his type. Why?

I close this thread. The direction is totally different from what I want to
know.

"Malke" wrote:

Oosterplein wrote:



"Lanwench [MVP - Exchange]" wrote:

In news:5D32549E-8A1A-406A-9250-A94076077299@xxxxxxxxxxxxx,
Oosterplein <Oosterplein@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I created a limited account for my son. However, he can change its
type by himself simply from Control Panel. Is there any way to
prevent it? or why can you explain why he can do it?

In safe mode, I created only ONE admin account in addition to the
one preset by Windows XP Home edition.

A limited user cannot elevate his own privileges - it's not possible.
Can you reproduce this yourself? More likely, your son has access to
an admin account. Change your passwords - including on the built-in
Administrator account. I'd also put a BIOS password in place and lock
the chassis. If, beyond that, your son is still monkeying around with
stuff you don't want him to, don't let him use the computer until he
can abide by your rules. What would you do if he were driving your
car without permission?



Sorry, I do not ask how to protect PC, but how to prevent this thing
from happening.
It really happend. So I am asking for help.

You've got two threads about the same subject going. The bottom line of
both threads is that a limited user cannot change himself to
administrator from that limited user account. You set something up
wrong or your son has circumvented you. Or both. Regarding prevention:

Any computer running any operating system can be accessed by someone
with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
things you can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.
2. From the BIOS, change the boot order to hard drive first.
3. Set strong passwords on all accounts, including the built-in
Administrator account.
4. If you leave your own account logged in, use the Windows Key + L to
lock the computer (and/or set the screensaver/power saving) when you
step away from the computer and require a password to resume.
5. Make other users Limited accounts.

Please understand that these are technical responses to what is
basically a non-technical problem. This is a family/interpersonal issue
that can't be solved by technical means.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

.

Relevant Pages

  • Re: Unauthorized Password Deletion
    ... We are a one computer family (2 adults, 4 kids) and so making access ... blue welcome screen with my name as the only account. ... then the Administrator account is hidden. ... Go into the BIOS and set a password. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Limited account user can change his type. Why?
    ... Oosterplein typed: ... I created only ONE admin account in addition to the ... A limited user cannot elevate his own privileges - it's not ... I'd also put a BIOS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unauthorized Password Deletion
    ... > blue welcome screen with my name as the only account. ... then the Administrator account is hidden. ... kids have been logging under the Administrator account. ... Go into the BIOS and set a password. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Limited account user can change his type. Why?
    ... Oosterplein typed: ... I created only ONE admin account in addition to the ... A limited user cannot elevate his own privileges - it's not possible. ... Set a password in the BIOS that must be entered before booting the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Locked Out of Administrator Account
    ... out of my only administrator account. ... limited user; probably not even a power user. ... Knoppix can write to an NTFS drive. ...
    (microsoft.public.windowsxp.general)
Quantcast