Re: Son using safe mode to give himself Admin access

Bob wrote:
I want to prevent my son from downloading programs and have given him a limited access. However, he keeps changing his access level - I know he doesn't have my password so think he might be using safe mode to change his access. Could this be the case and if so what can I do?

The advice that Lanwench gave you is spot on. Here is a more detailed view of the same thing. Not everything in it may be applicable to your situation; take the bits that are.

Standard security blurb:

Any computer running any operating system can be accessed by someone with 1) physical access; 2) time; 3) skill; 4) tools. There are a few things you can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the operating system. Also set the Supervisor password in the BIOS so BIOS Setup can't be entered without it.

2. From the BIOS, change the boot order to hard drive first.

3. Set strong passwords on all accounts, including the built-in Administrator account.

4. If you leave your own account logged in, use the Windows Key + L to lock the computer (and/or set the screensaver/power saving) when you step away from the computer and require a password to resume.

5. Make other users Limited accounts in XP Home, regular user accounts in XP Pro.

6. Set user permissions/restrictions:

a. If you have XP Pro, you can set user permissions/restrictions with Group Policy (Start>Run>gpedit.msc [enter]) but be careful. Using the Policy Editor can be tricksy. Questions about Group Policy should be posted in its newsgroup: microsoft.public.windows.group_policy.

b. If you have XP Home, you can use MVP Doug Knox's Security Console or the MS Shared Computer Toolkit. The Toolkit can also be used in XP Pro and may be easier for a newbie than using Group Policies.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
microsoft.public.windows.sharedaccess - Toolkit newsgroup

Please understand that these are technical responses to what is basically a non-technical problem and there are ways around all of these precautions. This is a family/interpersonal issue that can't be solved by technical means.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.

Relevant Pages

  • Re: I need to password protect my pc at startup
    ... Also set the Supervisor password in the BIOS so BIOS ... Make other users Limited accounts in XP Home, ... you can set user permissions/restrictions with Group ... MS Steady State. ...
    (microsoft.public.windowsxp.basics)
  • Re: PASSWORDS
    ... Is there any way I can put a password on my computer when it boots up, as opposed to logging on. ... Set a password in the BIOS that must be entered before booting the operating system. ... Set strong passwords on all accounts, ... you can set user permissions/restrictions with Group Policy but be careful. ...
    (microsoft.public.windowsxp.general)
  • Re: Want to restrict teenagers ability to download programs etc
    ... Also set the Supervisor password in the BIOS so BIOS ... Make other users Limited accounts in XP Home, ... you can set user permissions/restrictions with ... The Toolkit can also be used in XP Pro ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Want to restrict teenagers ability to download programs etc
    ... Set a password in the BIOS that must be entered before booting the operating system. ... Set strong passwords on all accounts, ... you can set user permissions/restrictions with Group Policy but be careful. ... you can use MVP Doug Knox's Security Console or the MS Shared Computer Toolkit. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User account control
    ... How do I set a password in the BIOS. ... Will your techniques well equally well? ... from creating new accounts with administrator rights? ... you can set user permissions/restrictions with ...
    (microsoft.public.windowsxp.general)