Re: Xp home edition(logon password security)



Prabhat ranjan wrote:
My computer have two administrator accounts, suppose A and B.
My account is A.A is a administrator and password protected and B is also aministrator and password protected.My problem is this, that B My son usually remove my logon password (controlpanel>>useraccount>>select A account>>remove password)then he use to logon my account and see all my personal files(which is not sutible for him).I can`t make his account limited because in xp home edition some games and program did not run.
What is the solution for this?Can anybody helps me?




The only solution is to take away your son's administrative privileges. Period. If some games don't work, that's just too bad. What are you priorities? First and foremost, you need to decide who is the parent, and who is the child. The parent is the one in charge.

As for the non-working games:

You may experience some problems if the software was designed for Win9x/Me, or if it was intended for WinNT/2K/XP, but was improperly designed. Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders.

For example, saved data are often stored in a sub-folder under the application's folder within C:\Program Files - a place where no inexperienced or limited user should ever have write permissions.

It may even be that the software requires "write" access to parts of the registry or protected systems folders/files that are not normally accessible to regular users. (This *won't* occur if the application is properly written.) If this does prove to be the case, however, you're often left with three options: Either grant the necessary users appropriate higher access privileges (either as Power Users or local administrators), explicitly grant normal users elevated privileges to the affected folders and/or part(s) or the registry, or replace the application with one that was properly designed specifically for WinNT/2K/XP. You've already stated that granting your son elevated privileges is a very bad idea.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q307091

Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving settings on limited accounts, you may need to change permissions on the registry keys. Run regedit.exe and go to HKLM\Software\vendor\app, where "vendor\app" is the key that the software vendor used for your specific program. Change the permissions on this key to allow Users full control."



--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
.



Relevant Pages

  • Re: Lost XP User Account Settings
    ... file ownership and permissions supersede administrator rights. ... This is not your administrator account, ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Windows Media player(transfering files between user accnts.)
    ... file ownership and permissions supersede administrator rights. ... This is not your administrator account, ... >> Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.basics)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Re: Wheres the saved files from deleted users
    ... I know I did not try logging in as Administrator - can I do that? ... If you renamed the account to Board, that wouldn't have renamed the user ... profile folder; that would still be Bill Hepburn. ... However, if this is *your* user profile, it's very odd you can't see the ...
    (microsoft.public.windowsxp.general)
  • Re: Deleting Multiple Users
    ... You cannot log on to the Administrator account except in safe mode. ... The Windows folder in the David folder is nothing to worry about--it is ...
    (microsoft.public.windowsxp.setup_deployment)