Resolved Switching to a non-administrator logon

True for XP-home. Not true for XP-Pro.

With XP-pro
- when you get to the screen with the click-to-logon icons, CAD and you get a classic NT style logon window and can key in any user account that suits you including Administrtor.
- set to use the classic logon window rather than the one with icons
- add Administrator to the logon icons on your welcome screen. Kellys Korner has a nice little vbs script that will do it or you can do it manually

 

When I got my O.E.M Home edition XP computer, there was a default administrator accessible thru safe mode. I created my own admin. account and put a password on the default in safe mode (and mine of course). I didn't think it was very secure that someone could boot up my system in safe mode, and get into the system as an administrator so easily. I know it wouldn't stop the determined, but I thought it wouldn't hurt.

 

Excellent idea Alicia and exactly what everyone should do as an absolute minimum.

 

Still goofy

I left my computer as I last reported, and came back from a 2 day trip when I'd shut it all down. The computer had lost its SATA drive configuration. Luckily I had written it down so I was able to reset it. (None of the rest of the configuration had changed).

Now I know it doesn't make any sense that this might be caused with my changes to the users, but when I work around Windows (any version), I picture one of Bill Gates crew with voodoo dolls putting pins into my BIOS.

 

Standard or Restricted

For the non-administrative account, there is a choice of standard or restricted user. I've chosen "standard." Does that provide sufficient security?

 

Even after doing this, I still have some problems when using the non-administrative account. Some software (my Adobe Photoshop Elements and Retrospect Backup, for example) give warning messages that certain features are disabled for the "standard" user. Another problem is that my mainboard (MSI brand) has a utility that loads on boot that monitors temperatures and fan speeds and other stuff, and that won't load at all under the standard profile.

It seems that despite the guidance that running from a non-administrative account is theoretically more secure, a lot of software developers are assuming you aren't going to do it.

I'm wondering if really do need this hastle. With the modem configuration and firewall I'm running, I've run through the "Shields Up!" series of tests for accessibility and passed all of them, suggesting that my computer cannot even be seen from the Internet. My e-mail provider is screening for viruses and I run Symantec Antivirus as a backup to that.

Is running the non-administrator account, with the problems that it gives me, just another set of suspenders?

 

Hi Terry,

It seems that despite the guidance that running from a non-administrative account is theoretically more secure, a lot of software developers are assuming you aren't going to do it.

Your surmise is correct Lots of MS processes can only be run in Admin mode, for example.

Basically the idea for the non-Admin user is to restrict changes/additions to the system, that's the "security ". What makes it tough is that its hit or miss, some apps/processes will or won't allow full function.

I create restricted accounts for people so that when they are surfing, there is the minimum threat. No downloading of anything - no software installs - no MS updates - no working on media files and etc.

These same people will switch to Admin mode when they want to install software - Ms updates - edit media files and etc.

I don't think this feature has been fully realized in XP, from what little I know about the coming new MS OS Vista, this area will better - exactly how I don't know.

Regards - Charles