All administrator accounts can manipulate the attributes of all accounts The minor problem with deleting the Administrator account on a system that has been running for a while is that some things will probably have been installed for user 'Administrator'
Also - users who 'own' files can stop the OS from accessing those files (or directories) That sort of limitation should be expected on NTFS partitions, as the file system itself has markers to say who can do what to which files, and/or directories As a user with 'admin' authority can change the password on any user with 'private' files, such security on a windows system is pretty flimsy barrier to someone who can logon as a user with such authority So it is essential to stop others getting access to the system with admin authority So - yes setup your own id's on a new system - one with admin authority, and one as a user Set good ( 10 character or more ) passwords on both and then remove the 'Administrator' id That means that those trying to get at your system have a double problem - guessing a user id, and then the password The key thing is that you normally do your work as a 'user' who cannot ?? (MS please no more holes) change the parts of your installed OS that allow the anti-virus and firewalls to be bypassed. You can - still start that nice gaming attachment, or download the screensaver & game but it should not be able to install itself at a 'more privileged part of the system than the security facility You will (should) have to actively use a different ID to install most software, but how often will you be doing that Oh! yes - those with Recovery console installed - see if you can login to it as 'Administrator' without entering a password JimB ----- Original Message ----- From: "Stephen Bird" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, March 15, 2006 8:33 PM Subject: Re: Reset all Windows XP settings to default > Quoting James Button <[EMAIL PROTECTED]>: > > > You really should setup a 'limited' account for your normal use > > and put a password on that and the admin authority account > > and with such poor physical security, have a screensaver with a password on > > both/all accounts > > Greetings.... your suggestion leads me to a curious question. I assume that > the "Administator" has full rights to the system and this name (Administrator) > is part of every WinXP system and can't be changed. I also assume that > individuals can be given full administrator rights or more limited rights. > > My question is this: can "Mike User" with full administrator rights limit the > Administrator account in any way - for example, change passwords, delete the > account, etc.? If this is possible, then it would be very important that all > non-Administrator users have limited accounts. > > I've never created a limited account so I'll do some reading to learn if there > are default/suggested settings or if it is more pick & choose from a list. :-) > -- > Cheers, Stephen > > -- > ---------------------------------------- > To unsubscribe, mailto: [EMAIL PROTECTED] > Is your picture included in the Official Win-Home List Members Profiles Page? > http://www.besteffort.com/winhome/Profiles.html > If not, write to: [EMAIL PROTECTED] > > -- ---------------------------------------- To unsubscribe, mailto: [EMAIL PROTECTED] Is your picture included in the Official Win-Home List Members Profiles Page? http://www.besteffort.com/winhome/Profiles.html If not, write to: [EMAIL PROTECTED]
