Re: Windows 2000 User Settings


"John John" wrote...
Policy? Do you mean Group Policy objects (GPO)? Unless you intend to
have multiple users on the laptop or just want to "thinker" you don't
need to use GPO's. Otherwise, the information is in the link I provided
earlier, from that article:
:
I don't know - I'm just referring to Administrators ability to install programs, and
modify the OS. I'm assuming that this is a setting someplace? What, exactly, is "act as
part of the operating system"?

I don't want to be logged in as an Administrator during my daily work becaise I don't
want a glitch to overwrite OS components and drivers, or try to modify programs. This
can also restrict the damage a virus or spyware can do.

Bill




John

Bill wrote:

Thanks. Along with your link, I found this page:
http://www.comptechdoc.org/os/windows/win2k/win2kusers.html
and I've got most of what I need.

What I can't find is, where are the policies for installing programs and
ActiveX controls? Or is that what "act as part of the operating system" is?

Bill.



"John John" wrote...

If you restrict your privileges too much you will soon tire of the
constraints imposed by having a low permissions account. To make
matters worse some of the poorly designed software might not run too
well if you don't have elevated permissions. I certainly wouldn't want
to use a "personal" computer with any less than a Power User account.
Computers in corporate environments are a different matter, most users
should be kept to the lowest privileges possible. The information here
should answer some of your questions:

Default Access Control Settings in Windows 2000



http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/security/secdefs.mspx

Don't forget to disable the Guest account, it's an unnecessary security
risk.

Bill wrote:


Thanks to both of you!

Can you comment on my strategy - that my main daily, working account

cannot install

programs?

I'm very new to Windows 2000, and I want to set this laptop up for

maximum stability.

How do you guys set up your Windows 2000 computers? How many, and what

types, of user

profiles do you set up?

Bill.



"Stubby" wrote...


In D&S there is a hidden profile named "default". This is copied to
each new user you create. You can also put things in "All Users".
These will appear in addition to what is in each user's private Profile.
Specifically, the Desktop is one file in a profile.


John John wrote:


Copy the Administrator user profile to user Bill. Search the Windows
Help files for "User Profiles" for more information.

Tip: You must have administrative privileges to copy profiles. You
cannot copy or delete a user profile that belongs to the currently
logged on user or any user whose profile is in use. Create a second
Administrator account then when logged on to the second Administrator
copy the profile from the other Administrator account to Bill's

account.

John

Bill wrote:


95% finished setting up my new Windows 2000 computer, all from the
Administrator
account. For safety's sake, I want my main daily work user account to
not be able to
install programs, so I created user "Bill"

Of course, when I log into that "Bill" account, it doesn't have the
desktop, startup
programs, etc. of the Administrator account.

How can I set up a Windows 2000 user account that has the same startup
and desktop
settings as my Administrator account?

Thanks!











.

Relevant Pages

  • Re: Unable to log into own user profile (administrator) - fail User Profile Service
    ... well until I turned it on today and attempted to log into my profile. ... While trying to access my own account, the systems says it is unable to ... You will need to enable the built-in Administrator account (disabled by ... Create a Standard user account for your daily work. ...
    (microsoft.public.windows.vista.security)
  • Re: Fix for large, possibly corrupt DEFAULT registry file?
    ... Created a new user account (local account, ... The profile created for the new user is just over ... http://support.microsoft.com/kb/887195/en-us this folder is used by the ... normal administrator account (the one that had been producing the error ...
    (microsoft.public.win2000.registry)
  • Re: User name assigned to a new profile!
    ... I can now open the files from the old administrator account that I copied to ... Windows explorer shows that my folders and files are still there, ... Windows cannot load the locally stored profile. ...
    (microsoft.public.windowsxp.general)
  • Re: Fix for large, possibly corrupt DEFAULT registry file?
    ... Created a new user account (local account, ... The profile created for the new user is just ... Data\Microsoft\CryptnetUrlCache folder. ... normal administrator account (the one that had been producing the error ...
    (microsoft.public.win2000.registry)
  • Re: Fix for large, possibly corrupt DEFAULT registry file?
    ... Created a new user account (local account, ... The profile created for the new user is just over ... http://support.microsoft.com/kb/887195/en-us this folder is used by the ... normal administrator account (the one that had been producing the error ...
    (microsoft.public.win2000.registry)