Restricted user can install programs

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Dhan (Dhan_at_discussions.microsoft.com)
Date: 07/15/04 

Date: Thu, 15 Jul 2004 14:37:13 -0700

I have one laptop running WinXP pro. not connected to domain. just stand alone system.

I have 2 users

1. default administrator account
2.user XYZ who is also administrator.

I've been using such config since I reinstalled the system about 2 months ago.

recently I'd installed opera 7.52

now I've changed the user XYZ and made him "restricted or limited user" using control userpasswords2 (member of

users). I've not even kept him a power user.

as per the description in the user settings this user XYZ wont be able to install any programs but just use the system.

I am trying to emulate unix behaviour where there is only one Root like user administrator.

But I found out that this restricted user can change following things..

1. IE security zone settings
2. system resolution
3. setup programs like opera 7.52 or audacity etc
4. open registry and change some key in HK_Current user

I've checked & confirmed that I cannot create/modify anything in %windir% & programfiles. the fact that opera was installed when this user was admin, the security settings from creator owner on NTFS security tab for c:\prgroam files\opera are blank and same for user XYZ as well. But when I run opera setup as user XYZ, it runs the setup without any errors and installs & overwrites previous opera installation.

Although spybot search & destroy wont launch setup warning that account is restricted. BUT it can launch and check system for spyware.

HOW is this possible ?

p.s. I dont want to get into modifying group policies etc and just use default account type.

Relevant Pages

  • Limited/Restricted user can install programs.
    ... 2.user XYZ who is also administrator. ... as per the description in the user settings this user XYZ wont be able to install any programs but just use the system. ... Although spybot search & destroy wont launch setup warning that account is restricted. ...
    (microsoft.public.windowsxp.basics)
  • RE: Restricted user can install programs
    ... sorry for double post but it gave me error saying post not successful ... > 2.user XYZ who is also administrator. ... > Although spybot search & destroy wont launch setup warning that account is restricted. ...
    (microsoft.public.windowsxp.basics)
  • Re: user account
    ... computer administrator and name 'xyz' ... how can i change the status of xyz so that there will only be 1 administrator in the computer system ... how can i delete 'xyz" so that in the "user account" page it will only show the default administrator and 'guest account' only. ... If that happens you can use the Administrator account to fix it or create a new one but if all you have is the built in account and that get's a problem you can't login. ...
    (microsoft.public.windowsxp.general)
  • Re: user account
    ... computer administrator and name 'xyz' ... how can i change the status of xyz so that there will only be 1 administrator in the computer system ... how can i delete 'xyz" so that in the "user account" page it will only show the default administrator and 'guest account' only. ... If that happens you can use the Administrator account to fix it or create a new one but if all you have is the built in account and that get's a problem you can't login. ...
    (microsoft.public.windowsxp.general)
  • Re: user account
    ... You may log on to the machine using the default 'administrator' account credentials and delete the ... 'xyz' account through the user accounts applet. ...
    (microsoft.public.windowsxp.general)