Re: Demoting users from admin to limited

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



andrew.barrett@xxxxxxxxx wrote:
I hate to sound stupid, but I'm at my wits' end.

I have several XP Pro machines deployed at my small company's site
(about 15 seats). My boss wants me to revoke admin rights on all the
accounts (except the Administrator account, of course) on all the
machines to minimize the opportunity for malware and virii to infect
the boxes.

The trouble is, even when I am logged on to a machine as
Administrator, XP will not allow me to demote all accounts to limited.
It is telling me that at least one user must have administrator
rights. The Administrator does not seem to count as that one user.

Am I doing something wrong?

You can't change yourself to limited because you're using your account. Use
the Safe Mode admin account instead to make your own admin account limited.


.



Relevant Pages

  • Re: Keep admins off of client machines
    ... the sharepoint admin is simple, just create a standard user account for them ... The 'Domain Administrator' account is ... Domain Administrator password. ... takes a thorough understanding of such priveleges to do so. ...
    (microsoft.public.windows.server.sbs)
  • Re: firewall on budget ?
    ... 1)Work in Admin mode, and through 'run as', browse ... If working in admin mode and doing runas to browse in a guest account. ... Installing a program, getting an error, then doing the run as, can be ... running as administrator all the time. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Admin
    ... What it sounds like you are trying to determine is whether or not the administrator account has been changed while the OS is offline. ... If you cron'd up something that ran with system permissions you could dump this key from each of the machines every day and do a compare. ... Download FREE whitepaper on how a managed service can ...
    (Pen-Test)
  • Re: seeing another computer on a LAN
    ... So, while I was waiting for your response, I tried creating an act on ... 2nd account, Administrator is not displayed on the logon screen, so HELP! ... Both machines are XP Pro ...
    (microsoft.public.windowsxp.network_web)
  • RE: local admin account password
    ... ease of use this provides you could change the account ... >> remotely patch all machines on that LAN. ... >> DCs diff admin password ...
    (Focus-Microsoft)