Re: We are there--everything is perfect, except: Power User/Adminstrator

In news:O0VfUAChFHA.2840@xxxxxxxxxxxxxxxxxxxx,
cmar <cma16@xxxxxxxxx> had this to say:

My reply is at the bottom of your sent message:

> Great work, Galen, everything is perfect. You really know your stuff.
>
> But you said this in a prior post: "I should warn you that a limited
> account or power user is better security-wise."
> So is there a way to change one of two Administrator accounts to a
> Power User Account and use that most of the time, except when some
> Administrator task is required?
> Or if not, should I create a Power User account and copy the settings
> of one of the administrator accounts to it?
> Thanks, CMA
>

Assuming that you're not using the actual Administrator account (one with
your name or something like that will be best for this) and I believe that's
what you've done. You've set up the account, copied profiles over, made the
desktop be the same, and have permissions setup for ownership if needed.
Next you'll want to run the "control userpasswords2" command from the start
> run box. There you'll see a list of names. Highlight the account you are
using (I'm not sure if you'll have to log out then log in as admin to do
this but I don't THINK you have to) and click properties. Under group
membership tab, tick the Other, in the drop down menu select power user.
(You can always change it back later if there's something you want to
change.) Note that Power Users Group is only available in XP Pro.

Here's a bit about managing groups in XP Pro:

http://www.mcmcse.com/microsoft/guides/manage_groups.shtml

Here's some additional links as well:

http://www.google.com/search?num=100&hl=en&lr=&newwindow=1&safe=off&q=description+power+users+group+windows+xp

The reason I suggest Power Users is because I feel Limited Users are often
too restricted for the average person's usage of their PC. The Power User
has many of the same rights as the admin while there's some restrictions
about major system-wide changes. It's a whole safety issue, running as an
admin level means that when you do things like open your web browser that
application has the same rights to the OS as you do (or, more accurately,
you have allowed it to have in your settings.)

Galen
--

"But there are always some lunatics about. It would be a dull world
without them."

Sherlock Holmes


.

Relevant Pages

  • Re: Use of credentials with UAC in vista
    ... user's account, from a command prompt with 'run as administrator' privledges, and it failed saying access denied. ... The user's account has power user permissions. ... There is no more Power User on Vista, ... It also appears from reading the above article that it did indeed cache my admin credentials. ...
    (microsoft.public.windows.vista.general)
  • Re: XP/Home Security issues
    ... >To debate the issue a bit further, if you make the account a limited ... >write to the Windows folder so they can change system files but windows ... power user account would do something like allow limited writing to ... prefer not to give the Admin password to, and when limited to the Home ...
    (microsoft.public.windowsxp.security_admin)
  • RE: local users and groups
    ... It could also be that he has a user that is in the Account Operators Local Group, giving him access to reset passwords and such. ... Microsoft Certified Systems Administrator ... > we then made him a power user and reset the admin password ...
    (microsoft.public.win2000.general)
  • Re: Problem with User Account & Quickbooks in Win XP 2002
    ... I have admin rights, and I removed and re-installed the Quickbooks, but I ... As to account privileges, if your account is an Administrator ... group rights or be a power user. ...
    (microsoft.public.windowsxp.general)
  • Fixing Personalized Menus
    ... I'm someone who happens to like Personalized Menus, ... Personalized Menus haven't worked on that account. ... Apparently Windows thinks all of these programs are being used. ... and I usually run the system as a Power User ...
    (microsoft.public.win2000.general)