XP Admin rights...

[TwoRails]

I now have a strong need to limit / block what certain users can do on my small home network. Hopefully, these are quick,simple questions:

Can you lock out some users, but not others, from changing settings such as refresh rates thru Outlook Express settings?

Can one or more users lock out the Administrator? Mostly meaning can they set up passwords that lock out the Admin? Or lock out Files and Folders? etc..

Is there a big / any difference between admin control between XP Home and Pro?

Finally, any good sites to learn more details than the above?

I've got a million questions, but before I go out and upgrade all my computers from Win 98.2 to XP, I am trying to get an idea if it will do what I want...

Much Thanks!

TwoRails

[cobra]

I would suggest www.ntcompatible.com as well as ms site.
There is lots of things you can do...Too many to start naming them here.
Advice= get a book on winxp (admin guide or something) and start reading...
Good luck...
I'm sure your upgrade to XP will be better than win98...

[pillainp]

The Admin(Group) has system wide rights and privileges. No user other thatn one that is a member of this group can lock out a member of that group. Indeed, a user of another group cannot even upgrade their level without Admin concurrence. Basic feature of Windows based on the NT core (which XP is).
Indeed, suggest you upgrade all your system partitions to NTFS for fullest benefit.

And yes, I only run Windows for the family (so bad they would not know a command prompt if they saw one), but of all Windows, 2K or XP is the way to go.

[KHT]

I may be an anomaly but I prefer Windows 2000 to XP. I have an aversion to wizards..

Anyway, with the security options in 2000 or XP Pro, you could so much as lock down a user to a single program on their desktop when they log on.

This is copied from the Administrators properties..."Administrators have complete and unrestricted access to the computer/domain"

[TwoRails]

Thanks for all the tips!!

Anyway, with the security options in 2000 or XP Pro, you could so much as lock down a user to a single program on their desktop when they log on.

That's exactly what I'm looking for!

I did some reading (had to do a lot of "drilling down" -- they don't make it easy to find!) and it seems like the "Guest" account is the way to go.

I couldn't really find much differences between Pro and Home, except that Pro has a "Standard" account and home doesn't... whatever that means...

And yes, all drives will be converted to NTFS when XP is installed

Any / all other tips and suggestions are welcome!

Thanks

TwoRails

[lil Jimmie]

I just thought I'd pass along a few sites to aid you in your XP journey

http://www.kellys-korner-xp.com

http://www.tweakxp.com

http://support.microsoft.com/default...;en-us;Q301583

http://www.theeldergeek.com

[KHT]

Actually, the Guest account is a security breach and is why it is disabled by default. If you enable it, assign it a password.

Something to think about. By default, everyone has full control of shared resources (not administrative shares) unless further securuty is enforced. (Hence, the default Guest account can waltz in and, to an extent, have a blast) However, it is actually possible to enforce so much security that even an administrator can`t open a file\folder.

Just appraoch security cautiously and pay attention to alerts.

[TwoRails]

Hi (again ) lil Jimmie !

Thanks for those juicy links!! It's funny, I was the first on the proverbial block to get 95, 98, 98.2, and ME... but I disliked ME so much, I totally shied away from XP! I sure have a lot of catching up to do... (PS: I like that spell checker link! I like the drop down boxes. Makes me wish my word processor was like that)
~~~~~~~~~~~~
Hi KHT,

Strange how MS doesn't mention that when it recommend using the Guest account, eh? I'll definitely keep that in mind
~~~~~~~

TwoRails

[Nuclear Krusader]

This is another very good site:

http://www.blackviper.com/Articles/OS/OSguides.htm

[TwoRails]

Hi Nuclear Krusader,

Yes, another nice link !! - Man, my reading time for all these good links will be into the weeks or more, in sure! LOL

Thanks!

TwoRails

[Bambi Bluedragon]

My friend said I could use her computer while she was away for a couple of weeks, but forgot to put me on as a user. Just for the heck of it, I went into safe mode on her computer ad dicovered from there, I could (and did) add myself and gave myself adminitrator rights. (she was extremely ticked). Is this a loophole, and how do I prevent it from happening to me?

[Statica]

Firstly, this thread is almost a year old; you should start a new thread out.

Secondly, since you wanted our opinion. In my opinion, what you did, is VERY WRONG & UNETHICAL, akin to taking possession of that which doesnt belong to you. People are on their computers for a variety of uses; from their work/study to banking to .... and as such, you have to assume that a lot of the information on their systems is not for public viewing, so walk away.
So you havent been added as a user, if you really want to use her computer, you should have called her or contacted her and asked for permission. It really doesnt matter if you really really needed to use the computer. It's the same as finding a wallet on the street with the address etc. but decided to help yourself to the money. However, the analogy is worse, when you consider that you have used your superior knowledge of computers (over hers) to help yourself to that which doesnt belong to you. You see BB, it doesnt matter if you feel that you didnt see any sensitive info, or that you were correcting her wrong, the fact is that it is HER computer, HER data, that you have taken over without her knowledge.
I know that it's a rather drab discussion to talk about ethics that go with any kind of knowledge, but it is something that more people should consider before doing stuff like this.

.. how do I prevent it from happening to me?
Call the person up, and explain that s/he forgot to add you as a user. If this person feels comfortable enuff with u using the computer s/he will let you know.

[Zac3010]

Most likely you were able to do this due to there being a lack of any Admin password. I sugest to all of you that you have a password on your admin acount, or guests of your computer can easly go into safemode log onto your admin acount, and change passwords, etc.

[Bambi Bluedragon]

I agree with Statica. What I did was wrong, I just wasn't thinking about the morals of the situation at the time.

Statica, I'm not offended by your post, instead I thank you, because how can I learn from my mistakes unless someone tells me I have made a mistake.

[Statica]

I'm relieved that you werent offended by my post, and glad that you understand the ethics of the situation. There are sometimes ethical implications to a lot of actions that we do and think nothing of.

More importantly, I hope that your friend will let it go understanding that it was an error.

Happy computing.