Limited User has some Administrator Privilages

[drstevick]

I have verified that all updates available to Windows XP Home, etc have
been installed. I am attempting to create a Limited access account on a
computer. Unfortunately, when I create the account, it still has access
to some administrative features that it shouldn't. The limited account
can install software, change firewall settings, and change internet
security settings.

I've tried everything that I can think of... Is there somewhere that
controls which features are available to an Administrator and which are
available to a Limited account?

D. R. Stevick

 

[Malke]

I have verified that all updates available to Windows XP Home, etc
have been installed. I am attempting to create a Limited access
account on a computer. Unfortunately, when I create the account, it
still has access to some administrative features that it shouldn't.
The limited account can install software, change firewall settings,
and change internet security settings.

I've tried everything that I can think of... Is there somewhere that
controls which features are available to an Administrator and which
are available to a Limited account?

Since you have XP Home, you don't have the ability to set fine-grained
permissions and restrictions that XP Pro has. Instead, you can use
either MVP Doug Knox's Security Console or the MS Shared Computer
Toolkit.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

Malke

 

[drstevick]

But why is this happening in the first place? This wasn't happeingin
before... no other computer has Limited accounts who have access to
these features... why is it only that one computer?

 

[drstevick]

Additionally, although the security toolkit at http://www.dougknox.com
looks to be something that I will be using in the future to further
limit access, it doesn't appear to limit access to programs, other than
simply not allowing the program to run. Obviously I want the firewall
program to run - I just want to block the user's access to change the
settings.