Limited user on XP SP2

[uri.cohen]

I've created a limited user account on an XP SP2 machine and this user
can do quite a lot of stuff there:
- Write to the root of C drive
- Write to 'program files' folder
- Write things to the GAC
- Install google toolbar
On my regular XP SP2 machine a limited user can't do any of the
above...

What do I'm missing? I've double checked it belongs only to the
'Users' group...
Is there some group-policy to disallow all the above? Is there a
magical 'limit limited users' configuration somewhere?

Thanks!
Uric

 

[Uric]

I've created a limited user account on an XP SP2 machine and this user
can do quite a lot of stuff there:
- Write to the root of C drive
- Write to 'program files' folder
- Write things to the GAC
- Install google toolbar
On my regular XP SP2 machine a limited user can't do any of the
above...

What do I'm missing? I've double checked it belongs only to the
'Users' group...
Is there some group-policy to disallow all the above? Is there a
magical 'limit limited users' configuration somewhere?

Thanks!
Uric

Ok, solved it: I've had 'Everyone' in the Administrators group and in
this case the limited user is (implicitly) a member of this group,
even though you can't see it in either the user properties nor the
administrators group properties...

CU

 

[Poprivet]

Ok, solved it: I've had 'Everyone' in the Administrators group and in
this case the limited user is (implicitly) a member of this group,
even though you can't see it in either the user properties nor the
administrators group properties...

CU

Hmm, good catch; thanks for the info.

Pop`