administrator account on XP Home...

[GO]

Hello,

I have just completed setting up XP Home for a friend and am just looking
for some insight regarding the Administrator account as this was my first
opportunity to setup the Home version of XP. During my configuration of the
system I had noticed that I was locked out of the Administrator account, I
believe the error message mentioned something about the system policies
preventing this. This in itself is not really a problem as I just created
my own "administrator" account. Is there anyway that someone could gain
access to the system using the Administrator account or is the only way to
use it is in Safe Mode? I just want to ensure that the computer is locked
down sufficiently especially against remote "attacks".


Thanks,

Greg

 

[sillyputty]

I have just completed setting up XP Home for a friend and am just looking
for some insight regarding the Administrator account as this was my first
opportunity to setup the Home version of XP. During my configuration of the
system I had noticed that I was locked out of the Administrator account, I
believe the error message mentioned something about the system policies
preventing this. This in itself is not really a problem as I just created
my own "administrator" account. Is there anyway that someone could gain
access to the system using the Administrator account or is the only way to
use it is in Safe Mode? I just want to ensure that the computer is locked
down sufficiently especially against remote "attacks".

Though I'm not a Window's MVP, I do know something about security,
most of which I learned from hackers (the good guys, not black-hat
hackers or crackers, though you can learn much from them also).
Preventing attacks means using a good firewall, AV, NOT using IE or
Outlook/OL Express and keeping your OS patched with the latest
critical and security updates. Once an intruder has gained access to
your computer and you're running in admin mode - as 99% of windoze
users do because the non-admin mode is so crippled (MS has tried to
address this in Vista with annoying results, from what I've read) he
or she can do pretty much anything he/she wants.

Anyone who has experience with Linux understands how the admin (called
'super-user' in Linux) v. lower lever permissions_should_work. You can
do most anything without going to super-user mode, BUT for mission
critical uses super-user locks your computer down tight as a drum;
besides Linux's normal mode being_much_safer than XP's admin mode.

I had someone getting into my computer, THROUGH my firewall, while I
was using Internet Explorer. Fortunately, he was just a jokester and
was changing the auto-fill info in IE to funny names. But he just as
easily could've seriously compromised my system. Since then I've never
used IE (switched to Firefox), except when downloading MS updates (I
keep a good watch on my firewall) and when testing webpages. The
intruder has not gotten in since.

 

[Patrick Keenan]

Thanks for the reply "sillyputty". I am reasonably confident that the
machine is locked down. The user is not computer savy at all and I have
configured him to work with a limited (ie regular) user account and he
*is*
using Firefox. The firewall is set to deny access to anything other than
what I've already specified, and the personal administrator account I made
has a very strong password. My main concern lies with the default
Administrator account. I am unfamiliar with XP Home and it appears that
the
Administrator account is locked out for everything except for accessing
the
machine via safe mode. I just want to make sure this is the case because
there is no password on the account (at least not with one that I have
provided).

That's correct. By design, the actual Administrator account for XP Home is
*only* available in Safe Mode, and by default, it has no password. You
can, of course, add one - and should.

HTH
-pk

 

[GO]

Though I'm not a Window's MVP, I do know something about security,
most of which I learned from hackers (the good guys, not black-hat
hackers or crackers, though you can learn much from them also).
Preventing attacks means using a good firewall, AV, NOT using IE or
Outlook/OL Express and keeping your OS patched with the latest
critical and security updates. Once an intruder has gained access to
your computer and you're running in admin mode - as 99% of windoze
users do because the non-admin mode is so crippled (MS has tried to
address this in Vista with annoying results, from what I've read) he
or she can do pretty much anything he/she wants.

Anyone who has experience with Linux understands how the admin (called
'super-user' in Linux) v. lower lever permissions_should_work. You can
do most anything without going to super-user mode, BUT for mission
critical uses super-user locks your computer down tight as a drum;
besides Linux's normal mode being_much_safer than XP's admin mode.

I had someone getting into my computer, THROUGH my firewall, while I
was using Internet Explorer. Fortunately, he was just a jokester and
was changing the auto-fill info in IE to funny names. But he just as
easily could've seriously compromised my system. Since then I've never
used IE (switched to Firefox), except when downloading MS updates (I
keep a good watch on my firewall) and when testing webpages. The
intruder has not gotten in since.

Thanks for the reply "sillyputty". I am reasonably confident that the
machine is locked down. The user is not computer savy at all and I have
configured him to work with a limited (ie regular) user account and he *is*
using Firefox. The firewall is set to deny access to anything other than
what I've already specified, and the personal administrator account I made
has a very strong password. My main concern lies with the default
Administrator account. I am unfamiliar with XP Home and it appears that the
Administrator account is locked out for everything except for accessing the
machine via safe mode. I just want to make sure this is the case because
there is no password on the account (at least not with one that I have
provided).

 

[Richard in AZ]

Thanks for the reply "sillyputty". I am reasonably confident that the
machine is locked down. The user is not computer savy at all and I have
configured him to work with a limited (ie regular) user account and he *is*
using Firefox. The firewall is set to deny access to anything other than
what I've already specified, and the personal administrator account I made
has a very strong password. My main concern lies with the default
Administrator account. I am unfamiliar with XP Home and it appears that the
Administrator account is locked out for everything except for accessing the
machine via safe mode. I just want to make sure this is the case because
there is no password on the account (at least not with one that I have
provided).

You are right. The administrator account is only available in XP Home Edition by going into the
Safe Mode.

 

[GO]

That's correct. By design, the actual Administrator account for XP
Home is *only* available in Safe Mode, and by default, it has no
password. You can, of course, add one - and should.

HTH
-pk

Thanks Patrick. Is there anyway to apply a password remotely (like if I
were to "remote assist" into the computer)? I didn't even see the
Administrator account listed in the "accounts applet". The computer is
1500km away so I don't have direct access to it now. At the time I just
assumed that the Administrator account was completely locked out on XP Home,
and I didn't have the time to research the issue while I was there. Since
the account is only available in Safe Mode it seems like a fairly low risk
to leave it as is until I visit again in a couple months.

Thanks again,


Greg

 

[Gary S. Terhune]

That's NOT correct. You can certainly log on to Administrator in Normal
mode. I do it all the time. If you get the simple logon screen, press
Ctrl-Alt-Del twice.

 

[Gary S. Terhune]

Ahhh... There's the rub. I use Pro. I missed the reference to Home Edition.
Didn't know that about HE.

 

[Bruce Chambers]

Hello,

I have just completed setting up XP Home for a friend and am just looking
for some insight regarding the Administrator account as this was my first
opportunity to setup the Home version of XP. During my configuration of the
system I had noticed that I was locked out of the Administrator account, I
believe the error message mentioned something about the system policies
preventing this. This in itself is not really a problem as I just created
my own "administrator" account. Is there anyway that someone could gain
access to the system using the Administrator account or is the only way to
use it is in Safe Mode? I just want to ensure that the computer is locked
down sufficiently especially against remote "attacks".


Thanks,

Greg

By design, the only way to log into the Administrator account of
WinXP Home is to reboot into Safe Mode. F

Unless you've set the Administrator's password via the Management
Console (_not_ the Control Panel), it's probably still blank. WinXP Pro
asks the user to set the Administrator's password during installation,
but WinXP Home doesn't.



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Bruce Chambers]

That's NOT correct. You can certainly log on to Administrator in Normal
mode. I do it all the time. If you get the simple logon screen, press
Ctrl-Alt-Del twice.

Then you're using WinXP Pro (or MCE), not WinXP Home, Gary.

--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Gary S. Terhune]

Yup, realized that difference after the fact. One of those things that I
used to know that had fallen victim to CRS.

 

[Bruce Chambers]

Yup, realized that difference after the fact. One of those things that I
used to know that had fallen victim to CRS.

Have days like that myself. ;-}

--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Gary S. Terhune]

Mine's chronic, and really bad since 2003 when I started having seizures,
but actually getting better over the last few months. Thank meds for that.
Now if I could only get those years back...

 

[GO]

By design, the only way to log into the Administrator account of
WinXP Home is to reboot into Safe Mode. F

Unless you've set the Administrator's password via the Management
Console (_not_ the Control Panel), it's probably still blank. WinXP
Pro asks the user to set the Administrator's password during
installation, but WinXP Home doesn't.

Thanks Bruce. Is the Administrator account visible in the Management
Console? I'm sure I checked that when configuring the computer. I'll have
to look into that when I get a chance to remote connect to his computer.

 

[Bruce Chambers]

Thanks Bruce. Is the Administrator account visible in the Management
Console?

You're welcome. And, yes, WinXP Home's Administrator account is
accessible via the MMC. (You have to be using an account with
administrative privileges to affect any changes, of course.)



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[GO]

You're welcome. And, yes, WinXP Home's Administrator account is
accessible via the MMC. (You have to be using an account with
administrative privileges to affect any changes, of course.)

Thanks again. As luck would have it I had an opportunity to use Remote
Assitance to connect to his computer but I had no luck finding the
Administrator acccount (or any other account for that matter) in MMC (I was
connected with my own admin account). The Computer Management console had
no user options. I tried adding the "Local users and groups" snap-in but it
said it is not allowed in the Home version of XP. Are you sure I can access
the Administrator account? Is there something I'm overlooking?


Greg

 

[Bruce Chambers]

Thanks again. As luck would have it I had an opportunity to use Remote
Assitance to connect to his computer but I had no luck finding the
Administrator acccount (or any other account for that matter) in MMC (I was
connected with my own admin account). The Computer Management console had
no user options. I tried adding the "Local users and groups" snap-in but it
said it is not allowed in the Home version of XP. Are you sure I can access
the Administrator account? Is there something I'm overlooking?

You're right! Brain fade on my part; my apologies. Try Start > Run >
"control userpasswords2" (without the quotes, natch).


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Patrick Keenan]

Thanks Patrick. Is there anyway to apply a password remotely (like if I
were to "remote assist" into the computer)?

Only if you can remote assist in Safe Mode, which means you have a user log
in in Safe Mode with Networking.

I didn't even see the
Administrator account listed in the "accounts applet".

You can't get to it at all except in Safe Mode.

The computer is
1500km away so I don't have direct access to it now. At the time I just
assumed that the Administrator account was completely locked out on XP
Home,
and I didn't have the time to research the issue while I was there. Since
the account is only available in Safe Mode it seems like a fairly low risk
to leave it as is until I visit again in a couple months.

That may be a reasonable bet.

HTH
-pk

 

[GO]

You're right! Brain fade on my part; my apologies. Try Start > Run >
"control userpasswords2" (without the quotes, natch).

No worries, easy mistake. Hopefully I'll get a chance in the next couple of
days to give this a try.

Thanks again,


Greg

 

[GO]

Only if you can remote assist in Safe Mode, which means you have a
user log in in Safe Mode with Networking.


You can't get to it at all except in Safe Mode.


That may be a reasonable bet.

HTH
-pk

Thanks again for your assistance. I wouldn't be terribly concerned to leave
it as is until my next visit, but with Bruce's latest offering I should be
able to put a password on the account sooner.


Cheers,

Greg