Yes, it is possible.
First, very often all that software that refuses to run
as a limited account actually needs is to have the Users
group granted the ability to write into the directory tree
where that application installed.
If you start run cmd and then in the cmd window enter
cacls "c:\program files\tax terminator" /e /t /g users:c
(replacing the path to the app install directory as needed)
this will grant limited accounts (Users members) the ability
to change things within that area.
Not all application can be cured this simply, but many can.
An admin account can do most anything.
So, as that account is running, your system can be changed
in irreversible ways.
When one "connects" to the office, one might mean join the
office's domain. If this happens, then one can even loose
the ability to log in with an admin account, as the domain
can take over all control of the machine's configuration.
--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
Sue said:
I set up 2 accounts in XP Pro--one with admin rights and the other
limited. However, I later had to give the limited account admin rights in
order to run a tax program. Now, system changes have been made--hooking up
to an office computer at a remote location. Is it possible that I can't use
system restore to undo the changes once the tax program is no longer needed?
