Demoting users from admin to limited

[andrew.barrett]

I hate to sound stupid, but I'm at my wits' end.

I have several XP Pro machines deployed at my small company's site
(about 15 seats). My boss wants me to revoke admin rights on all the
accounts (except the Administrator account, of course) on all the
machines to minimize the opportunity for malware and virii to infect
the boxes.

The trouble is, even when I am logged on to a machine as
Administrator, XP will not allow me to demote all accounts to limited.
It is telling me that at least one user must have administrator
rights. The Administrator does not seem to count as that one user.

Am I doing something wrong?

 

[Nepatsfan]

In

I hate to sound stupid, but I'm at my wits' end.

I have several XP Pro machines deployed at my small company's
site
(about 15 seats). My boss wants me to revoke admin rights on
all the
accounts (except the Administrator account, of course) on all
the
machines to minimize the opportunity for malware and virii to
infect
the boxes.

The trouble is, even when I am logged on to a machine as
Administrator, XP will not allow me to demote all accounts to
limited.
It is telling me that at least one user must have
administrator
rights. The Administrator does not seem to count as that one
user.

Am I doing something wrong?

You're not doing anything wrong. That's normal behavior for
Windows XP Pro.

The way to get around this is to create a new account that's a
computer administrator and use that account to demote all the
other accounts to limited. Password protect this new
administrator account and leave the built-in Administrator
account for emergencies.

Good luck

Nepatsfan

 

[Poprivet]

I hate to sound stupid, but I'm at my wits' end.

I have several XP Pro machines deployed at my small company's site
(about 15 seats). My boss wants me to revoke admin rights on all the
accounts (except the Administrator account, of course) on all the
machines to minimize the opportunity for malware and virii to infect
the boxes.

The trouble is, even when I am logged on to a machine as
Administrator, XP will not allow me to demote all accounts to limited.
It is telling me that at least one user must have administrator
rights. The Administrator does not seem to count as that one user.

Am I doing something wrong?

You can't change yourself to limited because you're using your account. Use
the Safe Mode admin account instead to make your own admin account limited.