Limited account user can change his type. Why?

[Guest]

I created a limited account for my son. However, he can change its type by
himself simply from Control Panel. Is there any way to prevent it? or why can
you explain why he can do it?

In safe mode, I created only ONE admin account in addition to the one preset
by Windows XP Home edition.

 

[Shenan Stanley]

I created a limited account for my son. However, he can change its
type by himself simply from Control Panel. Is there any way to
prevent it? or why can you explain why he can do it?

In safe mode, I created only ONE admin account in addition to the
one preset by Windows XP Home edition.

He shouldn't be able to do this.

 

[Lanwench [MVP - Exchange]]

In

I created a limited account for my son. However, he can change its
type by himself simply from Control Panel. Is there any way to
prevent it? or why can you explain why he can do it?

In safe mode, I created only ONE admin account in addition to the one
preset by Windows XP Home edition.

A limited user cannot elevate his own privileges - it's not possible. Can
you reproduce this yourself? More likely, your son has access to an admin
account. Change your passwords - including on the built-in Administrator
account. I'd also put a BIOS password in place and lock the chassis. If,
beyond that, your son is still monkeying around with stuff you don't want
him to, don't let him use the computer until he can abide by your rules.
What would you do if he were driving your car without permission?

 

[Guest]

In

A limited user cannot elevate his own privileges - it's not possible. Can
you reproduce this yourself? More likely, your son has access to an admin
account. Change your passwords - including on the built-in Administrator
account. I'd also put a BIOS password in place and lock the chassis. If,
beyond that, your son is still monkeying around with stuff you don't want
him to, don't let him use the computer until he can abide by your rules.
What would you do if he were driving your car without permission?

Sorry, I do not ask how to protect PC, but how to prevent this thing from
happening.
It really happend. So I am asking for help.

 

[Lanwench [MVP - Exchange]]

In

Sorry, I do not ask how to protect PC, but how to prevent this thing
from happening.
It really happend. So I am asking for help.

I don't mean to imply you are making this up, but it simply cannot have
happened as you described. Napoleon could crown himself emperor, but a
limited user cannot crown himself admin. As I asked, can you reproduce this
yourself, at will? Did you *see* him do it? I'd bet money that your son has
access to admin credentials via some means you do not know about, via tools
you don't know about. Perhaps he knows yours, perhaps the built-in admin
account. You need to look at the overall security of your computer - I think
you're pursuing a red herring.

Note that you indeed *are* asking how to protect your PC. And I'm trying to
help. This is not a "click the checkbox and you're done" sort of thing -
it's a layered approach.

And, at the end of the day, remember what I wrote about not letting him use
the computer, if he cannot, will not abide by the house rules. A computer is
not a birthright.

 

[Malke]

Sorry, I do not ask how to protect PC, but how to prevent this thing
from happening.
It really happend. So I am asking for help.

You've got two threads about the same subject going. The bottom line of
both threads is that a limited user cannot change himself to
administrator from that limited user account. You set something up
wrong or your son has circumvented you. Or both. Regarding prevention:

Any computer running any operating system can be accessed by someone
with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
things you can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.
2. From the BIOS, change the boot order to hard drive first.
3. Set strong passwords on all accounts, including the built-in
Administrator account.
4. If you leave your own account logged in, use the Windows Key + L to
lock the computer (and/or set the screensaver/power saving) when you
step away from the computer and require a password to resume.
5. Make other users Limited accounts.

Please understand that these are technical responses to what is
basically a non-technical problem. This is a family/interpersonal issue
that can't be solved by technical means.

Malke

 

[Guest]

I close this thread. The direction is totally different from what I want to
know.

 

[Lanwench [MVP - Exchange]]

In

I close this thread. The direction is totally different from what I
want to know.

Sorry to hear that, but caveat emptor. This is a public newsgroup - and
you've been given very sound advice, I can assure you.

The fact that the answers do not match the predefined ones you have in your
own head and for which you are evidently seeking confirmation, is sad. I
have to wonder why you would have posted your question in the first place if
you didn't trust that the people answering, would be smart or skilled enough
to help you. Seems a bit of a waste of time, really.