Son using safe mode to give himself Admin access

[Guest]

I want to prevent my son from downloading programs and have given him a
limited access. However, he keeps changing his access level - I know he
doesn't have my password so think he might be using safe mode to change his
access. Could this be the case and if so what can I do?

 

[Lanwench [MVP - Exchange]]

I want to prevent my son from downloading programs and have given him
a limited access. However, he keeps changing his access level - I
know he doesn't have my password so think he might be using safe mode
to change his access. Could this be the case and if so what can I do?

If he is able to do this, he is somehow logging in as an administrator. If
you're using XP Home, you can't log in as the administrator unless you use
Safe Mode. It may be a blank password (it is by default), so you should boot
into safe mode, and set a *good*password for the built-in Administrator
account. Also make sure he doesn't know the passwords for any admin
accounts - reset yours and any others. You may also want to put a BIOS
password in place if your computer supports this - so he can't go into the
system setup & make any changes. You can disable him from booting from a
removable drive or CD-ROM that way - and you can turn it back on if you need
to later.

In addition, I must add that a computer is not a birthright. If your son is
not abiding by the house rules, have a talk with him and consider taking the
access away entirely if he can't demonstrate that he is willing to do so.
There are seldom good technological solutions to behavioral problems.

 

[Malke]

I want to prevent my son from downloading programs and have given him a
limited access. However, he keeps changing his access level - I know he
doesn't have my password so think he might be using safe mode to change his
access. Could this be the case and if so what can I do?

The advice that Lanwench gave you is spot on. Here is a more detailed
view of the same thing. Not everything in it may be applicable to your
situation; take the bits that are.

Standard security blurb:

Any computer running any operating system can be accessed by someone
with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
things you can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.

2. From the BIOS, change the boot order to hard drive first.

3. Set strong passwords on all accounts, including the built-in
Administrator account.

4. If you leave your own account logged in, use the Windows Key + L to
lock the computer (and/or set the screensaver/power saving) when you
step away from the computer and require a password to resume.

5. Make other users Limited accounts in XP Home, regular user accounts
in XP Pro.

6. Set user permissions/restrictions:

a. If you have XP Pro, you can set user permissions/restrictions with
Group Policy (Start>Run>gpedit.msc [enter]) but be careful. Using the
Policy Editor can be tricksy. Questions about Group Policy should be
posted in its newsgroup: microsoft.public.windows.group_policy.

b. If you have XP Home, you can use MVP Doug Knox's Security Console or
the MS Shared Computer Toolkit. The Toolkit can also be used in XP Pro
and may be easier for a newbie than using Group Policies.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
microsoft.public.windows.sharedaccess - Toolkit newsgroup

Please understand that these are technical responses to what is
basically a non-technical problem and there are ways around all of these
precautions. This is a family/interpersonal issue that can't be solved
by technical means.


Malke

 

[Bruce Chambers]

I want to prevent my son from downloading programs and have given him a
limited access. However, he keeps changing his access level - I know he
doesn't have my password so think he might be using safe mode to change his
access. Could this be the case and if so what can I do?

Simply set a password on the built-in Administrator account. Start >
Run > "control userpasswords2."

--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[mikeyhsd]

you might consider parenting classes to learn how to prevent the child from running the household.



(e-mail address removed)



I want to prevent my son from downloading programs and have given him a
limited access. However, he keeps changing his access level - I know he
doesn't have my password so think he might be using safe mode to change his
access. Could this be the case and if so what can I do?

 

[Leythos]

you might consider parenting classes to learn how to prevent the child
from running the household.

Since you don't have kids you might want to spend a couple months with a
few to learn how, even with the best intentions, it never works like you
read in books.

Even those that "Think" they have the best kids in the world, kids that
never do any wrong, are often fooled, even if they never find out about it.

--
Leythos
Igitur qui desiderat pacem, praeparet bellum.
Calling an illegal alien an "undocumented worker" is like calling
a drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)