User account can't enable/disable internet connection

[Guest]

I am new to XP/Home although I've used other Windows versions since 3.1.
When I got my new laptop (eMachines refurbished) XP was preinstalled. This
laptop is wirelessly connected to the internet through my Netgear router and
thence to a Comcast cable modem. Also in use are two desktop computers, one
of which is running Windows 98 and one of which uses the Linspire 5.0
(Unix-based) operating system.

The main problem is that I don't want the User account to always be
connected to the internet, because I will be doing things on the laptop that
don't require a constant internet connection (such as copying audio tapes to
the hard drive, running said tapes through a program to get rid of extra
noises, then editing the tapes and burning the results to CD as an MP3) but
the User account I set up can't disable the connection, which seems only able
to be done by the administrator account--which defeats my purpose for the
user account . . . to have the User be able to enable or disable the internet
connection, at will.

I set up a User account on the laptop after reading that, for safety, one
shouldn't work under the Administrator account--which was almost two weeks
after starting to work, in the Administrator account, of course. Takes me a
while to catch on.

The reason I don't want to be constantly connected is that I don't want to
worry about someone tapping into my cable connection and getting into any of
my 'puters. Yeah, I have virus, spyware, and firewall protection . . . but
when I'm on the laptop I can see other wireless networks, and if I can see
them, surely they can see me - and that FREAKS me out.

I read so many posts trying to figure this out without bothering anyone; I
got so involved that I forgot to eat breakfast until just about 20 minutes
ago . . . but found nothing that would help me. I also noticed many, many,
many posts asking for help that simply have no answers. I feel sorry for
someone who comes in, asks a question that makes a difference to them, and
gets nothing. Frustrating, too, when other persons come in to talk about
their religious biases. Go figure.

I will be grateful for any assistance you are able to provide.

dragonmom

 

[Richard G. Harper]

Personally, I think you're worrying needlessly. Just being able to "see" a
wireless network means nothing. It's a little bit like worrying about
others being able to "see" your street address on your house and since they
can see it you are at risk of being robbed. As long as your house is
appropriately secure no one can walk in and steal you blind - and so if your
wireless network is secure no one can get into it.

 

[Chuck]

I am new to XP/Home although I've used other Windows versions since 3.1.
When I got my new laptop (eMachines refurbished) XP was preinstalled. This
laptop is wirelessly connected to the internet through my Netgear router and
thence to a Comcast cable modem. Also in use are two desktop computers, one
of which is running Windows 98 and one of which uses the Linspire 5.0
(Unix-based) operating system.

The main problem is that I don't want the User account to always be
connected to the internet, because I will be doing things on the laptop that
don't require a constant internet connection (such as copying audio tapes to
the hard drive, running said tapes through a program to get rid of extra
noises, then editing the tapes and burning the results to CD as an MP3) but
the User account I set up can't disable the connection, which seems only able
to be done by the administrator account--which defeats my purpose for the
user account . . . to have the User be able to enable or disable the internet
connection, at will.

I set up a User account on the laptop after reading that, for safety, one
shouldn't work under the Administrator account--which was almost two weeks
after starting to work, in the Administrator account, of course. Takes me a
while to catch on.

The reason I don't want to be constantly connected is that I don't want to
worry about someone tapping into my cable connection and getting into any of
my 'puters. Yeah, I have virus, spyware, and firewall protection . . . but
when I'm on the laptop I can see other wireless networks, and if I can see
them, surely they can see me - and that FREAKS me out.

I read so many posts trying to figure this out without bothering anyone; I
got so involved that I forgot to eat breakfast until just about 20 minutes
ago . . . but found nothing that would help me. I also noticed many, many,
many posts asking for help that simply have no answers. I feel sorry for
someone who comes in, asks a question that makes a difference to them, and
gets nothing. Frustrating, too, when other persons come in to talk about
their religious biases. Go figure.

I will be grateful for any assistance you are able to provide.

dragonmom

Being "invisible", as a measure of security, is worse than no security at all.
It gives you a false sense of security. Some folks call this "Security By
Obscurity".
<http://nitecruzr.blogspot.com/2005/05/security-by-obscurity.html>
http://nitecruzr.blogspot.com/2005/05/security-by-obscurity.html

You have overcome the most important hurdle here. You are nervous - that's
good. So secure your LAN properly, and concentrate on positive efforts to
protect yourself.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html
<http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html>
http://nitecruzr.blogspot.com/2005/05/setting-up-wifi-lan-please-protect.html

 

[Guest]

Thank you, R. G. Harper and Chuck, for your responses. So, what you're
saying is that if my home network is protected I don't have to worry about
being connected to the internet, even when not working on or near the
internet?

You didn't really answer the main question, however: User account can't
enable/disable internet connection. Do you mean that the user account can be
connected any time I'm working on the laptop and as long as my home network
is protected I don't have to worry about it? Yet another "go figure."

It's unfortunate that I can't do all those things that Steve Gibbs
recommends. I tried to do them waaayyy back, when I was using Windows 95, I
think. And I didn't have to deal with cable and multiple computers and a
router that time. The process proved too much for me and I had to lie down
and dab my forehead with cologne.

So, I'm now minus two for two. I asked what turned out to be two questions;
you answered what you considered two questions, but not the ones I asked.
The best I get out of this is a hope that everything will be OK. Shouldn't
complain.

Thanks again for trying . . . over . . . and out. dragonmom

 

[Chuck]

Thank you, R. G. Harper and Chuck, for your responses. So, what you're
saying is that if my home network is protected I don't have to worry about
being connected to the internet, even when not working on or near the
internet?

You didn't really answer the main question, however: User account can't
enable/disable internet connection. Do you mean that the user account can be
connected any time I'm working on the laptop and as long as my home network
is protected I don't have to worry about it? Yet another "go figure."

It's unfortunate that I can't do all those things that Steve Gibbs
recommends. I tried to do them waaayyy back, when I was using Windows 95, I
think. And I didn't have to deal with cable and multiple computers and a
router that time. The process proved too much for me and I had to lie down
and dab my forehead with cologne.

So, I'm now minus two for two. I asked what turned out to be two questions;
you answered what you considered two questions, but not the ones I asked.
The best I get out of this is a hope that everything will be OK. Shouldn't
complain.

Thanks again for trying . . . over . . . and out. dragonmom

Well, you're always going to worry, and you should. Just don't worry about
things that won't help.

What I was saying is, don't rely upon disconnecting from the Internet as a
measure of protection. Your computer is at risk when you are using it, and a
lot of hacking today involves you acting to make the hack work.

But part of your conclusion is correct - the user account can be connected any
time you're working on the laptop and as long as your home network is protected,
you are reasonably safe.
1) Never assume 100% safety.
2) Never assume constant safety to any degree.

The most essential part of your protection is between your ears.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html#Layer4>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html#Layer4

 

[Guest]

I obviously don't speak the same language you do. My concern involves the
User account NOT BEING ABLE TO ENABLE/DISABLE THE INTERNET CONNECTION (as in
the subject of my post).

I understand that I have to protect my computers. I'm trying to do that.
What I'm saying here is that I have to be logged in as both Administrator AND
User in order for the User to be able to connect to the internet.

That doesn't seem right. If someone tells me that this is the way XP/Home
works, well, then, I'll have to log into BOTH accounts to use the User
account - since everyone says that one isn't supposed to work as
Administrator.

If I didn't HAVE to use XP, I wouldn't. Unfortunately for me, I MUST use
XP. I hesitate to say that you haven't helped . . . OK, you haven't helped .
.. . but I'm sure you tried. Too bad that an operating system with so many
bells and whistles can't do a simple thing like letting my User account
access the internet without logging in as Administrator, too.

Thanks anyway. Maybe it won't be as difficult to get an answer to my NEXT
question about this fatakta operating system.

dragonmom

 

[Chuck]

I obviously don't speak the same language you do. My concern involves the
User account NOT BEING ABLE TO ENABLE/DISABLE THE INTERNET CONNECTION (as in
the subject of my post).

I understand that I have to protect my computers. I'm trying to do that.
What I'm saying here is that I have to be logged in as both Administrator AND
User in order for the User to be able to connect to the internet.

That doesn't seem right. If someone tells me that this is the way XP/Home
works, well, then, I'll have to log into BOTH accounts to use the User
account - since everyone says that one isn't supposed to work as
Administrator.

If I didn't HAVE to use XP, I wouldn't. Unfortunately for me, I MUST use
XP. I hesitate to say that you haven't helped . . . OK, you haven't helped .
. . but I'm sure you tried. Too bad that an operating system with so many
bells and whistles can't do a simple thing like letting my User account
access the internet without logging in as Administrator, too.

Thanks anyway. Maybe it won't be as difficult to get an answer to my NEXT
question about this fatakta operating system.

dragonmom

So tell us again why you WANT the user enabling / disabling the connection. If
the computer is connected thru the router, and if you're running Windows XP SP2
(and you better be that), then you login as an administrator, you connect the
computer, and you leave it connected. The enable / disable network connections
is supposed to be an administrative task - users have no business changing
network settings.

As I said above, and I thought from your later post that you understood,
disconnecting from the Internet when you don't intend to be actively using the
connection is not security. It's like driving down the highway, 30+ over the
speed limit, "protected" by a Radar detector, when the cops are using Lasers.

Windows is simply not designed so the user can change the network setup at will.

 

[Guest]

Thank you for your response. Perhaps what you're saying is that it's
perfectly normal to force one person (who is BOTH administrator AND user) to
be logged in to two accounts (both administrator and user) so that only the
user can log on to the internet. It seems like a waste of time in an o.s.
that has multiple way of doing a single thing. See, if I'm supposed to only
use the administrator account to do "administrative things," but not just to
boogie around the internet, does it make sense to have the administrator
logged on whenever the user wants to check the weather?

If THAT makes sense, then why (when one is the sole user of the computer)
can't the administrator be the only one logged on and using the programs?
Safety, you say, but don't the firewall and spyware and virus programs
provide the same protection to the administrator account as the user account
.. . . or have I missed something else?

If you tell me I have to log in as administrator, then connect to the
internet, then log in as the user and use the internet . . . and when I'm
finished for the day, I must log the user off, go back and log the
administrator off, then shut down the computer, then so be it.

Thanks again; I appreciate your help, even if I don't seem to understand.

dragonmom

 

[Chuck]

Thank you for your response. Perhaps what you're saying is that it's
perfectly normal to force one person (who is BOTH administrator AND user) to
be logged in to two accounts (both administrator and user) so that only the
user can log on to the internet. It seems like a waste of time in an o.s.
that has multiple way of doing a single thing. See, if I'm supposed to only
use the administrator account to do "administrative things," but not just to
boogie around the internet, does it make sense to have the administrator
logged on whenever the user wants to check the weather?

If THAT makes sense, then why (when one is the sole user of the computer)
can't the administrator be the only one logged on and using the programs?
Safety, you say, but don't the firewall and spyware and virus programs
provide the same protection to the administrator account as the user account
. . . or have I missed something else?

If you tell me I have to log in as administrator, then connect to the
internet, then log in as the user and use the internet . . . and when I'm
finished for the day, I must log the user off, go back and log the
administrator off, then shut down the computer, then so be it.

Thanks again; I appreciate your help, even if I don't seem to understand.

dragonmom

Not quite.

The administrator logs on and makes system settings, and logs off.

The user logs on, surfs the Internet, and runs the applications.

The administrator doesn't run applications, or surf the Internet. The user
can't make system changes.

Any hacks that depend upon Internet activity, or running an application, then
update to the system, don't happen. The person who surfs the Internet and runs
applications doesn't have the ability to make system changes. The person who
makes system changes doesn't run applications, or surf the Internet.

In Windows Vista, it's called Limited User Access. In Linux, it's called Root
(for system changes). You don't run applications as Root, and you can't make
system changes as a user.

As the Administrator, you set the system up to connect to the router, and the
Internet. You log off, and let the user use the computer. Since you're
connected to a NAT router, you leave the computer connected to the router. If
you want to meter Internet access, you may be able to do that thru the router,
but you leave the computer connected to the router.

 

[Guest]

Thank you, Chuck. I think I finally understand. I apologize for being so
dumb. I made the appropriate mental connection when you mentioned /root,
since I AM running my Linspire machine as /root because I didn't know about
user before and now have too many files and programs on the computer to
change over to user access. Yeah, BIG problem.

As a result of my lack of knowledge, I called a local group who replaced the
battery and updated the BIOS on my first laptop (don't ask) and asked them to
extricate me from this ridiculous situation I've gotten myself in.
Expensive, right, but worth it if all the problems I've been experiencing get
fixed.

One final thank you. I truly appreciate your patience with a silly old woman.

dragonmom

 

[Lem]

Thank you for your response. Perhaps what you're saying is that it's
perfectly normal to force one person (who is BOTH administrator AND user) to
be logged in to two accounts (both administrator and user) so that only the
user can log on to the internet. It seems like a waste of time in an o.s.
that has multiple way of doing a single thing. See, if I'm supposed to only
use the administrator account to do "administrative things," but not just to
boogie around the internet, does it make sense to have the administrator
logged on whenever the user wants to check the weather?

If THAT makes sense, then why (when one is the sole user of the computer)
can't the administrator be the only one logged on and using the programs?
Safety, you say, but don't the firewall and spyware and virus programs
provide the same protection to the administrator account as the user account
. . . or have I missed something else?

If you tell me I have to log in as administrator, then connect to the
internet, then log in as the user and use the internet . . . and when I'm
finished for the day, I must log the user off, go back and log the
administrator off, then shut down the computer, then so be it.

Thanks again; I appreciate your help, even if I don't seem to understand.

dragonmom

Pardon me for jumping in here, but there may be a way to cut through all
of this.

It may be expecting too much of eMachines, but many laptops with
built-in wifi (and I assume that's what you have) have a hardware
mechanism to turn off the wifi radio. This may either be a physical
switch or a combination of Fn+Fx keys. Turning off the wifi radio (or
the equivalent, disconnecting the Ethernet cable from the back of the
computer) is the ultimate safeguard. You'll have to find the User Guide
for your particular model.

As to the issue of running as administrator vs. as user, it all comes
back to one's level of caution/paranoia. Yes, you're protected by the
NAT feature of your router; yes, you're protected by the firewall
implemented in your router; yes, you're protected by the software
firewall in your XP computer; yes, you're protected by your anti-virus
(and perhaps also anti-malware) software; BUT ... if something bad gets
past all of that, if you happen to be running as administrator, the Bad
Thing has complete access to your entire computer, whereas if you're
running as a restricted user, the Bad Thing has one more layer (the OS)
to penetrate before it can do whatever it is that you won't like.

 

[Chuck]

Thank you, Chuck. I think I finally understand. I apologize for being so
dumb. I made the appropriate mental connection when you mentioned /root,
since I AM running my Linspire machine as /root because I didn't know about
user before and now have too many files and programs on the computer to
change over to user access. Yeah, BIG problem.

As a result of my lack of knowledge, I called a local group who replaced the
battery and updated the BIOS on my first laptop (don't ask) and asked them to
extricate me from this ridiculous situation I've gotten myself in.
Expensive, right, but worth it if all the problems I've been experiencing get
fixed.

One final thank you. I truly appreciate your patience with a silly old woman.

dragonmom

You're quite welcome. Thanks for the feedback, it was a learning experience for
me too.