WinXP--Can't limit my own user account--Explorer.exe runtime error

[PDSF]

I want to make my own user account limited (no administrative privileges) as
I understand it is safer. I created a new user, gave it administrative
rights, booted into it, and made my original user limited. But then I can't
boot into the original user account. Windows fails to load and gives me an
Explorer.exe C++ runtime error. If I go back into the new admin account and
give admin rights back to the original user, it loads normally. What am I
missing? I have (temporarily) uninstalled my antivirus software but a
firewall (Online Armor) is running. Any insight into this would be
gratefully appreciated.

 

[PD43]

I want to make my own user account limited (no administrative privileges) as
I understand it is safer.

Safer how?

 

[PDSF]

Safer how?

Safer in that malware can't exectute anything that requires admin privileges.

 

[PD43]

Safer in that malware can't exectute anything that requires admin privileges.

And you yourself can't play with the OS, you can't install new
programs, etc... which, at this point, looks like a good idea.

 

[PDSF]

And you yourself can't play with the OS, you can't install new
programs, etc... which, at this point, looks like a good idea.

I'm not sure what your point is. I don't mean to sound ungrateful, but it
would be most helpful if you could limit your replies to actual suggestions
for a fix.

 

[M.I.5¾]

And you yourself can't play with the OS, you can't install new
programs, etc... which, at this point, looks like a good idea.

Yes he can, but he would need to login to the admin account. This is the
way an operating system like XP should be used.

 

[nass]

I want to make my own user account limited (no administrative privileges) as
I understand it is safer. I created a new user, gave it administrative
rights, booted into it, and made my original user limited. But then I can't
boot into the original user account. Windows fails to load and gives me an
Explorer.exe C++ runtime error. If I go back into the new admin account and
give admin rights back to the original user, it loads normally. What am I
missing? I have (temporarily) uninstalled my antivirus software but a
firewall (Online Armor) is running. Any insight into this would be
gratefully appreciated.

Hi,
If the Original Account was or is the Default windows built-in you will have
this issue!.
Try to give limited account privileges to the new Account and see if the
system will behave itself. I understand your point in making the Admin for
the local work and the limited account for the surfing the net. Since the
limited account has certain restrictions, it helps prevent virus' from
accessing certain parts of your disk. But with recent tech in hacks and
vulnerabilities that can be doubtful if you will not practice Common sense
and safe Hex.

Adding a User Account
http://msdn2.microsoft.com/en-us/library/bb521452.aspx
Use access control to restrict who can use your files
http://www.microsoft.com/windowsxp/using/security/learnmore/accesscontrol.mspx
How to create a custom default user profile
http://support.microsoft.com/kb/319974

HTH.
nass

 

[Kayman]

I want to make my own user account limited (no administrative privileges) as
I understand it is safer. I created a new user, gave it administrative
rights, booted into it, and made my original user limited. But then I can't
boot into the original user account. Windows fails to load and gives me an
Explorer.exe C++ runtime error. If I go back into the new admin account and
give admin rights back to the original user, it loads normally. What am I
missing? I have (temporarily) uninstalled my antivirus software but a
firewall (Online Armor) is running. Any insight into this would be
gratefully appreciated.

Aaron Margosis' Non-Admin WebLog
http://blogs.msdn.com/aaron_margosis/pages/TOC.aspx
Scroll down to:
The easiest way to run as non-admin

Running as Limited User - the Easy Way
http://blogs.technet.com/markrussin.../02/running-as-limited-user-the-easy-way.aspx

PFW Criticism.
http://en.wikipedia.org/wiki/Personal_firewall#Criticisms

"Personal Firewalls" are mostly snake-oil.
http://www.samspade.org/d/firewalls.html

Why your firewall sucks.
http://tooleaky.zensoft.com/
"But I quickly realized the truth: The added protection provided by
outbound filtering is entirely illusory."

 

[PD43]

Yes he can, but he would need to login to the admin account.

No shit Sherlock?

This is the way an operating system like XP should be used.

You'd do well to find 1% of the users doing it that way.

 

[PDSF]

Yes he can, but he would need to login to the admin account. This is the
way an operating system like XP should be used.

Thank you!

 

[PDSF]

Hi,
If the Original Account was or is the Default windows built-in you will have
this issue!.

Yes, but why?

Try to give limited account privileges to the new Account and see if the
system will behave itself.

I'm sure that would work, but it won't solve my problem. I have a year's
worth of customized program settings etc. in my user folder and I can't
rebuild them all.

 

[PDSF]

:

Running as Limited User - the Easy Way
http://blogs.technet.com/markrussin.../02/running-as-limited-user-the-easy-way.aspx

I can set Online Armor to run any executable with limited privileges, but I
would still like to figure this out.

"Personal Firewalls" are mostly snake-oil.
http://www.samspade.org/d/firewalls.html

Why your firewall sucks.
http://tooleaky.zensoft.com/

These are seven years old! Anyway, again, I don't see your point. This
isn't a discussion about the best way to protect WinXP or the merits of free
firewalls.

 

[Frank-FL]

I want to make my own user account limited (no administrative privileges) as
I understand it is safer. I created a new user, gave it administrative
rights, booted into it, and made my original user limited. But then I can't
boot into the original user account. Windows fails to load and gives me an
Explorer.exe C++ runtime error. If I go back into the new admin account and
give admin rights back to the original user, it loads normally. What am I
missing? I have (temporarily) uninstalled my antivirus software but a
firewall (Online Armor) is running. Any insight into this would be
gratefully appreciated.

One way is to assign *user-name* and *password* to each account.
Control userpasswords2 -- then select each user must log on or choose
which user will log on automatically.

 

[PDSF]

One way is to assign *user-name* and *password* to each account.
Control userpasswords2 -- then select each user must log on or choose
which user will log on automatically.

Thanks for posting. I'm sorry but I don't understand your advice. Each
account already has its own username and password, and each has to log on.
What are you suggesting I do differently, if anything?

 

[M.I.5¾]

No shit Sherlock?


You'd do well to find 1% of the users doing it that way.

Well I do it that way. Practically every one I know does it that way.
Probably most of the sensible users here do it that way.

The fact that you probably don't doesn't surprise me at all. Practically
all the advice you give here is wrong, bad or flawed.

After all, you are person who advised everone that a worm or virus can't get
onto a PC if you run it without a firewall or virus checker and you don't
access any web sites (and following that thread, I think you still believe
that).

You are the person who advised someone using write-through cacheing to just
unplug his external drive without flushing the cache first.

The list goes on.