Xp home edition(logon password security)

[Guest]

My computer have two administrator accounts, suppose A and B.
My account is A.A is a administrator and password protected and B is also
aministrator and password protected.My problem is this, that B My son usually
remove my logon password (controlpanel>>useraccount>>select A account>>remove
password)then he use to logon my account and see all my personal files(which
is not sutible for him).I can`t make his account limited because in xp home
edition some games and program did not run.
What is the solution for this?Can anybody helps me?

 

[Malke]

My computer have two administrator accounts, suppose A and B.
My account is A.A is a administrator and password protected and B is also
aministrator and password protected.My problem is this, that B My son usually
remove my logon password (controlpanel>>useraccount>>select A account>>remove
password)then he use to logon my account and see all my personal files(which
is not sutible for him).I can`t make his account limited because in xp home
edition some games and program did not run.
What is the solution for this?Can anybody helps me?

Here is general information about computer security which addresses your
issue:

Any computer running any operating system can be accessed by someone
with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
things you can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.

2. From the BIOS, change the boot order to hard drive first.

3. Set strong passwords on all accounts, including the built-in
Administrator account.

4. If you leave your own account logged in, use the Windows Key + L to
lock the computer (and/or set the screensaver/power saving) when you
step away from the computer and require a password to resume.

5. Make other users Limited accounts in XP Home, regular user accounts
in XP Pro.

6. Set user permissions/restrictions:

a. If you have XP Pro, you can set user permissions/restrictions with
Group Policy (Start>Run>gpedit.msc [enter]) but be careful. Using the
Policy Editor can be tricksy. Questions about Group Policy should be
posted in its newsgroup: microsoft.public.windows.group_policy.

b. If you have XP Home, you can use MVP Doug Knox's Security Console or
the MS Steady State.

http://www.dougknox.com
Steady State -
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Please understand that these are technical responses to what is
basically a non-technical problem and there are ways around all of these
precautions. This is a family/interpersonal issue that can't be solved
by technical means.


Malke

 

[Demmpa]

Prabhat ranjan skrev:

My computer have two administrator accounts, suppose A and B.
My account is A.A is a administrator and password protected and B is also
aministrator and password protected.My problem is this, that B My son usually
remove my logon password (controlpanel>>useraccount>>select A account>>remove
password)then he use to logon my account and see all my personal files(which
is not sutible for him).I can`t make his account limited because in xp home
edition some games and program did not run.
What is the solution for this?Can anybody helps me?

he don't need to login as you, he only need to give himself read/write
rights to your folders. Yes he can do it because he is an administrator.

One solution is that you use an USB-drive to save your staff on
and put the USB-drive in a safe-box when you don't use it.

One solution is bye another computer to your son.

 

[Bruce Chambers]

My computer have two administrator accounts, suppose A and B.
My account is A.A is a administrator and password protected and B is also
aministrator and password protected.My problem is this, that B My son usually
remove my logon password (controlpanel>>useraccount>>select A account>>remove
password)then he use to logon my account and see all my personal files(which
is not sutible for him).I can`t make his account limited because in xp home
edition some games and program did not run.
What is the solution for this?Can anybody helps me?

The only solution is to take away your son's administrative privileges.
Period. If some games don't work, that's just too bad. What are you
priorities? First and foremost, you need to decide who is the parent,
and who is the child. The parent is the one in charge.

As for the non-working games:

You may experience some problems if the software was designed for
Win9x/Me, or if it was intended for WinNT/2K/XP, but was improperly
designed. Quite simply, the application doesn't "know" how to handle
individual user profiles with differing security permissions levels, or
the application is designed to make to make changes to "off-limits"
sections of the Windows registry or protected Windows system folders.

For example, saved data are often stored in a sub-folder under the
application's folder within C:\Program Files - a place where no
inexperienced or limited user should ever have write permissions.

It may even be that the software requires "write" access to parts
of the registry or protected systems folders/files that are not normally
accessible to regular users. (This *won't* occur if the application is
properly written.) If this does prove to be the case, however, you're
often left with three options: Either grant the necessary users
appropriate higher access privileges (either as Power Users or local
administrators), explicitly grant normal users elevated privileges to
the affected folders and/or part(s) or the registry, or replace the
application with one that was properly designed specifically for
WinNT/2K/XP. You've already stated that granting your son elevated
privileges is a very bad idea.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q307091

Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving settings
on limited accounts, you may need to change permissions on the registry
keys. Run regedit.exe and go to HKLM\Software\vendor\app, where
"vendor\app" is the key that the software vendor used for your specific
program. Change the permissions on this key to allow Users full control."



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Dana]

My computer have two administrator accounts, suppose A and B.
My account is A.A is a administrator and password protected and B is also
aministrator and password protected.My problem is this, that B My son
usually
remove my logon password (controlpanel>>useraccount>>select A
account>>remove
password)then he use to logon my account and see all my personal
files(which
is not sutible for him).I can`t make his account limited because in xp
home
edition some games and program did not run.
What is the solution for this?Can anybody helps me?

Take off your belt, and give your son a good beating.
Or if you are against corporal type of punishment, make his an account a
limited account, and if games and programs cannot be ran, well too bad.
Sounds like this kid of yours needs some discipline anyway.