administrative user settings for winXP

CDsDontBurn · Aug 6, 2006, 08:05 PM

i want to know how i can use the administrative user settings in winXP (like the ones available when winXP is part of a domain network).

i'm asking because i currently have two accounts running on my computer, and i want to know how to use those administrative settings on the second account. i want to make it as limited as possible basically.

PangingJr · Aug 6, 2006, 08:34 PM

not sure what you mean, matbe this helps...

Quote:

User Accounts on a computer that is a member of a workgroup or is a stand-alone computer

There are two types of user accounts available on your computer: computer administrator and limited. The guest account is available for users with no assigned account on the computer.

Computer administrator account:

The computer administrator account is intended for someone who can make systemwide changes to the computer, install programs, and access all files on the computer. Only a user with computer administrator account has full access to other user accounts on the computer. This user:

Can create and delete user accounts on the computer.
Can create account passwords for other user accounts on the computer.
Can change other people's account names, pictures, passwords, and account types.
Cannot change his or her own account type to a limited account type unless there is at least one other user with a computer administrator account type on the computer. This ensures that there is always at least one user with a computer administrator account on the computer.

Limited account:

The limited account is intended for someone who should be prohibited from changing most computer settings and deleting important files. A user with a limited account:

Cannot install software or hardware, but can access programs that have already been installed on the computer.
Can change his or her account picture and can also create, change, or delete his or her password.
Cannot change his or her account name or account type. A user with a computer administrator account must make these kinds of changes.

Note:
Some programs might not work properly for users with limited accounts. If so, change the user's account type to computer administrator, either temporarily or permanently.

Guest account:

The guest account is intended for use by someone who has no user account on the computer. There is no password for the guest account, so the user can log on quickly to check e-mail or browse the Internet. A user logged on to the guest account:

Cannot install software or hardware, but can access programs that have already been installed on the computer.
Cannot change the guest account type.
Can change the guest account picture.

Note:
An account with the name "Administrator" is created during installation. This Administrator account, with computer administrator privileges, uses the administrator password you entered during setup.

after log on to a system as Administrator go to User Accounts in Control Panel,
there you can either create a new Limited account or change the existing user's account type

for more local security setting and user right assignments open the Local Security Policy properties
in the Run box enter secpol.msc

CDsDontBurn · Aug 6, 2006, 08:55 PM

secpol.msc didn't have what i was looking for, and that quote you got i already knew about that.

and as to what i mean. have you ever worked on computers that are part of a domain? have you ever gone to any of the workstations and under the user accounts, it gives you a whole barrage of options to set for the user(s) of the computer? if you know what it is that i'm talking about now, that is what i'm looking for.

PangingJr · Aug 6, 2006, 09:08 PM

that are all you can do with a workgroup/stand-alone computers AFAIK.

CDsDontBurn · Aug 6, 2006, 09:23 PM

man....that's a bummer

.

Vampyromaniac · Aug 6, 2006, 10:55 PM

Still not exactly sure of what you're trying to find, maybe if you give some examples of the options you want to set, it would help.

But 2 things you may want to look at for starters are: lusrmgr.msc and gpedit.msc. Another basic interface can be found at: control userpasswords2

Of course, be careful with these kind of settings . . . don't lock yourself out!

CDsDontBurn · Aug 6, 2006, 11:04 PM

options like these (kinda small i know, but it's what i could find)

then if you click on the "properties" button, you get a whole barrage of different options and settings you can use on each account. i would like to know if there's a way i can get that instead of the regular desktop user account settings.

Vampyromaniac · Aug 6, 2006, 11:46 PM

Quote:

Originally Posted by CDsDontBurn

options like these (kinda small i know, but it's what i could find)

then if you click on the "properties" button, you get a whole barrage of different options and settings you can use on each account. i would like to know if there's a way i can get that instead of the regular desktop user account settings.

Well, that's where control userpasswords2 takes you, but I don't know if you'll find what you're looking for there.

I meant an example of some of the options to be found amongst the "barrage" you're referring to.

Did you try running the things I mentioned?