I created a limited account for my son, but he can change his account to
administrator privileged account from "User Account" menu in Control Panel.
Why can he change the type from one to another?

In safe mode, only created are "Administrator" and my own.

I created a limited account for my son, but he can change his account to
administrator privileged account from "User Account" menu in Control Panel.
Why can he change the type from one to another?

In safe mode, only created are "Administrator" and my own.

Oosterplein wrote:
> I created a limited account for my son, but he can change his
> account to administrator privileged account from "User Account"
> menu in Control Panel. Why can he change the type from one to
> another?
>
> In safe mode, only created are "Administrator" and my own.

A limited account cannot change its type.
However - if you did not protect the password well and keep the machine from
being bootable from anything but the hard disk drive - many things can be
gotten around with simply reboots/utilities/logons..

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Oosterplein wrote:
> I created a limited account for my son, but he can change his
> account to administrator privileged account from "User Account"
> menu in Control Panel. Why can he change the type from one to
> another?
>
> In safe mode, only created are "Administrator" and my own.

A limited account cannot change its type.
However - if you did not protect the password well and keep the machine from
being bootable from anything but the hard disk drive - many things can be
gotten around with simply reboots/utilities/logons..

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

This message is not archived

This message is not archived

"Leythos" wrote:

> In article <13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB.DeleteThis@microsoft.com>,
> Oosterplein.DeleteThis-AT-discussions.microsoft.com says...
> > I created a limited account for my son, but he can change his account to
> > administrator privileged account from "User Account" menu in Control Panel.
> > Why can he change the type from one to another?
> >
> > In safe mode, only created are "Administrator" and my own.
>
> In safe mode, if there are only two accounts, your personal account and
> Administrator, then you didn't create him an account.
>
> When you create accounts they must have passwords or users can connect
> as any account.
>
> --
>
> spam999free.DeleteThis-AT-rrohio.com
> remove 999 in order to email me
>

I did create the limited user account from Control Panel. At least, I
haven't seen a limited account in safe mode, which I created in this way.
This is confirmed by myself with another PC.

Is anyone able to explain why he, a limited user, has access to
administrator privileges? Is something wrong with setting of ownership of
folders? I did not find it wrong, though. Should I reinstall WinXP from
scratch? I want to know what caused this, because the current setting is
after the HD crash, real new one.

"Leythos" wrote:

> In article <13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB.RemoveThis@microsoft.com>,
> Oosterplein.RemoveThis-AT-discussions.microsoft.com says...
> > I created a limited account for my son, but he can change his account to
> > administrator privileged account from "User Account" menu in Control Panel.
> > Why can he change the type from one to another?
> >
> > In safe mode, only created are "Administrator" and my own.
>
> In safe mode, if there are only two accounts, your personal account and
> Administrator, then you didn't create him an account.
>
> When you create accounts they must have passwords or users can connect
> as any account.
>
> --
>
> spam999free.RemoveThis-AT-rrohio.com
> remove 999 in order to email me
>

I did create the limited user account from Control Panel. At least, I
haven't seen a limited account in safe mode, which I created in this way.
This is confirmed by myself with another PC.

Is anyone able to explain why he, a limited user, has access to
administrator privileges? Is something wrong with setting of ownership of
folders? I did not find it wrong, though. Should I reinstall WinXP from
scratch? I want to know what caused this, because the current setting is
after the HD crash, real new one.

Can I ask? In safe mode, are all the administrator accounts shown? or not all
the administrator accounts are shown?

"Steven L Umbach" wrote:

> It is not possible for a non administrator to add themselves to the
> administrators group. You can use the command net localgroup administrators
> to see what users are members of the local administrators group. Try
> creating a new user and then have him logon to that user in front of you and
> see if he can use that new account to add itself to the administrators
> group. Possibly he gained administrator access without your knowledge on the
> other user account which can bevery easy to do if a user has physical access
> to the computer.
>
> Steve
>
>
> "Oosterplein" <Oosterplein.DeleteThis@discussions.microsoft.com> wrote in message
> news:13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB@microsoft.com...
> >I created a limited account for my son, but he can change his account to
> > administrator privileged account from "User Account" menu in Control
> > Panel.
> > Why can he change the type from one to another?
> >
> > In safe mode, only created are "Administrator" and my own.
>
>
>

Can I ask? In safe mode, are all the administrator accounts shown? or not all
the administrator accounts are shown?

"Steven L Umbach" wrote:

> It is not possible for a non administrator to add themselves to the
> administrators group. You can use the command net localgroup administrators
> to see what users are members of the local administrators group. Try
> creating a new user and then have him logon to that user in front of you and
> see if he can use that new account to add itself to the administrators
> group. Possibly he gained administrator access without your knowledge on the
> other user account which can bevery easy to do if a user has physical access
> to the computer.
>
> Steve
>
>
> "Oosterplein" <Oosterplein DeleteThis @discussions.microsoft.com> wrote in message
> news:13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB@microsoft.com...
> >I created a limited account for my son, but he can change his account to
> > administrator privileged account from "User Account" menu in Control
> > Panel.
> > Why can he change the type from one to another?
> >
> > In safe mode, only created are "Administrator" and my own.
>
>
>

It is not possible for a non administrator to add themselves to the
administrators group. You can use the command net localgroup administrators
to see what users are members of the local administrators group. Try
creating a new user and then have him logon to that user in front of you and
see if he can use that new account to add itself to the administrators
group. Possibly he gained administrator access without your knowledge on the
other user account which can bevery easy to do if a user has physical access
to the computer.

Steve


"Oosterplein" <Oosterplein DeleteThis @discussions.microsoft.com> wrote in message
news:13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB@microsoft.com...
>I created a limited account for my son, but he can change his account to
> administrator privileged account from "User Account" menu in Control
> Panel.
> Why can he change the type from one to another?
>
> In safe mode, only created are "Administrator" and my own.

It is not possible for a non administrator to add themselves to the
administrators group. You can use the command net localgroup administrators
to see what users are members of the local administrators group. Try
creating a new user and then have him logon to that user in front of you and
see if he can use that new account to add itself to the administrators
group. Possibly he gained administrator access without your knowledge on the
other user account which can bevery easy to do if a user has physical access
to the computer.

Steve


"Oosterplein" <Oosterplein DeleteThis @discussions.microsoft.com> wrote in message
news:13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB@microsoft.com...
>I created a limited account for my son, but he can change his account to
> administrator privileged account from "User Account" menu in Control
> Panel.
> Why can he change the type from one to another?
>
> In safe mode, only created are "Administrator" and my own.

I believe they are all shown. I use the command net localgroup
administrators to check membership. If you are using XP Home by default the
built in administrator account that can only be accessed in Safe Mode is
blank that many users take advantage of to add themselves to the
administrators group.

Steve


"Oosterplein" <Oosterplein.TakeThisOut@discussions.microsoft.com> wrote in message
news:0E33227A-6571-447A-9FF5-F5B769A97590@microsoft.com...
> Can I ask? In safe mode, are all the administrator accounts shown? or not
> all
> the administrator accounts are shown?
>
> "Steven L Umbach" wrote:
>
>> It is not possible for a non administrator to add themselves to the
>> administrators group. You can use the command net localgroup
>> administrators
>> to see what users are members of the local administrators group. Try
>> creating a new user and then have him logon to that user in front of you
>> and
>> see if he can use that new account to add itself to the administrators
>> group. Possibly he gained administrator access without your knowledge on
>> the
>> other user account which can bevery easy to do if a user has physical
>> access
>> to the computer.
>>
>> Steve
>>
>>
>> "Oosterplein" <Oosterplein.TakeThisOut@discussions.microsoft.com> wrote in message
>> news:13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB@microsoft.com...
>> >I created a limited account for my son, but he can change his account to
>> > administrator privileged account from "User Account" menu in Control
>> > Panel.
>> > Why can he change the type from one to another?
>> >
>> > In safe mode, only created are "Administrator" and my own.
>>
>>
>>

I believe they are all shown. I use the command net localgroup
administrators to check membership. If you are using XP Home by default the
built in administrator account that can only be accessed in Safe Mode is
blank that many users take advantage of to add themselves to the
administrators group.

Steve


"Oosterplein" <Oosterplein.DeleteThis@discussions.microsoft.com> wrote in message
news:0E33227A-6571-447A-9FF5-F5B769A97590@microsoft.com...
> Can I ask? In safe mode, are all the administrator accounts shown? or not
> all
> the administrator accounts are shown?
>
> "Steven L Umbach" wrote:
>
>> It is not possible for a non administrator to add themselves to the
>> administrators group. You can use the command net localgroup
>> administrators
>> to see what users are members of the local administrators group. Try
>> creating a new user and then have him logon to that user in front of you
>> and
>> see if he can use that new account to add itself to the administrators
>> group. Possibly he gained administrator access without your knowledge on
>> the
>> other user account which can bevery easy to do if a user has physical
>> access
>> to the computer.
>>
>> Steve
>>
>>
>> "Oosterplein" <Oosterplein.DeleteThis@discussions.microsoft.com> wrote in message
>> news:13ECC6D4-6333-4D65-AE5A-E69ACF5FB1DB@microsoft.com...
>> >I created a limited account for my son, but he can change his account to
>> > administrator privileged account from "User Account" menu in Control
>> > Panel.
>> > Why can he change the type from one to another?
>> >
>> > In safe mode, only created are "Administrator" and my own.
>>
>>
>>

This message is not archived