Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

''Trap'' == don't run your computer as the Administrative.

Mar 4, 2004 7:16AM PST

1. Running Windows as the Administrator makes the entire system totally vulnerable and the simple act of accessing the Web can be extremely damaging, [Q824146]. When logged on as a member of the Users group, routine tasks can be performed including running programs and visiting Web sites without exposing a system to unnecessary risk. When needing to perform upgrads or configuring system parameters, log off and log back on as the Administrator.

2. During Setup, the Administrator account is created automatically as a member of the Administrators group on the workstation or member server and when the screen "Who will use this computer?" was displayed and names entered, they retain full administrative privileges without password by default. It can never be deleted, disabled, or removed from the Administrators local group ensuring that you never lock yourself out of the computer by deleting or disabling all the administrative accounts. It is recommended that the automatically created Guest account be turned off, but never disabled [Q300489].

3. Local User accounts are not created automatically and must be created by a member of the Administrators group after the installation is complete. Only a domain-level Administrators and Account Operators can create domain accounts. User accounts enable users to log on to the network or local computer and to access local and network resources. Domain or local user can manage permissions on resources on the local computer -- as long as the user has change permission rights on the resource.

Discussion is locked

- Collapse -
Dumb-stupid forum software. This belongs as a thread on . .
Mar 4, 2004 7:20AM PST
- Collapse -
It's still worth noting. New to NT/2000/XP/2003 may want "one account."
Mar 4, 2004 7:51AM PST

The dangers lurk for those that manage to do that!

Bob

- Collapse -
Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 1:21AM PST

Thank you for your advice and help.
Because I am just a high beginner, I was not able to understand all the information you gave me and referred me to...however, I want to clarify your main point. I think you are saying that if you have just one user account, and that user account is also the administrator since it is the only account on the computer (and this is exactly what the situation is with my computer ? I am the only user and I am the administrator), then the computer is vulnerable to malicious attack on that lone account. To protect the computer, a second user account should be set up (and used for in tenet surfing) ? and the original administrator account should be used only when needed to do things such as performing upgrades and configuring system parameters. Is my understanding correct?

- Collapse -
Simpler than that.
Mar 7, 2004 1:27AM PST

Forget about virus/trojan/spy/pest/parasites. Just having a glitch in your PROFILE can lock you out and without another Administrator account, you can't log in to fix what could have been a minor issue.

And more about pests, Parasite removal programs are noted at:

http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=1313&start=0 notes the five scanning tools and removal tools that are fairly safe. If one does encounter an issue, its always been damage done by the MALWARE. The most common issue being Layered Service Provider replacement which you can use LSPFIX (Hint: use http://www.google.com to find).

The thread has follow on discussions about new links if you don't want to use Google to find an item.

Bob

PS. All the tools are free.

- Collapse -
Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 1:32AM PST

I think it is saying do not run on or rename the hidden adminstrator account. If you only inputed one user during setup there is still another called "adminstrator". As long as you are using your user account with adminstator privledges you should be good.

~Tom

- Collapse -
Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 4:54AM PST

Thank you, Tom.
Again, I think I understand the main point about protecting the computer...however, I?d like to run through this one more time (?better safe than sorry?).

When I first set up my new computer (which came with XP Home installed), I was prompted as part of set-up to type in my name (let?s call me ?John Doe?). So, I did so. As a result, when I go to Task Bar & Start Menu ? Start Menu ?Customize ? Advanced, I see (under Documents & Settings?: an ALL USERS folder and a JOHN DOE folder; this suggests to me that JOHN DOE is the only user/user account on this computer ? is this correct?

When I go to Control Panel ? User Accounts, I see two items listed: ?John Doe, Computer Administrator? and ?Guest, Guest account is off?. This, again, suggests to me that the John Doe user/user account is the only one on my computer. That being the case, should I (to repeat my original question) user this ?John Doe, Computer Administrator? account only when needed to do things such as performing upgrades and configuring system parameters...and then set up a second user account to use in my everyday internet surfing?

You mention a ?hidden administrator account?...and the fact that my John Doe account probably simply has ?administrator privileges?. But, as I said, when I go to Control Panel ? User Accounts, I see listed: ?John Doe, Computer Administrator?. It seems to me that my ?John Doe, Computer Administrator? account is the only one...and is the one I need to be protecting; is this correct? If this correct then should I set up a second user account to use for my everyday internet surfing?

Thanks again. I just want to make sure I am safe and will not be sorry later for not having protected my computer. (P.S.: Again, I am a not-advanced computer user, so I hope any respondents can give me guidance using simple explanations. Thanks very much.)

- Collapse -
Re:Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 7:34AM PST

1. Since you typed "John Doe" when the screen "Who will use this computer?" was displayed, you are now The Account Operator (an account separate from the Administrator and seen in Documents & Settings) and both accounts without password originally. Note the dual, ?John Doe, Computer Administrator?.

2. When double-clicking User Accounts in Control Panel, the built-in Administrator account is available in normal mode only if there are no other accounts. It appears only in Safe mode if more than one account has been created, [Q281244]. In XPHome, Msgina.dll is responsible for building the list of accounts to show in the Welcome logon screen so it is important not to use "administrator" as the computer name. It either will add or remove the account from the list based on name used.

3. You have the option of using the friendly logon interface as opposed to the classic Windows logon. If a second user that has administrative privileges has been added, the built-in Administrator account does not appear during friendly logon. Press the CTRL+ALT+DELETE key combination twice during the friendly logon interface.

4. Create and Use a Password Reset Disk for a Computer That Is Not a Domain Member (Q30547Cool.

- Collapse -
Re:Re:Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 7:59AM PST

This is too much info for me. Keeping it simple...is

?John Doe, Computer Administrator?

Okay to use in internet or not okay?
If no password needed to access system?

- Collapse -
Re:Re:Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 8:02AM PST

Keeping it more simple....is

?John Doe, Computer Administrator?

okay to use for internet access if no password is required and there's only one user?

- Collapse -
Re:Re:Re:Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 8:59AM PST

John Doe is a "user" with admistrative priveledges. The "computer administrator" is a hidden account that can't be accessed if a "user" is present....as Bill said. Except in safe mode or ctrl-alt-del x2 at logon screen.
This setup is safe for internet.

- Collapse -
Re:Re:Re:Re:Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 9:28AM PST

Got it, Thanks!

- Collapse -
Re:Re:Re:Re:Re:Re:Re:''Trap'' == don't run your computer as the Administrator
Mar 7, 2004 11:07AM PST

It Is confusing, and a lot of users must have fallen into this "trap". Perhaps 'John Doe', as a user with admin privileges, should not have been described as an 'Administrator', but may be better described as 'Admin Assistant' ? "John Doe-Administrator" seems to indicate that the original Administrator account has been renamed 'John Doe'. BTW, can the original and hidden Administrator account named as "Administrator" be renamed ?

- Collapse -
Accounts.
Mar 7, 2004 9:51PM PST
BTW, can the original and hidden Administrator account named as "Administrator" be renamed ?

1. Administrators use the User Accounts in Control Panel -- the Local Users and Groups snap-in to the Microsoft Management Console (if the user account is local to a particular computer) or the Active Directory Users and Computers snap-in (if the account is to participate in a domain) [Q279783)]. For more information, see "Local Users and Groups" in the Windows Help and Support Center. If there is only one user on a computer with a computer administrator account, the account type cannot be changed because there must be at least one person with a computer administrator account at all times. Also, [(Q297221)].

2. "Configuring" (Q305553) and "Change a Computer Name or Join" (Q295017).
- Collapse -
in Home Edition you should go to safe mode ...
Mar 8, 2004 2:39AM PST

to get the administrator account.

When the computer start, press F8 .. you will get the boot menu, choose 'safe mode'