I have been working in Vista for the first time for a couple of weeks now. Initially I set up myself as a Admin and have been using only that account. However, I've been reading up on security issues in Vista and realize that I should have set myself up as a Standard user and only invoke the Admin account when I wanted to. My question is this: What changes will occur if I first set up an Admin account and then change the current Admin account (the intiial one) to a Standard? Will all my documents be preserved? What other issues should I take into consideration? Thanks.
Steve Turner wrote: > I have been working in Vista for the first time for a couple of weeks now. > Initially I set up myself as a Admin and have been using only that > account. However, I've been reading up on security issues in Vista and > realize that I should have set myself up as a Standard user and only > invoke the Admin account when I wanted to. > > My question is this: What changes will occur if I first set up an Admin > account and then change the current Admin account (the intiial one) to a > Standard? Will all my documents be preserved? What other issues should I > take into consideration? 1. Create an extra Administrator account. This is important since the built-in Administrator is disabled by default in Vista. You need never log into this account except once if you're fortunate. 2. Log into the new extra Administrator account. Go to Control Panel>User Accounts. Change your personal account to Standard. Your data will not be affected. 3. Log back into your own account. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ
"Steve Turner" wrote in message news:465FFC84-377E-47CE-98ED-ED155425755A@microsoft.com... >I have been working in Vista for the first time for a couple of weeks now. >Initially I set up myself as a Admin and have been using only that account. >However, I've been reading up on security issues in Vista and realize that >I should have set myself up as a Standard user and only invoke the Admin >account when I wanted to. While this is true, the developers of Vista realized that many people with XP were not using this "best practice" scenario. They have hidden the actual admin (most privilege) account and replaced it with an admin account with a split token so that even the admin account user runs with standard user rights. The advantage of running in the admin account is that the "admin approval mode" reduces the amount of information that the user is required to enter in the UAC prompts. The programs that run without causing a prompt are either pre- assigned the elevated rights they need, or are run in standard user environment. The programs that cause a prompt require only a click. > My question is this: What changes will occur if I first set up an Admin > account and then change the current Admin account (the intiial one) to a > Standard? You'll be okay as long as you don't remove the last admin account. > Will all my documents be preserved? What other issues should I take into > consideration? None that I am aware of, but wait until others have a chance to respond. I haven't actually tried this whereas others may have.
Thanks, guys. Needless to say I'm going to back everything up. "FromTheRafters" wrote in message news:e45PPXTAJHA.1184@TK2MSFTNGP04.phx.gbl... > > "Steve Turner" wrote in message > news:465FFC84-377E-47CE-98ED-ED155425755A@microsoft.com... >>I have been working in Vista for the first time for a couple of weeks now. >>Initially I set up myself as a Admin and have been using only that >>account. However, I've been reading up on security issues in Vista and >>realize that I should have set myself up as a Standard user and only >>invoke the Admin account when I wanted to. > > While this is true, the developers of Vista realized that many > people with XP were not using this "best practice" scenario. > They have hidden the actual admin (most privilege) account > and replaced it with an admin account with a split token so > that even the admin account user runs with standard user > rights. The advantage of running in the admin account is that > the "admin approval mode" reduces the amount of information > that the user is required to enter in the UAC prompts. The > programs that run without causing a prompt are either pre- > assigned the elevated rights they need, or are run in standard > user environment. The programs that cause a prompt require > only a click. > >> My question is this: What changes will occur if I first set up an Admin >> account and then change the current Admin account (the intiial one) to a >> Standard? > > You'll be okay as long as you don't remove the last admin account. > >> Will all my documents be preserved? What other issues should I take into >> consideration? > > None that I am aware of, but wait until others have a chance to > respond. I haven't actually tried this whereas others may have. >
"Malke" <malke@invalid.invalid> wrote in message news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl... > > 2. Log into the new extra Administrator account. Go to Control Panel>User > Accounts. Change your personal account to Standard. Your data will not be > affected. > Hmmm. I just changed the type of my account from Admin to Standard without having to create another Admin account first....
Gordon wrote: > "Malke" <malke@invalid.invalid> wrote in message > news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl... >> >> 2. Log into the new extra Administrator account. Go to Control Panel>User >> Accounts. Change your personal account to Standard. Your data will not be >> affected. >> > > Hmmm. I just changed the type of my account from Admin to Standard without > having to create another Admin account first.... The reason for having an extra Administrator account is not because of the account demotion. It is because the built-in Administrator account is disabled by default in Vista and you may be very glad one day to have an extra account with administrative privileges in an emergency. Even if you have enabled the built-in Administrator account (not recommended), I would always make an extra one. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ
"Gordon" <gordonbparker@yahoo.com.invalid> wrote in message news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl... > "Malke" <malke@invalid.invalid> wrote in message > news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl... >> >> 2. Log into the new extra Administrator account. Go to Control Panel>User >> Accounts. Change your personal account to Standard. Your data will not be >> affected. >> > > Hmmm. I just changed the type of my account from Admin to Standard without > having to create another Admin account first.... There is (was) a reason that you should not have done so. That reason being so that you wouldn't be left up proverbial creek without proverbial paddle. Good luck with that boat, and follow directions next time.
On Aug 20, 2:49 pm, Malke <ma...@invalid.invalid> wrote: > Even if you have enabled the built-in Administrator account (not > recommended), [snip] Why is it not recommended?
Paul Montgomery wrote: > On Aug 20, 2:49 pm, Malke <ma...@invalid.invalid> wrote: > > > >> Even if you have enabled the built-in Administrator account (not >> recommended), > > [snip] > > Why is it not recommended? For security. OS X and some Linux distros do the same thing. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ
"FromTheRafters" wrote in message news:O6eg4pwAJHA.2456@TK2MSFTNGP04.phx.gbl... > > "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message > news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl... >> "Malke" <malke@invalid.invalid> wrote in message >> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl... >>> >>> 2. Log into the new extra Administrator account. Go to Control >>> Panel>User >>> Accounts. Change your personal account to Standard. Your data will not >>> be >>> affected. >>> >> >> Hmmm. I just changed the type of my account from Admin to Standard >> without having to create another Admin account first.... > > There is (was) a reason that you should not have done so. > That reason being so that you wouldn't be left up proverbial > creek without proverbial paddle. > > Good luck with that boat, and follow directions next time. > I'd already created an Admin account for other reasons before I did this....
"Gordon" <gordonbparker@yahoo.com.invalid> wrote in message news:ez%23PTu1AJHA.4992@TK2MSFTNGP06.phx.gbl... > "FromTheRafters" wrote in message > news:O6eg4pwAJHA.2456@TK2MSFTNGP04.phx.gbl... >> >> "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message >> news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl... >>> "Malke" <malke@invalid.invalid> wrote in message >>> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl... >>>> >>>> 2. Log into the new extra Administrator account. Go to Control >>>> Panel>User >>>> Accounts. Change your personal account to Standard. Your data will not >>>> be >>>> affected. >>>> >>> >>> Hmmm. I just changed the type of my account from Admin to Standard >>> without having to create another Admin account first.... >> >> There is (was) a reason that you should not have done so. >> That reason being so that you wouldn't be left up proverbial >> creek without proverbial paddle. >> >> Good luck with that boat, and follow directions next time. >> > > > I'd already created an Admin account for other reasons before I did > this.... Sorry, I thought you were the OP losing access to the only admin account (aside from the hidden one) available. The OS shouldn't allow the last one to be removed, but stranger things have happened. Once I realized my error, I tried to cancel that post, but some servers don't support cancellations. Frankly, I was surprised that someone would start with step two. :o/
