RE: [PCTECH] Trying again - Windows XPPro "Security/UserSetup" Question(s)

["Chuck Lewis" <clewis@xxxxxxxxxx>]

Thanks Keith,

That's what I was worried about (folks not being able to do "normal" stuff) and 
sounds like we have around the same #'s. My fear us them being Administrator 
will allow malware or viruses not caught by other means, to possibly slip 
through. Not something that would happen on the W2K PC's because they are all 
Power Users. Oh well, thanks MS... :-)

And definitely, thank you !

Chuck

-----Original Message-----
From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx] On 
Behalf Of keith@xxxxxxxxx
Sent: Monday, October 04, 2004 4:45 PM
To: PC Technical Discussion for iSeries Users
Subject: RE: [PCTECH] Trying again - Windows XPPro "Security/UserSetup" 
Question(s)

Chuck,

We have a very small number of users to support <100, and also have a mix 
of Windows 2000 Professional and Windows XP Professional.  We generally 
set up our users as having "Power Users" rights over their local 
workstation.  We tried to use the more restrictive "User" setting, but too 
many applications that we use would not function at that setting, 
especially CAD software.

BTW, a word of caution, if you are setting up laptop users, consider 
granting them Administrative rights to their machine.  Nothing as 
unpleasant as a salesman or engineer calling from 8 time-zones away to 
yell that he needs admin rights to install some new critical software 
(such as for his new camera) that you didn't pre-install.

YMMV of course...


Keith Blazek
MIS Coordinator



"Chuck Lewis" <clewis@xxxxxxxxxx> wrote on 10/04/2004 05:12:36 PM:

> Thanks Keith,
> 
> That is pretty much what I thought, just wanted to be sure. What 
> threw me was under XP that they seemed to do away with or combine, 
> Power User into administrator and the User is Limited User.
> 
> So what to you set up your regular users as ?
> 
> Thanks,
> 
> Chuck
> 
> -----Original Message-----
> From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@midrange.
> com] On Behalf Of keith@xxxxxxxxx
> Sent: Monday, October 04, 2004 3:51 PM
> To: PC Technical Discussion for iSeries Users
> Subject: Re: [PCTECH] Trying again - Windows XP Pro 
> "Security/UserSetup" Question(s)
> 
> Chuck,
> 
> The naming conventions used by Microsoft can be confusing, but to my 
> knowledge, a Win2K Administrator is fully equivalent to a WinXP 
> Administrator.
> Also, the "boot" Administrator is simply the account named 
"Administrator" 
> found on other windows NT based machines (NT4, Win2K, WinXP, Win2003).
> 
> By default, Windows XP creates new accounts as either User or 
> Administrator rights.  Microsoft dummied down the interface in an effort 

> to simplify these tasks for home users. Just to clarify, XP now requires 

> you to explicitly define an Administrator account during installation, 
but 
> ANY user account with administrative rights has administrative 
> capabilities.  To my knowledge the relationships are as follows:
> 
> Window 2000   => Windows XP
> ---------------------------------
> Administrator => Administrator
> Power User    => Standard User
> User          => Restricted User
> 
> 
> On Windows XP Pro, you can see some of this in the control panel using 
the 
> classic mode on the "User Accounts" application.
> 
> 
> 
> Hope that Helps,
> 
> 
> Keith Blazek
> MIS Coordinator
> 
> 
> 
> "Chuck Lewis" <clewis@xxxxxxxxxx> wrote on 10/04/2004 03:36:14 PM:
> 
> > Hi Folks,
> > 
> > Originally posted this a week ago and didnât get any feedback so Iâ
> > ll try again â
> > 
> > JUST starting to get PC's in with Windows XP Pro. We have a mix, but
> > the majority of PC's currently are W2K Pro. In that you have the 
> > Administrator account and then you can obviously create a User 
> > account and have as
> > choices:
> > 
> > Standard
> > 
> > Restricted
> > 
> > Other
> > 
> > And you can pretty well "tailor" things within those.
> > 
> > In XP Pro you set the "boot" Administrator/password and the have to 
> > setup up a PC "Administrator" and then can create a "User" account. 
> > And when you do this you get:
> > 
> > Computer administrator
> > 
> > Limited
> > 
> > So what is the correlation between W2K Pro and XP Pro ?
> > 
> > I'm "thinking" the Computer administrator on XP Pro is not near as 
> > powerful as the Administrator on W2K Pro - is that correct ? They 
> > even say that if stuff won't run, etc. as Limited then choose 
> > Computer administrator. 
> > 
> > So maybe I am thinking of XP Pro in the wrong light - Administrator 
> > on W2K Pro is the "boot" Administrator on XP Pro and then the 
> > "regular user" on W2K Pro is the Computer Administrator on XP Pro ?
> > 
> > Thanks for any help !
> > 
> > Chuck
> > 
> > 
> > 
> > --