Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Limiting Administrator Account?


  • Please log in to reply
4 replies to this topic

#1 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:09 AM

Posted 04 May 2008 - 12:58 PM

Hello.

My computer is not using a network.

I have two administrator accounts on this computer. Is it possible to limit one account so that it can't change the password of the other account without removing any other of its administrative privileges? But then I guess it could create another administrator account without the limitations and do that anyways.

Any ideas?

With Regards,
The Panda

BC AdBot (Login to Remove)

 


m

#2 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,250 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:06:09 AM

Posted 04 May 2008 - 01:13 PM

As far as I know, this is not possible. Sorry.

#3 tswsl1989

tswsl1989

  • Members
  • 260 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cymru/Wales
  • Local time:03:09 PM

Posted 04 May 2008 - 01:54 PM

No, can't be done. The way user rights assignments go, yuo can only do this in a domain scenario.
Tom

Tswsl1989
Duct tape is like the force. It has a light side, a dark side, and it holds the universe together

#4 Juha

Juha

  • Members
  • 512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:03:09 PM

Posted 04 May 2008 - 02:05 PM

Not an answer to the problem but just wondering... it's kind of weird that one of the local administrators can lock out the other administrator! I don't why this is permissible.

Or is it just me?!

Edited by Juha, 04 May 2008 - 02:06 PM.


#5 tswsl1989

tswsl1989

  • Members
  • 260 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cymru/Wales
  • Local time:03:09 PM

Posted 05 May 2008 - 07:39 AM

In a local environment, all administrators are equal, and have full control over other accounts.
To delete and reset passwords on administrator accounts, you need administrator rights (and you can't delete your own account). The only way you can prevent an administrator editing another admin account is by using delegated control, but that requires a domain infrastructure.
Tom

Tswsl1989
Duct tape is like the force. It has a light side, a dark side, and it holds the universe together




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users