Need help with user accounts

Guest · Post by **Guest** » Sat Mar 12, 2005 6:40 pm

Is it possible to create an Administrator account in winxp pro that will be above all the other admin accounts? Because I want to have an account for myself and another one for my mom, but her account needs to be admin too, because her applications require that. I don't want her to go into my files, which are in the admin account, and cannot be accessed by power users or restricted users, but can be accessed by other admins.

So how can I protect my directories so that nobody else can view them?

Post by **AmIdYfReAk** » Sat Mar 12, 2005 7:00 pm

you cant go higher than administrator....

try changing the Security/ownership to the administrator account rather than the Administrators group...

Post by **Tormentius** » Sat Mar 12, 2005 8:08 pm

Chances are her apps will work if she is a power user. The other thing you can do is set NTFS permissions. Click herefor a quick how-to.

btw, System should always have full control.

Guest · Post by **Guest** » Mon Mar 14, 2005 4:45 am

I've tried with a power user account, still doesn't work, only works under admin account :/

I'll look into that NTFS security thing though :icon14:

Post by **glossy** » Mon Mar 14, 2005 11:09 am

if you don't want her snooping around in your porn, turn off "Use Simple File Sharing (reccommended)" in Tools > Folder Options... > View. Then, right click on any folder or file and go to "Security", set up so her username is set to "Deny" everything (or viewing or whatever) and bob's your uncle and your porn is safe.

Shit to remember: Deny always overrides Allow; and the more specific setting overrides the broader one (in most cases, mind)

Post by **FragaGeddon** » Mon Mar 14, 2005 1:36 pm

glossy wrote:if you don't want her snooping around in your porn, turn off "Use Simple File Sharing (reccommended)" in Tools > Folder Options... > View. Then, right click on any folder or file and go to "Security", set up so her username is set to "Deny" everything (or viewing or whatever) and bob's your uncle and your porn is safe.

Shit to remember: Deny always overrides Allow; and the more specific setting overrides the broader one (in most cases, mind)

Any admin can easily overwrite that, or take over ownership.

Post by **Tormentius** » Mon Mar 14, 2005 7:19 pm

glossy wrote:
Shit to remember: Deny always overrides Allow;

Which is why a person should avoid using Deny if at all possible. Using Allow ACLs and only including the user or groups which should be able to access a given folder is easier. Also, by using Allow ACLs rather than Deny a person can avoid many headaches in troubleshooting later on when that Deny inevitably gets forgotten.

Post by **Tormentius** » Mon Mar 14, 2005 7:21 pm

FragaGeddon wrote:Any admin can easily overwrite that, or take over ownership.

True, but in his particular case it's unlikely his mom knows how to take ownership of a folder or file.