Page 1 of 1
Need help with user accounts
Posted: Sat Mar 12, 2005 6:40 pm
by Guest
Is it possible to create an Administrator account in winxp pro that will be above all the other admin accounts? Because I want to have an account for myself and another one for my mom, but her account needs to be admin too, because her applications require that. I don't want her to go into my files, which are in the admin account, and cannot be accessed by power users or restricted users, but can be accessed by other admins.
So how can I protect my directories so that nobody else can view them?
Posted: Sat Mar 12, 2005 7:00 pm
by AmIdYfReAk
you cant go higher than administrator....
try changing the Security/ownership to the administrator account rather than the Administrators group...
Posted: Sat Mar 12, 2005 8:08 pm
by Tormentius
Chances are her apps will work if she is a power user. The other thing you can do is set NTFS permissions. Click herefor a quick how-to.
btw, System should always have full control.
Posted: Mon Mar 14, 2005 4:45 am
by Guest
I've tried with a power user account, still doesn't work, only works under admin account :/
I'll look into that NTFS security thing though :icon14:
Posted: Mon Mar 14, 2005 11:09 am
by glossy
if you don't want her snooping around in your porn, turn off "Use Simple File Sharing (reccommended)" in Tools > Folder Options... > View. Then, right click on any folder or file and go to "Security", set up so her username is set to "Deny" everything (or viewing or whatever) and bob's your uncle and your porn is safe.
Shit to remember: Deny always overrides Allow; and the more specific setting overrides the broader one (in most cases, mind)
Posted: Mon Mar 14, 2005 1:36 pm
by FragaGeddon
glossy wrote:if you don't want her snooping around in your porn, turn off "Use Simple File Sharing (reccommended)" in Tools > Folder Options... > View. Then, right click on any folder or file and go to "Security", set up so her username is set to "Deny" everything (or viewing or whatever) and bob's your uncle and your porn is safe.
Shit to remember: Deny always overrides Allow; and the more specific setting overrides the broader one (in most cases, mind)
Any admin can easily overwrite that, or take over ownership.
Posted: Mon Mar 14, 2005 7:19 pm
by Tormentius
glossy wrote:
Shit to remember: Deny always overrides Allow;
Which is why a person should avoid using Deny if at all possible. Using Allow ACLs and only including the user or groups which should be able to access a given folder is easier. Also, by using Allow ACLs rather than Deny a person can avoid many headaches in troubleshooting later on when that Deny inevitably gets forgotten.
Posted: Mon Mar 14, 2005 7:21 pm
by Tormentius
FragaGeddon wrote:Any admin can easily overwrite that, or take over ownership.
True, but in his particular case it's unlikely his mom knows how to take ownership of a folder or file.