Guest Steve Turner Posted August 18, 2008 Posted August 18, 2008 I have been working in Vista for the first time for a couple of weeks now. Initially I set up myself as a Admin and have been using only that account. However, I've been reading up on security issues in Vista and realize that I should have set myself up as a Standard user and only invoke the Admin account when I wanted to. My question is this: What changes will occur if I first set up an Admin account and then change the current Admin account (the intiial one) to a Standard? Will all my documents be preserved? What other issues should I take into consideration? Thanks. Quote
Guest Malke Posted August 18, 2008 Posted August 18, 2008 Steve Turner wrote: <span style="color:blue"> > I have been working in Vista for the first time for a couple of weeks now. > Initially I set up myself as a Admin and have been using only that > account. However, I've been reading up on security issues in Vista and > realize that I should have set myself up as a Standard user and only > invoke the Admin account when I wanted to. > > My question is this: What changes will occur if I first set up an Admin > account and then change the current Admin account (the intiial one) to a > Standard? Will all my documents be preserved? What other issues should I > take into consideration?</span> 1. Create an extra Administrator account. This is important since the built-in Administrator is disabled by default in Vista. You need never log into this account except once if you're fortunate. 2. Log into the new extra Administrator account. Go to Control Panel>User Accounts. Change your personal account to Standard. Your data will not be affected. 3. Log back into your own account. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ Quote
Guest FromTheRafters Posted August 18, 2008 Posted August 18, 2008 "Steve Turner" <stevezygote@hotmail.com> wrote in message news:465FFC84-377E-47CE-98ED-ED155425755A@microsoft.com...<span style="color:blue"> >I have been working in Vista for the first time for a couple of weeks now. >Initially I set up myself as a Admin and have been using only that account. >However, I've been reading up on security issues in Vista and realize that >I should have set myself up as a Standard user and only invoke the Admin >account when I wanted to.</span> While this is true, the developers of Vista realized that many people with XP were not using this "best practice" scenario. They have hidden the actual admin (most privilege) account and replaced it with an admin account with a split token so that even the admin account user runs with standard user rights. The advantage of running in the admin account is that the "admin approval mode" reduces the amount of information that the user is required to enter in the UAC prompts. The programs that run without causing a prompt are either pre- assigned the elevated rights they need, or are run in standard user environment. The programs that cause a prompt require only a click. <span style="color:blue"> > My question is this: What changes will occur if I first set up an Admin > account and then change the current Admin account (the intiial one) to a > Standard?</span> You'll be okay as long as you don't remove the last admin account. <span style="color:blue"> > Will all my documents be preserved? What other issues should I take into > consideration?</span> None that I am aware of, but wait until others have a chance to respond. I haven't actually tried this whereas others may have. Quote
Guest Steve Turner Posted August 18, 2008 Posted August 18, 2008 Thanks, guys. Needless to say I'm going to back everything up. "FromTheRafters" <erratic@ne.rr.com> wrote in message news:e45PPXTAJHA.1184@TK2MSFTNGP04.phx.gbl...<span style="color:blue"> > > "Steve Turner" <stevezygote@hotmail.com> wrote in message > news:465FFC84-377E-47CE-98ED-ED155425755A@microsoft.com...<span style="color:green"> >>I have been working in Vista for the first time for a couple of weeks now. >>Initially I set up myself as a Admin and have been using only that >>account. However, I've been reading up on security issues in Vista and >>realize that I should have set myself up as a Standard user and only >>invoke the Admin account when I wanted to.</span> > > While this is true, the developers of Vista realized that many > people with XP were not using this "best practice" scenario. > They have hidden the actual admin (most privilege) account > and replaced it with an admin account with a split token so > that even the admin account user runs with standard user > rights. The advantage of running in the admin account is that > the "admin approval mode" reduces the amount of information > that the user is required to enter in the UAC prompts. The > programs that run without causing a prompt are either pre- > assigned the elevated rights they need, or are run in standard > user environment. The programs that cause a prompt require > only a click. ><span style="color:green"> >> My question is this: What changes will occur if I first set up an Admin >> account and then change the current Admin account (the intiial one) to a >> Standard?</span> > > You'll be okay as long as you don't remove the last admin account. ><span style="color:green"> >> Will all my documents be preserved? What other issues should I take into >> consideration?</span> > > None that I am aware of, but wait until others have a chance to > respond. I haven't actually tried this whereas others may have. > </span> Quote
Guest Gordon Posted August 20, 2008 Posted August 20, 2008 "Malke" <malke@invalid.invalid> wrote in message news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...<span style="color:blue"> > > 2. Log into the new extra Administrator account. Go to Control Panel>User > Accounts. Change your personal account to Standard. Your data will not be > affected. ></span> Hmmm. I just changed the type of my account from Admin to Standard without having to create another Admin account first.... Quote
Guest Malke Posted August 20, 2008 Posted August 20, 2008 Gordon wrote: <span style="color:blue"> > "Malke" <malke@invalid.invalid> wrote in message > news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...<span style="color:green"> >> >> 2. Log into the new extra Administrator account. Go to Control Panel>User >> Accounts. Change your personal account to Standard. Your data will not be >> affected. >></span> > > Hmmm. I just changed the type of my account from Admin to Standard without > having to create another Admin account first....</span> The reason for having an extra Administrator account is not because of the account demotion. It is because the built-in Administrator account is disabled by default in Vista and you may be very glad one day to have an extra account with administrative privileges in an emergency. Even if you have enabled the built-in Administrator account (not recommended), I would always make an extra one. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ Quote
Guest FromTheRafters Posted August 20, 2008 Posted August 20, 2008 "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl...<span style="color:blue"> > "Malke" <malke@invalid.invalid> wrote in message > news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...<span style="color:green"> >> >> 2. Log into the new extra Administrator account. Go to Control Panel>User >> Accounts. Change your personal account to Standard. Your data will not be >> affected. >></span> > > Hmmm. I just changed the type of my account from Admin to Standard without > having to create another Admin account first....</span> There is (was) a reason that you should not have done so. That reason being so that you wouldn't be left up proverbial creek without proverbial paddle. Good luck with that boat, and follow directions next time. Quote
Guest Paul Montgomery Posted August 20, 2008 Posted August 20, 2008 On Aug 20, 2:49Â pm, Malke <ma...@invalid.invalid> wrote: <span style="color:blue"> > Even if you have enabled the built-in Administrator account (not > recommended),</span> [snip] Why is it not recommended? Quote
Guest Malke Posted August 21, 2008 Posted August 21, 2008 Paul Montgomery wrote: <span style="color:blue"> > On Aug 20, 2:49Â pm, Malke <ma...@invalid.invalid> wrote: > > > <span style="color:green"> >> Even if you have enabled the built-in Administrator account (not >> recommended),</span> > > [snip] > > Why is it not recommended?</span> For security. OS X and some Linux distros do the same thing. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ Quote
Guest Gordon Posted August 21, 2008 Posted August 21, 2008 "FromTheRafters" <erratic@ne.rr.com> wrote in message news:O6eg4pwAJHA.2456@TK2MSFTNGP04.phx.gbl...<span style="color:blue"> > > "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message > news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl...<span style="color:green"> >> "Malke" <malke@invalid.invalid> wrote in message >> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...<span style="color:darkred"> >>> >>> 2. Log into the new extra Administrator account. Go to Control >>> Panel>User >>> Accounts. Change your personal account to Standard. Your data will not >>> be >>> affected. >>></span> >> >> Hmmm. I just changed the type of my account from Admin to Standard >> without having to create another Admin account first....</span> > > There is (was) a reason that you should not have done so. > That reason being so that you wouldn't be left up proverbial > creek without proverbial paddle. > > Good luck with that boat, and follow directions next time. ></span> I'd already created an Admin account for other reasons before I did this.... Quote
Guest FromTheRafters Posted August 21, 2008 Posted August 21, 2008 "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message news:ez%23PTu1AJHA.4992@TK2MSFTNGP06.phx.gbl...<span style="color:blue"> > "FromTheRafters" <erratic@ne.rr.com> wrote in message > news:O6eg4pwAJHA.2456@TK2MSFTNGP04.phx.gbl...<span style="color:green"> >> >> "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message >> news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl...<span style="color:darkred"> >>> "Malke" <malke@invalid.invalid> wrote in message >>> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl... >>>> >>>> 2. Log into the new extra Administrator account. Go to Control >>>> Panel>User >>>> Accounts. Change your personal account to Standard. Your data will not >>>> be >>>> affected. >>>> >>> >>> Hmmm. I just changed the type of my account from Admin to Standard >>> without having to create another Admin account first....</span> >> >> There is (was) a reason that you should not have done so. >> That reason being so that you wouldn't be left up proverbial >> creek without proverbial paddle. >> >> Good luck with that boat, and follow directions next time. >></span> > > > I'd already created an Admin account for other reasons before I did > this....</span> Sorry, I thought you were the OP losing access to the only admin account (aside from the hidden one) available. The OS shouldn't allow the last one to be removed, but stranger things have happened. Once I realized my error, I tried to cancel that post, but some servers don't support cancellations. Frankly, I was surprised that someone would start with step two. style_emoticons// Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.