Vista Hidden Administrator:Password Use

[Guest grinder]

The Hidden Administrator account has elevated priviledges that the

ordinary adminsitrator enitity/identity canot use.

 

Some of these prerogatives are important: such as to immunize the

computer against spy wear ala Spybot program. The 'administrator' title

for me as the sole user is NOT enough to do this task and I must

activate the hidden administrator to do it.

 

Rather that periodically activate the program to immunize once a new

bunch of threats are available, it is tempting to simply password

protect the hidden administrator account and let it run all the time but

with protection.

 

::IS THIS A SAFE AND LEGITIMATE COURSE OF ACTION [TO PASS WORD PROTECT

THE HIDDEN ADMINSTRATOR ACCOUNT] ASIDE FROM ANY ENHANCED SECURITY

ISSUES?::

 

 

Thanks for the input of the many geeks out there who contribute so

much.

 

/s/ grinder Vista Ultimate 32X systgem

 

 

--

grinder

[Guest BillD]

"grinder" wrote:

<span style="color:blue">

> user is NOT enough to do this task and I must

> activate the hidden administrator to do it.</span>

 

FALSE.

Just right click on spybot -> run as administrator

[Guest grinder]

Thank you very much. I am pleased to know I was mistaken. Again,

thanks.

 

Grinder

 

 

--

grinder

[Guest Bruce Chambers]

grinder wrote:<span style="color:blue">

> The Hidden Administrator account has elevated priviledges that the

> ordinary adminsitrator enitity/identity canot use.

> </span>

 

Not true.

<span style="color:blue">

> Some of these prerogatives are important: such as to immunize the

> computer against spy wear ala Spybot program. The 'administrator' title

> for me as the sole user is NOT enough to do this task and I must

> activate the hidden administrator to do it.

> </span>

 

 

Not so.

 

<span style="color:blue">

> Rather that periodically activate the program to immunize once a new

> bunch of threats are available, it is tempting to simply password

> protect the hidden administrator account and let it run all the time but

> with protection.

>

> ::IS THIS A SAFE AND LEGITIMATE COURSE OF ACTION [TO PASS WORD PROTECT

> THE HIDDEN ADMINSTRATOR ACCOUNT] ASIDE FROM ANY ENHANCED SECURITY

> ISSUES?::

>

> </span>

 

"Safe" is a relative term, but the account can be used safely by a

knowledgeable individual. However, there is no need to do so, as your

assumptions above are false.

 

 

 

 

--

 

Bruce Chambers

 

Help us help you:

http://www.catb.org/~esr/faqs/smart-questions.html

 

http://support.microsoft.com/default.aspx/kb/555375

 

They that can give up essential liberty to obtain a little temporary

safety deserve neither liberty nor safety. ~Benjamin Franklin

 

Many people would rather die than think; in fact, most do. ~Bertrand Russell

 

The philosopher has never killed any priests, whereas the priest has

killed a great many philosophers.

~ Denis Diderot

[Guest FromTheRafters]

"grinder" <guest@unknown-email.com> wrote in message

news:fc201dbf1e7f680d9d2e6e109559eece@nntp-gateway.com...<span style="color:blue">

>

> The Hidden Administrator account has elevated priviledges that the

> ordinary adminsitrator enitity/identity canot use.</span>

 

No, the difference is in the token (it's not split).

<span style="color:blue">

> Some of these prerogatives are important: such as to immunize the

> computer against spy wear ala Spybot program. The 'administrator' title

> for me as the sole user is NOT enough to do this task and I must

> activate the hidden administrator to do it.</span>

 

That shouldn't be necessary. I think you are using the account

just to get around other issues with the progams.

<span style="color:blue">

> Rather that periodically activate the program to immunize once a new

> bunch of threats are available, it is tempting to simply password

> protect the hidden administrator account and let it run all the time but

> with protection.</span>

 

You are not alone in this thinking. Much of the security built

into Vista is circumvented in this scenario.

 

....and some people really don't need the security of UAC.

 

It is sad to see this option being taken by those that really would

benefit from it - just because of the annoyance factor.

<span style="color:blue">

> ::IS THIS A SAFE AND LEGITIMATE COURSE OF ACTION [TO PASS WORD PROTECT

> THE HIDDEN ADMINSTRATOR ACCOUNT] ASIDE FROM ANY ENHANCED SECURITY

> ISSUES?::</span>

 

The account has too much potential to just leave it lying around.

Keep in mind that a brute force attack against a password will

eventually prevail.

<span style="color:blue">

> Thanks for the input of the many geeks out there who contribute so

> much.</span>

 

My advice - don't do it. I am pretty computer savvy (err..geeky?)

and I wouldn't do it.