I want to make my own user account limited (no administrative privileges) as
I understand it is safer. I created a new user, gave it administrative
rights, booted into it, and made my original user limited. But then I can't
boot into the original user account. Windows fails to load and gives me an
Explorer.exe C++ runtime error. If I go back into the new admin account and
give admin rights back to the original user, it loads normally. What am I
missing? I have (temporarily) uninstalled my antivirus software but a
firewall (Online Armor) is running. Any insight into this would be
gratefully appreciated.

PDSF <PDSF@discussions.microsoft.com> wrote:

>I want to make my own user account limited (no administrative privileges) as
>I understand it is safer.

Safer how?

"PD43" wrote:

> PDSF <PDSF@discussions.microsoft.com> wrote:
>
> >I want to make my own user account limited (no administrative privileges) as
> >I understand it is safer.
>
> Safer how?
>
Safer in that malware can't exectute anything that requires admin privileges.

PDSF <PDSF@discussions.microsoft.com> wrote:

>
>
>"PD43" wrote:
>
>> PDSF <PDSF@discussions.microsoft.com> wrote:
>>
>> >I want to make my own user account limited (no administrative privileges) as
>> >I understand it is safer.
>>
>> Safer how?
>>
>Safer in that malware can't exectute anything that requires admin privileges.

And you yourself can't play with the OS, you can't install new
programs, etc... which, at this point, looks like a good idea.

"PD43" wrote:

> PDSF <PDSF@discussions.microsoft.com> wrote:
>
> >
> >
> >"PD43" wrote:
> >
> >> PDSF <PDSF@discussions.microsoft.com> wrote:
> >>
> >> >I want to make my own user account limited (no administrative privileges) as
> >> >I understand it is safer.
> >>
> >> Safer how?
> >>
> >Safer in that malware can't exectute anything that requires admin privileges.
>
> And you yourself can't play with the OS, you can't install new
> programs, etc... which, at this point, looks like a good idea.

I'm not sure what your point is. I don't mean to sound ungrateful, but it
would be most helpful if you could limit your replies to actual suggestions
for a fix.
>
>

"PD43" <pauld1943@comcast.net> wrote in message
news:pumju3p67tl07lb7k7e9hke770i0360hqa@4ax.com...
> PDSF <PDSF@discussions.microsoft.com> wrote:
>
>>
>>
>>"PD43" wrote:
>>
>>> PDSF <PDSF@discussions.microsoft.com> wrote:
>>>
>>> >I want to make my own user account limited (no administrative
>>> >privileges) as
>>> >I understand it is safer.
>>>
>>> Safer how?
>>>
>>Safer in that malware can't exectute anything that requires admin
>>privileges.
>
> And you yourself can't play with the OS, you can't install new
> programs, etc... which, at this point, looks like a good idea.
>

Yes he can, but he would need to login to the admin account. This is the
way an operating system like XP should be used.

"PDSF" wrote:

> I want to make my own user account limited (no administrative privileges) as
> I understand it is safer. I created a new user, gave it administrative
> rights, booted into it, and made my original user limited. But then I can't
> boot into the original user account. Windows fails to load and gives me an
> Explorer.exe C++ runtime error. If I go back into the new admin account and
> give admin rights back to the original user, it loads normally. What am I
> missing? I have (temporarily) uninstalled my antivirus software but a
> firewall (Online Armor) is running. Any insight into this would be
> gratefully appreciated.


Hi,
If the Original Account was or is the Default windows built-in you will have
this issue!.
Try to give limited account privileges to the new Account and see if the
system will behave itself. I understand your point in making the Admin for
the local work and the limited account for the surfing the net. Since the
limited account has certain restrictions, it helps prevent virus' from
accessing certain parts of your disk. But with recent tech in hacks and
vulnerabilities that can be doubtful if you will not practice Common sense
and safe Hex.

Adding a User Account
http://msdn2.microsoft.com/en-us/library/bb521452.aspx
Use access control to restrict who can use your files
http://www.microsoft.com/windowsxp/u...sscontrol.mspx
How to create a custom default user profile
http://support.microsoft.com/kb/319974

HTH.
nass
---
http://www.nasstec.co.uk

On Tue, 25 Mar 2008 21:41:01 -0700, PDSF wrote:

> I want to make my own user account limited (no administrative privileges) as
> I understand it is safer. I created a new user, gave it administrative
> rights, booted into it, and made my original user limited. But then I can't
> boot into the original user account. Windows fails to load and gives me an
> Explorer.exe C++ runtime error. If I go back into the new admin account and
> give admin rights back to the original user, it loads normally. What am I
> missing? I have (temporarily) uninstalled my antivirus software but a
> firewall (Online Armor) is running. Any insight into this would be
> gratefully appreciated.

Aaron Margosis' Non-Admin WebLog
http://blogs.msdn.com/aaron_margosis/pages/TOC.aspx
Scroll down to:
The easiest way to run as non-admin

Running as Limited User - the Easy Way
http://blogs.technet.com/markrussino...-easy-way.aspx

PFW Criticism.
http://en.wikipedia.org/wiki/Persona...all#Criticisms

"Personal Firewalls" are mostly snake-oil.
http://www.samspade.org/d/firewalls.html

Why your firewall sucks.
http://tooleaky.zensoft.com/
"But I quickly realized the truth: The added protection provided by
outbound filtering is entirely illusory."

"M.I.5¾" wrote:

>
> "PD43" <pauld1943@comcast.net> wrote in message
> news:pumju3p67tl07lb7k7e9hke770i0360hqa@4ax.com...
> > PDSF <PDSF@discussions.microsoft.com> wrote:
> >
> >>
> >>
> >>"PD43" wrote:
> >>
> >>> PDSF <PDSF@discussions.microsoft.com> wrote:
> >>>
> >>> >I want to make my own user account limited (no administrative
> >>> >privileges) as
> >>> >I understand it is safer.
> >>>
> >>> Safer how?
> >>>
> >>Safer in that malware can't exectute anything that requires admin
> >>privileges.
> >
> > And you yourself can't play with the OS, you can't install new
> > programs, etc... which, at this point, looks like a good idea.
> >
>
> Yes he can, but he would need to login to the admin account. This is the
> way an operating system like XP should be used.

Thank you!

> Hi,
> If the Original Account was or is the Default windows built-in you will have
> this issue!.

Yes, but why?

> Try to give limited account privileges to the new Account and see if the
> system will behave itself.

I'm sure that would work, but it won't solve my problem. I have a year's
worth of customized program settings etc. in my user folder and I can't
rebuild them all.

"Kayman" wrote:



> Running as Limited User - the Easy Way
> http://blogs.technet.com/markrussino...-easy-way.aspx
>

I can set Online Armor to run any executable with limited privileges, but I
would still like to figure this out.

> "Personal Firewalls" are mostly snake-oil.
> http://www.samspade.org/d/firewalls.html
>
> Why your firewall sucks.
> http://tooleaky.zensoft.com/

These are seven years old! Anyway, again, I don't see your point. This
isn't a discussion about the best way to protect WinXP or the merits of free
firewalls.

"PDSF" <PDSF@discussions.microsoft.com> wrote in message news:F49EDD35-E138-4617-9B69-B4379BFB0449@microsoft.com...
>I want to make my own user account limited (no administrative privileges) as
> I understand it is safer. I created a new user, gave it administrative
> rights, booted into it, and made my original user limited. But then I can't
> boot into the original user account. Windows fails to load and gives me an
> Explorer.exe C++ runtime error. If I go back into the new admin account and
> give admin rights back to the original user, it loads normally. What am I
> missing? I have (temporarily) uninstalled my antivirus software but a
> firewall (Online Armor) is running. Any insight into this would be
> gratefully appreciated.

One way is to assign *user-name* and *password* to each account.
Control userpasswords2 -- then select each user must log on or choose
which user will log on automatically.

"Frank-FL" wrote:
> One way is to assign *user-name* and *password* to each account.
> Control userpasswords2 -- then select each user must log on or choose
> which user will log on automatically.
>
Thanks for posting. I'm sorry but I don't understand your advice. Each
account already has its own username and password, and each has to log on.
What are you suggesting I do differently, if anything?