Changing an Admin acct into a Standard acct

Posted: 08-18-2008, 12:47 PM
I have been working in Vista for the first time for a couple of weeks now.
Initially I set up myself as a Admin and have been using only that account.
However, I've been reading up on security issues in Vista and realize that I
should have set myself up as a Standard user and only invoke the Admin
account when I wanted to.

My question is this: What changes will occur if I first set up an Admin
account and then change the current Admin account (the intiial one) to a
Standard? Will all my documents be preserved? What other issues should I
take into consideration?

Thanks.

Changing an Admin acct into a Standard acct


Responses to "Changing an Admin acct into a Standard acct"

Malke
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-18-2008, 01:14 PM
Steve Turner wrote:
> I have been working in Vista for the first time for a couple of weeks now.
> Initially I set up myself as a Admin and have been using only that
> account. However, I've been reading up on security issues in Vista and
> realize that I should have set myself up as a Standard user and only
> invoke the Admin account when I wanted to.
>
> My question is this: What changes will occur if I first set up an Admin
> account and then change the current Admin account (the intiial one) to a
> Standard? Will all my documents be preserved? What other issues should I
> take into consideration?
1. Create an extra Administrator account. This is important since the
built-in Administrator is disabled by default in Vista. You need never log
into this account except once if you're fortunate.

2. Log into the new extra Administrator account. Go to Control Panel>User
Accounts. Change your personal account to Standard. Your data will not be
affected.

3. Log back into your own account.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

FromTheRafters
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-18-2008, 01:24 PM

"Steve Turner" <stevezygote@hotmail.com> wrote in message
news:465FFC84-377E-47CE-98ED-ED155425755A@microsoft.com...
>I have been working in Vista for the first time for a couple of weeks now.
>Initially I set up myself as a Admin and have been using only that account.
>However, I've been reading up on security issues in Vista and realize that
>I should have set myself up as a Standard user and only invoke the Admin
>account when I wanted to.
While this is true, the developers of Vista realized that many
people with XP were not using this "best practice" scenario.
They have hidden the actual admin (most privilege) account
and replaced it with an admin account with a split token so
that even the admin account user runs with standard user
rights. The advantage of running in the admin account is that
the "admin approval mode" reduces the amount of information
that the user is required to enter in the UAC prompts. The
programs that run without causing a prompt are either pre-
assigned the elevated rights they need, or are run in standard
user environment. The programs that cause a prompt require
only a click.
> My question is this: What changes will occur if I first set up an Admin
> account and then change the current Admin account (the intiial one) to a
> Standard?
You'll be okay as long as you don't remove the last admin account.
> Will all my documents be preserved? What other issues should I take into
> consideration?
None that I am aware of, but wait until others have a chance to
respond. I haven't actually tried this whereas others may have.


Steve Turner
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-18-2008, 03:54 PM
Thanks, guys. Needless to say I'm going to back everything up.

"FromTheRafters" <erratic@ne.rr.com> wrote in message
news:e45PPXTAJHA.1184@TK2MSFTNGP04.phx.gbl...
>
> "Steve Turner" <stevezygote@hotmail.com> wrote in message
> news:465FFC84-377E-47CE-98ED-ED155425755A@microsoft.com...
>>I have been working in Vista for the first time for a couple of weeks now.
>>Initially I set up myself as a Admin and have been using only that
>>account. However, I've been reading up on security issues in Vista and
>>realize that I should have set myself up as a Standard user and only
>>invoke the Admin account when I wanted to.
>
> While this is true, the developers of Vista realized that many
> people with XP were not using this "best practice" scenario.
> They have hidden the actual admin (most privilege) account
> and replaced it with an admin account with a split token so
> that even the admin account user runs with standard user
> rights. The advantage of running in the admin account is that
> the "admin approval mode" reduces the amount of information
> that the user is required to enter in the UAC prompts. The
> programs that run without causing a prompt are either pre-
> assigned the elevated rights they need, or are run in standard
> user environment. The programs that cause a prompt require
> only a click.
>
>> My question is this: What changes will occur if I first set up an Admin
>> account and then change the current Admin account (the intiial one) to a
>> Standard?
>
> You'll be okay as long as you don't remove the last admin account.
>
>> Will all my documents be preserved? What other issues should I take into
>> consideration?
>
> None that I am aware of, but wait until others have a chance to
> respond. I haven't actually tried this whereas others may have.
>
Gordon
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-20-2008, 07:07 PM
"Malke" <malke@invalid.invalid> wrote in message
news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...
>
> 2. Log into the new extra Administrator account. Go to Control Panel>User
> Accounts. Change your personal account to Standard. Your data will not be
> affected.
>
Hmmm. I just changed the type of my account from Admin to Standard without
having to create another Admin account first....

Malke
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-20-2008, 07:49 PM
Gordon wrote:
> "Malke" <malke@invalid.invalid> wrote in message
> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...
>>
>> 2. Log into the new extra Administrator account. Go to Control Panel>User
>> Accounts. Change your personal account to Standard. Your data will not be
>> affected.
>>
>
> Hmmm. I just changed the type of my account from Admin to Standard without
> having to create another Admin account first....
The reason for having an extra Administrator account is not because of the
account demotion. It is because the built-in Administrator account is
disabled by default in Vista and you may be very glad one day to have an
extra account with administrative privileges in an emergency. Even if you
have enabled the built-in Administrator account (not recommended), I would
always make an extra one.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

FromTheRafters
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-20-2008, 09:19 PM

"Gordon" <gordonbparker@yahoo.com.invalid> wrote in message
news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl...
> "Malke" <malke@invalid.invalid> wrote in message
> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...
>>
>> 2. Log into the new extra Administrator account. Go to Control Panel>User
>> Accounts. Change your personal account to Standard. Your data will not be
>> affected.
>>
>
> Hmmm. I just changed the type of my account from Admin to Standard without
> having to create another Admin account first....
There is (was) a reason that you should not have done so.
That reason being so that you wouldn't be left up proverbial
creek without proverbial paddle.

Good luck with that boat, and follow directions next time.


Paul Montgomery
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-20-2008, 10:34 PM
On Aug 20, 2:49*pm, Malke <ma...@invalid.invalid> wrote:


> Even if you have enabled the built-in Administrator account (not
> recommended),
[snip]

Why is it not recommended?
Malke
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-21-2008, 12:06 AM
Paul Montgomery wrote:
> On Aug 20, 2:49*pm, Malke <ma...@invalid.invalid> wrote:
>
>
>
>> Even if you have enabled the built-in Administrator account (not
>> recommended),
>
> [snip]
>
> Why is it not recommended?
For security. OS X and some Linux distros do the same thing.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Gordon
Guest
Posts: n/a
 
Re: Changing an Admin acct into a Standard acct
Posted: 08-21-2008, 07:00 AM
"FromTheRafters" <erratic@ne.rr.com> wrote in message
news:O6eg4pwAJHA.2456@TK2MSFTNGP04.phx.gbl...
>
> "Gordon" <gordonbparker@yahoo.com.invalid> wrote in message
> news:exnaNgvAJHA.1228@TK2MSFTNGP02.phx.gbl...
>> "Malke" <malke@invalid.invalid> wrote in message
>> news:Oct%23LRTAJHA.5660@TK2MSFTNGP04.phx.gbl...
>>>
>>> 2. Log into the new extra Administrator account. Go to Control
>>> Panel>User
>>> Accounts. Change your personal account to Standard. Your data will not
>>> be
>>> affected.
>>>
>>
>> Hmmm. I just changed the type of my account from Admin to Standard
>> without having to create another Admin account first....
>
> There is (was) a reason that you should not have done so.
> That reason being so that you wouldn't be left up proverbial
> creek without proverbial paddle.
>
> Good luck with that boat, and follow directions next time.
>

I'd already created an Admin account for other reasons before I did this....

 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Disabling UAC and Standard User Acct? Peter M Windows Vista Security 2 06-14-2006 03:59 AM
Sharing The Same DSL connection with Admin Acct & Guest Acct. dbrown Customize Windows XP 3 05-12-2004 04:31 AM
Apply changes to admin acct to all users Nancy Windows XP Setup 4 01-25-2004 02:35 PM
Help!! Admin Acct acts like a Limited Acct mr1971 Windows XP Help & Support 0 12-11-2003 06:26 AM
Can see network on admin acct but not my user acct Bossman Windows XP Network & Web 0 08-12-2003 08:42 PM