microsoft.public.windowsxp.security_admin

Here's what I read in a recent letter from MS:
"Limited User accounts can protect your Windows XP computer when you browse
the Web. If you work in a Limited User account, you might be able to
decrease the effect of a virus or other malicious software. But if the
attack happens while you're in an Administrator account, the attacker can
gain full access to your computer and the results can range from annoying to
catastrophic. Administrator accounts are the default type of account for
Windows XP.
A Limited User account lets you use most of the capabilities of the
computer, but only an Administrator can make changes that affect other users
of the computer. For example, in a Limited User account, you can use:
. Web browsers and e-mail programs
. Productivity programs such as Microsoft Word, Microsoft Excel, and
Microsoft PowerPoint
. Entertainment programs that let you play music and video, edit
photographs, and much more
Note: You can also create a Guest account, which has most of the functions
of a Limited User account but it is not password-protected, so a guest user
can quickly log on and off again to perform simple tasks, such as checking
e-mail or browsing the Internet."

I wrote earlier that we were using the Administrator account. I stand
corrected. We are using the default "Owner" account. But it has
administrator rights.
I take it that I should create a "limited user" account for everyday
purposes. Then switch to the existing "Owner" account to perform periodic
tune-up functions--virus scans, disk cleanup, defrag, etc. Is that correct?
How do I create such an account? Can I decide what functions I wish to allow
to this account? Is the Guest account a "limited user" account?

"JD" wrote in message
news:%23KmoCmDdIHA.3940@TK2MSFTNGP05.phx.gbl...
> My wife and I have been using the default Administrator account, without a
> password, for years. I've been advised to create a "user account," and
> only log on as administrator to do weekly maintenance chores.
> If I were to create a user account and call it "Family," would it have a
> blank desktop? Would we be able to download music files? Access all of our
> existing files?
> Use Outlook Express to send and recieve e-mail? Access the Internet--and
> save Favorites?
> I'm unsure of how to proceed. Place a password on the Administrator
> account? Ditto on any new user accounts created?
> What about the default Guest account? My stepson visits several times a
> year and uses the computer for many hours. If he were to use the Guest
> account, would he be able to recieve and send documents as e-mail
> attachements. Save documents to the hard drive? Access the Internet?
> My wife sometimes lets her students use the computer. How would I go about
> "restricting" access to Internet sites for them, but not for us?
>