microsoft.public.windowsxp.security_admin

Nepatsfan wrote:
> "frustrated parent" wrote in
> message news:B8E8A287-F4DA-4BA8-AF58-65C670AF2BB4@microsoft.com...
>> I am the administrator on my windows XP (media edition) computer and my son
>> has his own account as a user. He is somehow changing his account to also be
>> an administrator. From there he is able to load a web browser that does not
>> have parental controls and, well you know the rest.....
>>
>> Does anybody have an idea how he is doing this? I am not walking away from
>> the computer with my desktop open, and my password is too complicated for him
>> to know it.
>>
>> signed,
>> frustrated parent
>
> First off, I'll echo what VanguardLH has already pointed out. You're looking for
> a technological answer to what is essentially a parenting issue. The unfortunate
> fact is that no matter what simple steps you take to control his computer usage,
> your son will probably find a way around it.
>
> Here's a second vote for placing the computer in a locked room with a case lock
> installed. A BIOS password should also be configured. Consult the documentation
> for your system to see how this is accomplished. There are bootable CDs easily
> available on the internet that your son can use to get around your efforts. You
> need to prevent him from configuring the computer to boot from a CD. As has
> already been pointed out, the computer should be booting from the hard drive
> first.
>
> As for how your son is promoting his account to administrative status, the first
> thing that comes to mind is that he's logging on with the built-in Administrator
> account. Every computer with XP installed has an account named Administrator
> that is not initially password protected.
>
> In the case of XP Media Center Edition, as soon as you create a second
> administrative level account, the Administrator account goes into hiding. In
> order to log on to this account, log off from your account. This should bring
> you to the Welcome screen. At the Welcome screen, hit the Ctrl + Alt + Delete
> keys at the same time twice. Enter Administrator in the User Name box. Leave the
> Password box blank. If you can log on with the Administrator account, set up a
> password and log off.
>
> If you are told that the password is wrong, log back on to Windows with your
> user account. Go to Start -> Run and enter the following command in the open
> box.
>
> control userpasswords2
>
> On the User page, click on Administrator in the "Users for this computer" box.
> In the Password for Administrator box, hit the Reset Password button. Enter the
> password you want for this account. Close all open windows, log off from your
> account, and attempt to log on as Administrator using the procedure outlined
> earlier.
>
> Once you've protected the Administrator account with a password only you know,
> demote your son's account to limited status.
>
> You might want to take a look at this free program from Microsoft.
>
> Windows SteadyState
> http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
>
> Good luck
>
> Nepatsfan
>
>
What i would do is use windows state steady which can be found at the
microsoft site and lock down the control panel and other things so he
cant change anything.