Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - Changing an Admin acct into a Standard acct

Reply
 
Old 08-18-2008   #1 (permalink)
Steve Turner


 
 

Changing an Admin acct into a Standard acct

I have been working in Vista for the first time for a couple of weeks now.
Initially I set up myself as a Admin and have been using only that account.
However, I've been reading up on security issues in Vista and realize that I
should have set myself up as a Standard user and only invoke the Admin
account when I wanted to.

My question is this: What changes will occur if I first set up an Admin
account and then change the current Admin account (the intiial one) to a
Standard? Will all my documents be preserved? What other issues should I
take into consideration?

Thanks.


My System SpecsSystem Spec
Old 08-18-2008   #2 (permalink)
Malke


 
 

Re: Changing an Admin acct into a Standard acct

Steve Turner wrote:
Quote:

> I have been working in Vista for the first time for a couple of weeks now.
> Initially I set up myself as a Admin and have been using only that
> account. However, I've been reading up on security issues in Vista and
> realize that I should have set myself up as a Standard user and only
> invoke the Admin account when I wanted to.
>
> My question is this: What changes will occur if I first set up an Admin
> account and then change the current Admin account (the intiial one) to a
> Standard? Will all my documents be preserved? What other issues should I
> take into consideration?
1. Create an extra Administrator account. This is important since the
built-in Administrator is disabled by default in Vista. You need never log
into this account except once if you're fortunate.

2. Log into the new extra Administrator account. Go to Control Panel>User
Accounts. Change your personal account to Standard. Your data will not be
affected.

3. Log back into your own account.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

My System SpecsSystem Spec
Old 08-18-2008   #3 (permalink)
FromTheRafters


 
 

Re: Changing an Admin acct into a Standard acct


"Steve Turner" <stevezygote@xxxxxx> wrote in message
news:465FFC84-377E-47CE-98ED-ED155425755A@xxxxxx
Quote:

>I have been working in Vista for the first time for a couple of weeks now.
>Initially I set up myself as a Admin and have been using only that account.
>However, I've been reading up on security issues in Vista and realize that
>I should have set myself up as a Standard user and only invoke the Admin
>account when I wanted to.
While this is true, the developers of Vista realized that many
people with XP were not using this "best practice" scenario.
They have hidden the actual admin (most privilege) account
and replaced it with an admin account with a split token so
that even the admin account user runs with standard user
rights. The advantage of running in the admin account is that
the "admin approval mode" reduces the amount of information
that the user is required to enter in the UAC prompts. The
programs that run without causing a prompt are either pre-
assigned the elevated rights they need, or are run in standard
user environment. The programs that cause a prompt require
only a click.
Quote:

> My question is this: What changes will occur if I first set up an Admin
> account and then change the current Admin account (the intiial one) to a
> Standard?
You'll be okay as long as you don't remove the last admin account.
Quote:

> Will all my documents be preserved? What other issues should I take into
> consideration?
None that I am aware of, but wait until others have a chance to
respond. I haven't actually tried this whereas others may have.


My System SpecsSystem Spec
Old 08-20-2008   #4 (permalink)
Gordon


 
 

Re: Changing an Admin acct into a Standard acct

"Malke" <malke@xxxxxx> wrote in message
news:Oct%23LRTAJHA.5660@xxxxxx
Quote:

>
> 2. Log into the new extra Administrator account. Go to Control Panel>User
> Accounts. Change your personal account to Standard. Your data will not be
> affected.
>
Hmmm. I just changed the type of my account from Admin to Standard without
having to create another Admin account first....

My System SpecsSystem Spec
Old 08-20-2008   #5 (permalink)
Malke


 
 

Re: Changing an Admin acct into a Standard acct

Gordon wrote:
Quote:

> "Malke" <malke@xxxxxx> wrote in message
> news:Oct%23LRTAJHA.5660@xxxxxx
Quote:

>>
>> 2. Log into the new extra Administrator account. Go to Control Panel>User
>> Accounts. Change your personal account to Standard. Your data will not be
>> affected.
>>
>
> Hmmm. I just changed the type of my account from Admin to Standard without
> having to create another Admin account first....
The reason for having an extra Administrator account is not because of the
account demotion. It is because the built-in Administrator account is
disabled by default in Vista and you may be very glad one day to have an
extra account with administrative privileges in an emergency. Even if you
have enabled the built-in Administrator account (not recommended), I would
always make an extra one.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

My System SpecsSystem Spec
Old 08-20-2008   #6 (permalink)
FromTheRafters


 
 

Re: Changing an Admin acct into a Standard acct


"Gordon" <gordonbparker@xxxxxx> wrote in message
news:exnaNgvAJHA.1228@xxxxxx
Quote:

> "Malke" <malke@xxxxxx> wrote in message
> news:Oct%23LRTAJHA.5660@xxxxxx
Quote:

>>
>> 2. Log into the new extra Administrator account. Go to Control Panel>User
>> Accounts. Change your personal account to Standard. Your data will not be
>> affected.
>>
>
> Hmmm. I just changed the type of my account from Admin to Standard without
> having to create another Admin account first....
There is (was) a reason that you should not have done so.
That reason being so that you wouldn't be left up proverbial
creek without proverbial paddle.

Good luck with that boat, and follow directions next time.


My System SpecsSystem Spec
Old 08-20-2008   #7 (permalink)
Malke


 
 

Re: Changing an Admin acct into a Standard acct

Paul Montgomery wrote:
Quote:

> On Aug 20, 2:49*pm, Malke <ma...@xxxxxx> wrote:
>
>
>
Quote:

>> Even if you have enabled the built-in Administrator account (not
>> recommended),
>
> [snip]
>
> Why is it not recommended?
For security. OS X and some Linux distros do the same thing.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

My System SpecsSystem Spec
Old 08-21-2008   #8 (permalink)
Gordon


 
 

Re: Changing an Admin acct into a Standard acct

"FromTheRafters" <erratic@xxxxxx> wrote in message
news:O6eg4pwAJHA.2456@xxxxxx
Quote:

>
> "Gordon" <gordonbparker@xxxxxx> wrote in message
> news:exnaNgvAJHA.1228@xxxxxx
Quote:

>> "Malke" <malke@xxxxxx> wrote in message
>> news:Oct%23LRTAJHA.5660@xxxxxx
Quote:

>>>
>>> 2. Log into the new extra Administrator account. Go to Control
>>> Panel>User
>>> Accounts. Change your personal account to Standard. Your data will not
>>> be
>>> affected.
>>>
>>
>> Hmmm. I just changed the type of my account from Admin to Standard
>> without having to create another Admin account first....
>
> There is (was) a reason that you should not have done so.
> That reason being so that you wouldn't be left up proverbial
> creek without proverbial paddle.
>
> Good luck with that boat, and follow directions next time.
>

I'd already created an Admin account for other reasons before I did this....

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Trouble dlownloading apps into standard acct. Vista General
admin acct activate not working General Discussion
Move Windows Mail from Admin to Standard Acct Vista mail
Want a simpler way to log off domain acct and then log on to a local acct. Vista General
Disabling UAC and Standard User Acct? Vista security


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46