Solved

Making WXP-Pro Admin Profile/User un-removable by another Admin Profile/User.

Posted on 2004-04-14
6
154 Views
Last Modified: 2013-12-04
Is this possible and How?

Regards,  P1
0
Comment
Question by:P1
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
kabaam earned 500 total points
ID: 10829157
the only method I can think of to block another admin from accessing or deleting anything would be via encryption.
Even that isn't fully fool proof. The other admins could make themselves recovery agents for access to encrypted area.
And, I never tried it but, I doubt that a profile could be totally encrypted.  Select files could be without a problem.

Regular users should not be able to delete or access others profiles by default.
The closest you could get would to edit the permissions on the folder to owner/creator only have any access.
The problem is other administrators could take ownership of the folder and then add themselves to the permissions list.
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10830652
I agree with KABAAM - It's not possible - Admin is what it says, anything you tries to lock-up can be undone by another admin on the same computer, but ...

Best solution: Microsoft Virtual PC 2004 (extra operation system with xp on an huge encrypted file)
http://www.microsoft.com/windowsxp/virtualpc/

Possible solution: Dualboot (2 XP-systems on one harddisc)
HOW TO: Create a Multiple-Boot System in Windows XP
http://support.microsoft.com/support/kb/articles/q306/5/59.asp

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open

0
 
LVL 4

Author Comment

by:P1
ID: 10835782
How would I implement the encryption with password for the un-removable account?
And are we talking about EFS on XP?  Does it ask for the password first before making changes/removal?

Regards,  P1
0
 
LVL 11

Expert Comment

by:kabaam
ID: 10846544
EFS does not password protect the profile.  If the user that encrypted it goes in to access, it should open knowing the user.
I do not recommend using on the whole profile though...  and then the admins will still be able to delete it, just not open.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now