Solved

Making WXP-Pro Admin Profile/User un-removable by another Admin Profile/User.

Posted on 2004-04-14
6
155 Views
Last Modified: 2013-12-04
Is this possible and How?

Regards,  P1
0
Comment
Question by:P1
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
kabaam earned 500 total points
ID: 10829157
the only method I can think of to block another admin from accessing or deleting anything would be via encryption.
Even that isn't fully fool proof. The other admins could make themselves recovery agents for access to encrypted area.
And, I never tried it but, I doubt that a profile could be totally encrypted.  Select files could be without a problem.

Regular users should not be able to delete or access others profiles by default.
The closest you could get would to edit the permissions on the folder to owner/creator only have any access.
The problem is other administrators could take ownership of the folder and then add themselves to the permissions list.
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10830652
I agree with KABAAM - It's not possible - Admin is what it says, anything you tries to lock-up can be undone by another admin on the same computer, but ...

Best solution: Microsoft Virtual PC 2004 (extra operation system with xp on an huge encrypted file)
http://www.microsoft.com/windowsxp/virtualpc/

Possible solution: Dualboot (2 XP-systems on one harddisc)
HOW TO: Create a Multiple-Boot System in Windows XP
http://support.microsoft.com/support/kb/articles/q306/5/59.asp

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open

0
 
LVL 4

Author Comment

by:P1
ID: 10835782
How would I implement the encryption with password for the un-removable account?
And are we talking about EFS on XP?  Does it ask for the password first before making changes/removal?

Regards,  P1
0
 
LVL 11

Expert Comment

by:kabaam
ID: 10846544
EFS does not password protect the profile.  If the user that encrypted it goes in to access, it should open knowing the user.
I do not recommend using on the whole profile though...  and then the admins will still be able to delete it, just not open.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question