Solved

Making WXP-Pro Admin Profile/User un-removable by another Admin Profile/User.

Posted on 2004-04-14
6
156 Views
Last Modified: 2013-12-04
Is this possible and How?

Regards,  P1
0
Comment
Question by:P1
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
kabaam earned 500 total points
ID: 10829157
the only method I can think of to block another admin from accessing or deleting anything would be via encryption.
Even that isn't fully fool proof. The other admins could make themselves recovery agents for access to encrypted area.
And, I never tried it but, I doubt that a profile could be totally encrypted.  Select files could be without a problem.

Regular users should not be able to delete or access others profiles by default.
The closest you could get would to edit the permissions on the folder to owner/creator only have any access.
The problem is other administrators could take ownership of the folder and then add themselves to the permissions list.
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10830652
I agree with KABAAM - It's not possible - Admin is what it says, anything you tries to lock-up can be undone by another admin on the same computer, but ...

Best solution: Microsoft Virtual PC 2004 (extra operation system with xp on an huge encrypted file)
http://www.microsoft.com/windowsxp/virtualpc/

Possible solution: Dualboot (2 XP-systems on one harddisc)
HOW TO: Create a Multiple-Boot System in Windows XP
http://support.microsoft.com/support/kb/articles/q306/5/59.asp

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open

0
 
LVL 4

Author Comment

by:P1
ID: 10835782
How would I implement the encryption with password for the un-removable account?
And are we talking about EFS on XP?  Does it ask for the password first before making changes/removal?

Regards,  P1
0
 
LVL 11

Expert Comment

by:kabaam
ID: 10846544
EFS does not password protect the profile.  If the user that encrypted it goes in to access, it should open knowing the user.
I do not recommend using on the whole profile though...  and then the admins will still be able to delete it, just not open.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

827 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question