This chapter is from the book Show
User Accounts: Standard User Versus Administrator UserWindows Vista provides two main types of user accounts:
When Windows Vista is installed, three user accounts are created by default: the administrator, the initial user, and a Guest account. Of these, the administrator and Guest accounts remain in a disabled state. The initial user account is the one that you used to perform the installation. Creating UsersOnly an administrator can create a user. This is accomplished in Control Panel, User Accounts and Family Safety, Add or Remove User Accounts. Vista's new User Account Control (UAC) prompts you for administrative approval. Select the Create a New Account hyperlink in the lower-left corner (see Figure 2.18). You must enter the name of the new user. As you can see in Figure 2.19, the default and recommended user type is the standard user. It is further recommended that every user account have a strong password. A password is not a default part of creating user accounts; you must perform this task separately. Click the Create User button to complete the creation process. After the user account is created, you are returned to the Manage Accounts window. Notice that the new user (LuLu, in our case) is not password protected as with the other user accounts. To establish a password for this account, click the new account in the Manage Accounts window, shown in Figure 2.20. Next select the Create a Password hyperlink, as shown in Figure 2.21. Now you must type the user's password twice, as shown in Figure 2.22.
 Figure 2.22 Entering the password, and possibly a password hint. You may also type in a password hint. This is presented to the user if the user enters the wrong password while trying to log on. Do not type the password in the password hint field. Click the Create Password button when you are done. Select the Manage Another Account hyperlink to return to the Manage Accounts window. Notice that the new LuLu account is now password protected. What Can the Standard User Do?In Windows XP, the non–administrator user could do many things, including these:
Windows Vista includes these capabilities for the standard user and has increased what the standard user can do. These new privileges for the standard user in Windows Vista are relatively common, low-risk tasks. These new permissions for standard user accounts in Windows Vista were not available to non–administrator users in Windows XP:
In Windows Vista, by default, standard users are prohibited from installing most programs and drivers, changing system settings, and performing other administrative tasks. How Can I Tell What the Administrator Can Do?The administrator user can perform any configuration task on the computer. The only entity on the computer that is more powerful than the administrator is the kernel of the operating system, affectionately personified and referred to as "the kernel." The kernel may disallow administrator actions, such as deleting the system or boot partitions. Administrator privilege is required to perform most configuration changes on the computer:
Many more tasks require administrative privilege. Spend 5 or 10 minutes poking around on the configuration dialogs, and look for the shield icon to get a feel for which tasks require administrative privilege. Running processes as an administrator presents a greater attack surface to the bad guys and malware. To minimize this potential exposure, when you use an administrator account on a Windows Vista computer, User Account Control (UAC), covered in Chapter 3, "Managing Windows Vista Security," increases the security of the computer. Even when you are logged on as an administrator, most programs are executed with the permissions of a standard user. This limits the computer's attack surface to malware that could be executed through those programs by running applications as a standard user. If the application or task requires greater privilege than the standard user, UAC prompts for administrator credentials or administrator approval. What is the difference between administrator and standard user account?Administrator accounts for users who require full access to the computer. Standard user accounts for those users who need to run applications but who should be limited or restricted in their administrative access to the computer.
What is a standard user account?Standard: Standard accounts are the basic accounts you use for normal everyday tasks. As a Standard user, you can do just about anything you would need to do, such as running software or personalizing your desktop. Standard with Family Safety: These are the only accounts that can have parental controls.
Which is better standard user or administrator?What's the difference between admin accounts and standard accounts? Simply put, admin accounts are the most powerful type of user. They have the power to do just about anything on a device.
Why use a standard account instead of an administrator account?Standard or regular user
If they are able to access additional files and data, it will only be those that the administrator allows. Using a regular user account when you are on your computer helps keep your system more secure.
What is administration user account?Administrator accounts are used by users to carry out tasks that require special permissions, such as installing software or renaming a computer. These Administrator accounts should be regularly audited – this should include a password change, and confirmation of who has access to these accounts.
What is the difference between administrative and limited account?Limited accounts can also be helpful when you are sharing a computer with small children or less-experienced users who may inadvertently change system settings. Administrator accounts aren't restricted. You do need to be logged into one to install new programs, security software and new hardware peripherals.
|
