Changing specific user Perms in WindowsXP

[Nod]

I don't like running my computer as administrator for daily usage because a) It's not neccessary and b) There's some security risk associated with it. So I've decided to make a side account to run for daily use and log in to the admin account only to change settings, install applications etc. However, the basic "User Accounts" window in the Control Panel is completely worthless. I created my account as "Limited" but I can't change ANY specific permissions for it. I don't need it to be able to install applications or things of that nature but I'd like to at least be able to do simple things like delete icons off of the desktop, and view files in other users folders or desktop. Apparently the only options windows supplies for User Perms that I can find are "Computer Administrator" and "Limited" and no place to change individual permissions for a user. Do I need some kind of software? Am I missing something maybe?

[gangals]

While logged in as Admin, go to Control Panel -> Administrative Tools -> Computer Management -> Local Users and Groups -> Users

Double click on the limited user, go to the "Member Of" tab -> Add -> Advanced -> Find Now -> Select "Power Users" and click OK and click OK on the next window.

Click on the other entries in the "Member Of" field and remove them.

[Nod]

I followed your directions but when I brought up the Computer Management application there was no "Local Users and Groups option in any of the option trees. I looked in everything but couldn't find it. Here's a screen shot of the program running with all trees extended.



I'm in the right place aren't I?

[gangals]

Are you running XP Home or Pro?

And you're logged in as an admin correct?

[Nod]

Home. And I am logged in as admin

[gangals]

Hmm, looks like that feature is crippled in XP Home. Was trying to find the registry/SAM entries to change this, but I couldn't find it.

Looks like you may need a program like http://www.softpedia.com/get/Tweak/System-Tweak/XP-Home-User-Manager.shtml

[mr_doc]

windows admin != root
there is not much danger of using it

[Zazen]

I don't like running my computer as administrator for daily usage because a) It's not neccessary and b) There's some security risk associated with it. So I've decided to make a side account to run for daily use and log in to the admin account only to change settings, install applications etc.

I think you should do the opposite. It's OK to run as administrator, but if you're worried about some web site installing shit at you then just run your browser as a regular user. You can make a shortcut for that with the "runas" command (but I don't know if /savecred will work on Home XP so you might have to type the password every time). If you have other apps you're worried about, runas those too.

Double click on the limited user, go to the "Member Of" tab -> Add -> Advanced -> Find Now -> Select "Power Users" and click OK and click OK on the next window.

Don't do this, power user is enough to do damage so you won't really be gaining anything.