ponghy Posted October 17, 2005 Share Posted October 17, 2005 (edited) Hi. I have a little problem on my unattended CD:When the installation finishes, then the Administrator user is logged on and a user profile is created for this user (this is I want, I don't want any users at the beginning). Ok. But, if I try to create a RESTRICTED user I cannot do this (from User accounts, in control panel). I need to create 1 more administrator in order to create a restricted user and this is not the desired. How can I modify this behavior? That is, I want to have the Administrator user as the ONLY administrator on the system, but I want Windows allows me to add the restricted accounts (without the extra administrator account).Is this possible? Any registry tweak or administrative template?Thanks very much for your help Edited October 17, 2005 by ponghy Link to comment Share on other sites More sharing options...
Br4tt3 Posted October 18, 2005 Share Posted October 18, 2005 Lo.. I am not sure I understand u correctly but I will give it a go! Adding another administrator can be done with scripting to WSH (vbscripting) easily. Then u can just add the admin with an alternative name an make him a part of the sec group Administrators. Restricted groups membership, can be done by creating a template with the MMC Security Tempates snap-in and exporting it to a .inf file. Once u have done this, u can run secedit to apply this .inf file at installation time.Hope I got u right..Keep truckin! Link to comment Share on other sites More sharing options...
ponghy Posted October 18, 2005 Author Share Posted October 18, 2005 (edited) Not exactly. I will explain more clear:In unattended mode I have the following line in WINNT.SIF:[Unattended]UnattendSwitch = YesThis makes me log on to the system as Administrator user (the 'real' Administrator). This is I want. But if I don't add any user with administration privileges, Windows don't let me add restricted users. Do you understand?I know the Administrator user is special for Windows, but I want to use it as the only administrator on the system. And then, this Administrator will make the remaining restricted accounts... How to achieve this??TIA Edited October 18, 2005 by ponghy Link to comment Share on other sites More sharing options...
ColdFusion200 Posted October 18, 2005 Share Posted October 18, 2005 net user %Username% %Password% /addnet localgroup Users %Username% /addnet accounts /maxpwage:unlimitedwould that work? Link to comment Share on other sites More sharing options...
ponghy Posted October 18, 2005 Author Share Posted October 18, 2005 Coldfusion200: Thanks for replying... but no I want to add restricted users MANUALLY, not in unattended mode. That is, I log on to the system as Administrator, and then MANUALLY I should be able to add restricted users... But as I said above, Windows don't let me add any restricted account without having an extra account with administration privileges ("other administrator"). Link to comment Share on other sites More sharing options...
ColdFusion200 Posted October 18, 2005 Share Posted October 18, 2005 Coldfusion200: Thanks for replying... but no I want to add restricted users MANUALLY, not in unattended mode. That is, I log on to the system as Administrator, and then MANUALLY I should be able to add restricted users... But as I said above, Windows don't let me add any restricted account without having an extra account with administration privileges ("other administrator"). it isnt just for unattended. it will work when windows is running too. try it, see if it solves you're problem Link to comment Share on other sites More sharing options...
ponghy Posted October 18, 2005 Author Share Posted October 18, 2005 Sorry for too many posts But, I don't want to add programatically restricted users. Any person using the Administrator account should be able to add a restricted user via Control Panel > User Accounts.Now, I hope you understand my problem... Link to comment Share on other sites More sharing options...
ColdFusion200 Posted October 18, 2005 Share Posted October 18, 2005 Sorry for too many posts But, I don't want to add programatically restricted users. Any person using the Administrator account should be able to add a restricted user via Control Panel > User Accounts.Now, I hope you understand my problem...i understood it in the first place, but i dont know how to sort it, if it can be fixed without creating another admin account that is. i was providing you with a workaround Link to comment Share on other sites More sharing options...
Takeshi Posted October 19, 2005 Share Posted October 19, 2005 Try this:lusrmgr.msc > Users > Action > New Users Link to comment Share on other sites More sharing options...
gunsmokingman Posted October 19, 2005 Share Posted October 19, 2005 I believe but do not quote me is that you need another admin account before creating just a user account. You could try this make another admin account, then create theuser accounts, then delete the new admin account. Link to comment Share on other sites More sharing options...
Takeshi Posted October 19, 2005 Share Posted October 19, 2005 (edited) I've just done an expt. in VMWare with my existing uA install. I remove the other admin acc leaving only the Admin acc. Then the Local Users and Groups would let me directly create a new account which turns out to be a Limited account.The XP User Account applet still would not let me do it. I think this is by design. This limitation is not due to uA per se.The Local Users and Groups, which can also be accessed from the classic User Account applet (for domain and W2k) and the net user command seem to be the only way. Edited October 19, 2005 by Takeshi Link to comment Share on other sites More sharing options...
MHz Posted October 19, 2005 Share Posted October 19, 2005 Net User to create the userNet LocalGroup to assign where the user should be...Net Group is for a domain...Try itHTH Link to comment Share on other sites More sharing options...
Eki Posted October 20, 2005 Share Posted October 20, 2005 (edited) @ponghy W2K Style user accounts snap-in lets you create restricted accounts without creating admin user first.Type "control userpasswords2" in runbox or create shortcut to %windir%\system32\control.exe userpasswords2Eki Edited October 20, 2005 by Eki Link to comment Share on other sites More sharing options...
ponghy Posted October 20, 2005 Author Share Posted October 20, 2005 Thanks very much for your replies. I will try some ideas I appreciate your feedback Link to comment Share on other sites More sharing options...
ponghy Posted October 24, 2005 Author Share Posted October 24, 2005 (edited) If I use the OOBEINFO.INI Method (as explained in the guide), and I'm using UnattendSwitch = Yes, Will this work?Thanks. Edited October 24, 2005 by ponghy Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now