Jump to content

Only 1 administrator on the system


Recommended Posts

Hi. I have a little problem on my unattended CD:

When the installation finishes, then the Administrator user is logged on and a user profile is created for this user (this is I want, I don't want any users at the beginning). Ok. But, if I try to create a RESTRICTED user I cannot do this (from User accounts, in control panel). I need to create 1 more administrator in order to create a restricted user and this is not the desired. How can I modify this behavior? That is, I want to have the Administrator user as the ONLY administrator on the system, but I want Windows allows me to add the restricted accounts (without the extra administrator account).

Is this possible? Any registry tweak or administrative template?

Thanks very much for your help ;)

Edited by ponghy
Link to comment
Share on other sites


Lo.. I am not sure I understand u correctly but I will give it a go! :)

Adding another administrator can be done with scripting to WSH (vbscripting) easily. Then u can just add the admin with an alternative name an make him a part of the sec group Administrators. Restricted groups membership, can be done by creating a template with the MMC Security Tempates snap-in and exporting it to a .inf file. Once u have done this, u can run secedit to apply this .inf file at installation time.

Hope I got u right..

Keep truckin!

Link to comment
Share on other sites

Not exactly. I will explain more clear:

In unattended mode I have the following line in WINNT.SIF:

[Unattended]
UnattendSwitch = Yes

This makes me log on to the system as Administrator user (the 'real' Administrator). This is I want. But if I don't add any user with administration privileges, Windows don't let me add restricted users. Do you understand?

I know the Administrator user is special for Windows, but I want to use it as the only administrator on the system. And then, this Administrator will make the remaining restricted accounts... How to achieve this??

TIA :)

Edited by ponghy
Link to comment
Share on other sites

Coldfusion200: Thanks for replying... but no :(

I want to add restricted users MANUALLY, not in unattended mode. That is, I log on to the system as Administrator, and then MANUALLY I should be able to add restricted users... But as I said above, Windows don't let me add any restricted account without having an extra account with administration privileges ("other administrator").

:hello:

Link to comment
Share on other sites

Coldfusion200: Thanks for replying... but no :(

I want to add restricted users MANUALLY, not in unattended mode. That is, I log on to the system as Administrator, and then MANUALLY I should be able to add restricted users... But as I said above, Windows don't let me add any restricted account without having an extra account with administration privileges ("other administrator").

:hello:

it isnt just for unattended. it will work when windows is running too. try it, see if it solves you're problem

Link to comment
Share on other sites

Sorry for too many posts :blushing:

But, I don't want to add programatically restricted users. Any person using the Administrator account should be able to add a restricted user via Control Panel > User Accounts.

Now, I hope you understand my problem...

Link to comment
Share on other sites

Sorry for too many posts :blushing:

But, I don't want to add programatically restricted users. Any person using the Administrator account should be able to add a restricted user via Control Panel > User Accounts.

Now, I hope you understand my problem...

i understood it in the first place, but i dont know how to sort it, if it can be fixed without creating another admin account that is. i was providing you with a workaround

Link to comment
Share on other sites

I've just done an expt. in VMWare with my existing uA install. I remove the other admin acc leaving only the Admin acc. Then the Local Users and Groups would let me directly create a new account which turns out to be a Limited account.

The XP User Account applet still would not let me do it. I think this is by design. This limitation is not due to uA per se.

The Local Users and Groups, which can also be accessed from the classic User Account applet (for domain and W2k) and the net user command seem to be the only way.

Edited by Takeshi
Link to comment
Share on other sites

@ponghy :hello:

W2K Style user accounts snap-in lets you create restricted accounts without creating admin user first.

Type "control userpasswords2" in runbox or create shortcut to

%windir%\system32\control.exe userpasswords2

Eki :)

Edited by Eki
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...