Securing the Admin Account after install?

[chrigil]

Everyone has heard how you should secure the admin account after install etc and how you shouldn't use the Admin Account for everyday stuff but what exactly does this mean?

When I installed windows and it asked for a username (the screen with 4 or 5 text boxes to add users) I put in 'Chris' which is my name. Does this mean that when windows loads I am logged on with admin rights or not? (I don't get the option of logging in to the Chris account).

Is the Chris account the Admin account or not?

If so, should I create a new user with limited access called Fred for instance and then use this account every day until I need to install software etc?

Is this what is meant by not using an Admin account?

Thanks in advance,

Chris

 

[aquias]

Using the admin account or having admin access allows any program that tries to, to install. If you're using XP Home, I believe the first account you create has administrator privileges.

I would recommend creating a second account and utilize that for your "day to day" activities. This provides you with a greater amount of security vs spyware and malware in general.

 

[Papa4]

Yes, you are on the right track. WinXP Pro will create an
account during install of "Administrator" by default, with full admin privs.

I believe WinXP Home creates an account named "Owner" by
default with full admin privs.

Since hackers automatically try "Admin" and "Administrator"
when they are trying to break in, it is a good idea to open
the User Manager utility and rename these accounts I have mentioned above to something odd like "Chris2145". (Don't use your birth date or home address or phone number)

Then while still in the User Manager, create a new account
named Chris and give it full Admin privs. Log out of the Administrator account and log into the Chris account.
Set up the desktop, icons, printer, etc...and install any programs you need. THEN go back into the User Manager and
and make the Chris account a LIMITED account. Log completely out.

From then on use the limited Chris account to do your daily email and surfing from.

This will help protect your machine from malicious code, but
you still need the Firewall turned on, and a good Anti-Spy
ware program installed to keep the bad guys at bay.

I use Panda Platinum anti virus, and Spy Sweeper and am very pleased with them. There are others out there, so listen to what people say about them and pick one.

Papa4

 

[aquias]

As far as spyware/virus protection.

I'd recommend going with the following...

AVG (

http://www.grisoft.com)

Microsoft spyware Beta
Spyware Blaster

The above works quite well and is a completely free form of protection.

 

[linney]

When I installed windows and it asked for a username"

All the names you enter here will automatically be created as Administrators by Windows.

You can use the User Accounts in Control Panel to amend and configure each account.

User Accounts That You Create During Setup Are Administrator Account Types

http://support.microsoft.com/default.aspx?scid=kb;en-us;293834&FR=1&PA=1&SD=HSCH

How To Create and Configure User Accounts in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;279783&FR=1&PA=1&SD=HSCH

For Security reasons do not use the Administrator or Administrators user account for surfing.

In Home the Administrator (built-in account) is accessible via Safe Mode only, in PRO you can login as the built-in Administrator account by not using the Welcome screen method or by pressing Ctrl+Alt+Del (twice).