Downgrading 'Admin User' to 'Limited User' in WinXP Pro

[nordlaw]

How do I take some users in a workgroup environment that have been operating from the original Admin account on their Windows XP Pro and downgrade them to limited users without losing all their profile settings?

I want to make the transition as smooth as possible for the user, but I need to secure a few machines that weren't set up properly.

Thanks in advance!

 

[boshuter]

Just go to control panel/user accounts and if you are logged in as administrator you can change any accounts to limited. Very easy.... unless I'm missing something

 

[nordlaw]

Thanks for the reply.

I don't believe you can remove the initially installed admin account from the admins group, even if you create another admin to do it from - that's my problem.

And, I've tried copying the admin's profile to the new user, but something isn't working there either - seems to corrupt the new user's profile.

 

[boshuter]

I just had a customers pc in and it was full of spyware and all kinds of crap. They had 4 user accounts and all of them were admins, all I did was log in under one of the accounts and changed all the other to "limited". It didnt' change any of their profiles as far as I could tell.

 

[nordlaw]

Thanks again.

You must have logged on to the built-in (original) admin account. I just tried it, and XP won't let you remove the built-in admin from the administrators group.

That's my issue, because the only account ever set up on some of these is the original built-in, and I can't downgrade that account.

I can change the name, under group policy, and the password of the admin account; then I can create a new account for them to use, but they'll lose all their preferences.


EDIT: I think I figured it out.

1. Create the limited user account.
2. Create another, temporary admin account (can't copy profile from currently logged in account).
3. Log into the temp admin account; from system properties, advanced, user profiles, copy profile from built-in admin, assign permissions to new limited user account.
4. Remove temp admin account.

That seemed to work on a test machine - I'll try it on the real deal and let you know.

 

[KB]

Originally posted by: nordlaw

And, I've tried copying the admin's profile to the new user, but something isn't working there either - seems to corrupt the new user's profile.

How were you copying the profile? Where you using the "System properties", "Advanced", "User Profile" Applet? You can use that Applet to grant other users access to the administrator profile too.

Another choice would be to use the File and Settings transfer wizard under Accessories and instead of copying it to a new computer you can export and import on the same computer with different accounts.

Or write a script that copies the needed preferences for one profile to another.

 

[nordlaw]

Okay, I think I edited while you were replying.

Was it necessary for me to grant permissions, as well? I did, because my first attempt, without doing so, didn't seem to work.

I hadn't considered the FASTWIZ.

Thanks.