Why There is need for power user in Win 2000

Swordman

Member
Mar 5, 2000
72
0
0
i read a post before, someone say its better not to use administrator in windows 2000, better use a power user, why is that? since administrator can let you do anything with your computer.
 

noninterleaved

Senior member
Mar 25, 2001
628
0
0
That is the exact reason why.

If you are running as Power User, then you stand less of a chance of deleting or modifying critical system files. More importantly though... is that the software that YOU RUN won't be able to make these modifications either.

Basically, you want to give yourself only the access you need. Anything more than that is just dangerous.
 

Swordman

Member
Mar 5, 2000
72
0
0
aha, that is why, but since now i already registered as administrator how do i move all the shortcut and program files to the new power user? also if i register as a new user what category should i choose? power user? or just normal user? i want something that can give me most of the access beside of administrator.
 

HansXP

Diamond Member
Jun 1, 2001
3,093
0
0
Power User is best if you need to create an account besides Admin.

IMHO, if you have enough experience with Windows, you don't need to create an account besides the Admin for a single-user system. In my year and a half of using Windows 2000, I've always used the Admin account and never had a problem. The other school of thought on this is that you can never be too safe, and therefore should never use the Admin unless you have to. It's up to you to decide whether you need a Power User account.
 

Swordman

Member
Mar 5, 2000
72
0
0
the problem is when i create a new power user account, the desktop, shortcut and systray all become different, i wonder how to copy all of them from the adminstrator that i was using.
 

HansXP

Diamond Member
Jun 1, 2001
3,093
0
0
Go to C:\Documents And Settings\Administrator. Inside the My Documents folder will be your files. Inside the Desktop folder will be your desktop files/shortcuts. Inside of Favorites folder will be your favorites. Inside your Start Menu directory will be all of your Start Menu items. You just need to copy all of this stuff to your new account's folder, which is located at C:\Documents And Settings\NewAcctName (where NewAcctName is your user name)
 

Swordman

Member
Mar 5, 2000
72
0
0
the problem is not all the shortcuts work, some of them just doesn't work if i copy them like that. i guess i am just going to format again.
 

HansXP

Diamond Member
Jun 1, 2001
3,093
0
0
Oh, sorry, I guess I didn't understand before. What does Windows say when you try to execute a shortcut?
 

whalen

Golden Member
Dec 5, 2000
1,176
0
0
Also, windows will run better in Power User mode because all the administrative services won't be run. Thats what alot of people who game in 2k do...make a power user profile that will use less memory at startup.
 

Nevo

Banned
May 28, 2001
696
0
0
Swordsman, if your box is for personal use, the only reason to run as non-admin, in general, is to protect yourself from your own stupidity. Noninterleaved makes an excellent point: if you run a malicious program that tries to FUBAR your operating system, and you run it as administrator, it'll likely succeed. If you're logged in as a User, then the program runs with your credentials and won't be able to alter the kernel, device drivers, drives, etc.

Power Users are really best for business enterprises where you want techs to be able to do some tasks (such as adding a printer) but not have full control over, say, the company database server. :)

Power Users really don't have much place in the home world.

I run W2K as a member of the Users group. The last time I fat-fingered a command and nuked my OS, I convinced myself that always running as admin might not be a good idea.
 

Swordman

Member
Mar 5, 2000
72
0
0
i use the win 2000 at home, so will power user give me enough freedom or power to control my computer? because i certainly don't want too much restrictions
 

Psychoholic

Elite Member
Oct 11, 1999
2,704
0
76


<< the problem is not all the shortcuts work, some of them just doesn't work if i copy them like that. i guess i am just going to format again. >>


Are you using NTFS??? Sounds like you just need to check your permissions. When you copy from one user account to another the user the shortcuts are copied to don't have permission to access them. You can change several shortcuts at once by going to the folder containing them and go to the security tab in properties. Click onthe advanced buttton and select &quot;Reset permissions on all child objects&quot;.

Nevo


<< Swordsman, if your box is for personal use, the only reason to run as non-admin, in general, is to protect yourself from your own stupidity. >>


That's not true. You can also protect yourself from certain viruses by running a non-administrator account.



<< i use the win 2000 at home, so will power user give me enough freedom or power to control my computer? because i certainly don't want too much restrictions >>


The power user account will be fine for most users for day to day operations. If you need to use the Adminstrator account you don't have to log out, just hold down shift and right click the shortcut/executible. Then select runas.
 

Nevo

Banned
May 28, 2001
696
0
0


Psychoholic


<< Swordsman, if your box is for personal use, the only reason to run as non-admin, in general, is to protect yourself from your own stupidity.

That's not true. You can also protect yourself from certain viruses by running a non-administrator account.
>>




Um... yeah... did you read the next sentence that I wrote? :)




<< Noninterleaved makes an excellent point: if you run a malicious program that tries to FUBAR your operating system, and you run it as administrator, it'll likely succeed. If you're logged in as a User, then the program runs with your credentials and won't be able to alter the kernel, device drivers, drives, etc. >>



A virus is &quot;a malicious program.&quot;

Either way, we're splitting hairs and both saying the same thing. Swordman, Psychoholic has it right. Power User should be just fine, and you can use Runas when you need admin access.
 

Tarfin

Senior member
Jun 14, 2001
402
0
0
You shouldn't log in as administrator unless you have a specific need to. Scripts and virii will have full access to your machine and that isn't something you want.
 

Psychoholic

Elite Member
Oct 11, 1999
2,704
0
76
Sorry, Nevo, don't know why I didn't catch that before. I guess I was used to banging my head against the wall trying to explain this last time it came up and must have missed that.
 

Hecky

Banned
Dec 15, 2000
105
0
0
Tarfin just pointed out the single most significant reason to not run in Administrator mode on a regular basis...especially when connected to the web. Enabling Administrator privileges makes your machine much more vulnerable to attack from the outside.
 

Nevo

Banned
May 28, 2001
696
0
0
Hecky, there's no such thing as &quot;enabling administrator privileges.&quot;

And logging in as administrator doesn't make your machine more succeptible to outside attack. An attack from the outside has nothing whatsoever to do with who's logged on to the machine (or if no one is logged on at all.)

Logging on as administrator does, however, make your machine more succeptible to &quot;user stupidity&quot; attacks such as running viruses, fat fingering a command, running the wrong program, etc.
 

Psychoholic

Elite Member
Oct 11, 1999
2,704
0
76


<< Hecky, there's no such thing as &quot;enabling administrator privileges.&quot; >>


While I think Hecky's response was just a bad choice of words I will say this, actually you can &quot;enable&quot; Administrator priviledges. By using Group Policies you can enable a user or power user account to where it can perform administrative tasks.

Of course doing so opens the same vulnerabilites as using the Administrator account full-time depending on what you enable.
 

noninterleaved

Senior member
Mar 25, 2001
628
0
0
Swordman... here is what you need to do if you really want to transfer the whole profile over... there may be a quicker way or a utility that will do this... but here we go

1.) log in as the admin account
2.) copy docs&amp;settings/<admin> to docs&amp;settings/<poweruser>
3.) open up your registry
4.) go to hkey_current_config
5.) find the software settings for programs you want to use and copy them into the profile
for the power user. note this is a major pain because users are named using GUIDS in system registry. This is a major hack, and might kill your system, so back up the registry first.


good luck.

Here is another thing you might want to experiment with.

If you right-click on my computer and go to &quot;properties&quot;... then go to &quot;user profiles&quot;. there are all of your profiles. Try selecting the admin one, and hit &quot;copy to&quot; and you can copy it to a new directory and change the permissions. I think this only affects files, and not registry settings though.