Is a standard user account necessary for tight security and home user?

Page 6 of 7 FirstFirst ... 4567 LastLast

  1. Posts : 2,979
    Windows 11
    Thread Starter
       #51

    Is there anything around that details what the default permissions should be for a standard user?
      My Computer


  2. Posts : 2,979
    Windows 11
    Thread Starter
       #52
      My Computer


  3. Posts : 2,979
    Windows 11
    Thread Starter
       #53

    As far as I can tell the "Users" folder is the only folder that is being "shared" and has been affected. As per the following screens, these windows come from the "Sharing" tab - "Advanced Sharing" in the "Users" folder properties not the "Security" tab.

    I'm guessing that I will remove all of the "Allow" permissions for "Everyone" and then untick the "Share this folder".

    Is a standard user account necessary for tight security and home user?-user_folder_permissions_7.png
      My Computer


  4. Posts : 16,325
    W10Prox64
       #54

    Honestly, this is a sketchy area for me, so I will bow out, in the hopes that someone else well-versed in this can chime in.
      My Computer


  5. Posts : 2,979
    Windows 11
    Thread Starter
       #55

    simrick said:
    Honestly, this is a sketchy area for me, so I will bow out, in the hopes that someone else well-versed in this can chime in.
    That's OK. There's actually not a lot of info regarding this anywhere and seems to be something a lot of people aren't certain on.

    According to the links I've posted, Win 7 had an issue where in if you created a Homegroup or set up Public sharing the Users folder was automatically fully shared and if you removed the Homegroup the Users folder remained shared. Maybe Win 10 has inherited the same issue?

    At this stage I'm only guessing that a Homegroup creation has set this up but it's the only thing that seems feasible.
      My Computer


  6. Posts : 16,325
    W10Prox64
       #56

    Kol12 said:
    That's OK. There's actually not a lot of info regarding this anywhere and seems to be something a lot of people aren't certain on.

    According to the links I've posted, Win 7 had an issue where in if you created a Homegroup or set up Public sharing the Users folder was automatically fully shared and if you removed the Homegroup the Users folder remained shared. Maybe Win 10 has inherited the same issue?

    At this stage I'm only guessing that a Homegroup creation has set this up but it's the only thing that seems feasible.
    You could be right.
      My Computer


  7. Posts : 2,979
    Windows 11
    Thread Starter
       #57

    Guys are you sure the default administrator account can be converted to a standard account? I just have this that I'll
    quote:

    "I'm not sure what best practices you've been reading, but unless something drastic changed in Windows 10 that I missed, the built-in administrator account (the one with a RID/SID ending in -500), can not be changed to a "standard user" account. It will always have administrative permissions."


    If it did continue to have administrative permissions I wouldn't be getting prompted for the admin password would I?


    Edit: I think he his referring to the "built in administrator" account, the one that you have to activate AFAIK.
    Last edited by Kol12; 29 Sep 2016 at 03:13.
      My Computer


  8. Posts : 2,979
    Windows 11
    Thread Starter
       #58

    Would you guys mind sharing what your permissions are for the users folder?

    Do you have a "Everyone" listed on the security tab?

    Under the sharing tab - advanced sharing do you have a tick in the "Share this folder" box?
      My Computer


  9. Posts : 2,979
    Windows 11
    Thread Starter
       #59

    Is there by any chance you guy's are using Public networks? This could play a big part in what folders are shared by default...
      My Computer


  10. Posts : 16,325
    W10Prox64
       #60

    Kol12 said:
    Guys are you sure the default administrator account can be converted to a standard account? I just have this that I'll
    quote:

    "I'm not sure what best practices you've been reading, but unless something drastic changed in Windows 10 that I missed, the built-in administrator account (the one with a RID/SID ending in -500), can not be changed to a "standard user" account. It will always have administrative permissions."


    If it did continue to have administrative permissions I wouldn't be getting prompted for the admin password would I?


    Edit: I think he his referring to the "built in administrator" account, the one that you have to activate AFAIK.
    The built-in hidden administrator account is an admin-level account and can not be changed.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:32.
Find Us




Windows 10 Forums