New
#1
Seeking advice on user account structure for a semi public laptop
I have been asked to help set-up a laptop to be used in a semi-public but controlled environment.
Not had sight of machine (and there may be more to follow) so do not know version .. but first thing I want to do is either a 'clean install', 'in place upgrade' or whatever method you think is best to bring machine(s) up to current spec.
I would like opinions as to the most practical/ functional user account structure based on my first thoughts below ....
Obviously ...
Bios very strong password...
Built-in admin enabled with very strong password...
Then.....
- A 'spare' admin account just to use that password as a temporary way for a manger approve changes instance by instance....
- Perhaps an open/public basic user account with appropriate warnings about public nature of it ... simply for on-the-fly assistance, demonstrations and anything non important.
- Then a small collection of 'pre-created' basic / restricted user accounts without ability to change password (that to be managed by admin level user account). I gather "Bree" got past16 thousand plus before Windows gave up ! This case will be far fewer !
- I will create an encrypted database for record keeping (probably KeePass) which will be held by designated persons / managers / administrators.
So...
- Should there be a 'master' MS online user account or 'local'?
- Should all other accounts be 'local'?
- These user accounts may well be short-term or temporary and need to be disconnected from any other previously created external accounts or login methods. Privacy for all parties involved is the key here.
- It seems that parental controls are seen as insufficient by some ... what is your opinion?
- And that 'family groups' are seen as difficult ... see last post in this older thread....
Bypass Family Settings by conversion to Local Account
The owners wish to allow access to specific people but be able to control or restrict any 'unapproved' use.
It is especially important that each basic user account cannot access or view the other user accounts in any way.
My assumption is that a basic user account with parental controls may not quite be enough ?
I am aware that I will have to address data protection issues but that is beyond the scope of this post at the moment.
Thank you and have a peaceful Christmas
Paul