Built in Administrator - account security questions?


  1. Posts : 12
    Windows 10 PRO
       #1

    Built in Administrator - account security questions?


    After a couple of weeks of using Windows 10, I finally have the OS installed, tweaked and personalized.
    The last thing on the list is to tighten-up the default security account/settings of Windows 10 on the PC. In the past I attempted to do this w/ Windows 7 with nightmarish "Permission," corrupt "User-Profile" results.

    There are currently two accounts on the PC:
    My main account "seedless" [Standard User - Local Account] Windows 10 default settings. No password. Minimal permissions issues (so-far?) on my different HDD's.
    "Built-in "Administrator" [Disabled - never used - no password has been set] I understand that this is a emergency account, and would prefer never having to use it!
    I don't envision having a MS account in the future. My next project is going to be Hyper-V (do I need a MS acct. for that?).

    If I re-name and add a password to the "Built-in "Administrator" account, will I forever have to look at it when I log on the the PC? Will the re-naming change the SID? How have other members done it?

    I've read through the tutorials:
    Administrator account - Enable or Disable in Windows 10
    Account Type - Change in Windows 10
    Permissions - Change Owner of File, Folder, Drive, or Registry Key
    Permissions - Allow or Deny Access to Users and Groups

    As you can see from what I've listed above. I terrified of future "permission" issues. I have a few different HDD's with music, tv, movies, etc. that were created with old Windows 7, using different programs when they were originally created.

    Are there any other recommended guides for the security questions I have without getting to tin-foil-hattty? Any ideas?

    I would prefer to use gpedit.msc to set the password ansd security settings? So after a fresh install down the road, I would be able to just restore the old settings with this guide Group Policy Settings - Backup and Restore and carry-on. Would this be possible?
      My Computer


  2. Posts : 5,169
    64bit Win 10 Pro ver 21H2
       #2

    The built-in admin account is for emergency use and normally would not be needed. However, you do need at least one administrator user on your PC so that you can make changes. I see that you have set yourself as a standard user which means that you must have downgraded your original account from an administrator to a standard user. This will almost certainly give you problems in the future.

    If I am correct, then you will need to create a new user as an administrator and you will only be able to do this by temporarily enabling your built-in admin account as shown in the tutorial you have been reading.
      My Computers


  3. Posts : 12
    Windows 10 PRO
    Thread Starter
       #3

    Luckily the main account is still listed in the Administrator group


    I've posted for advice here before I make any account changes whatsoever.

    It sounds like I may have error-ed in listing my main account as "standard user" in the OP? Luckily the main account is still listed in the Administrator group

      My Computer


  4. Posts : 5,169
    64bit Win 10 Pro ver 21H2
       #4

    OK, then you are in good shape! I would not change the built in admin account at all, leave it disabled.

    A Microsoft account can be useful if you want to sync settings between computers, use OneDrive and use MS Office, I use one but I can see that you might prefer to steer clear of it.

    Hyper V does not require an MS account, have a look at this tutorial: Hyper-V virtualization - Setup and Use in Windows 10

    In my view a lot of the concerns over security issues and privacy in W10 are exaggerated but have a look at some of the tutorials and recommendations on this site.

    Start with: https://www.tenforums.com/tutorials/1...dows-10-a.html

    then look at some of the related tutorials mentioned at the end of the article.
      My Computers


  5. Posts : 12
    Windows 10 PRO
    Thread Starter
       #5

    philc43 said:
    OK, then you are in good shape! I would not change the built in admin account at all, leave it disabled.
    After stewing on this. And remembering my past wounds trying to lock down win7, I was leaning this way also.
    Thank you!

    A Microsoft account can be useful if you want to sync settings between computers, use OneDrive and use MS Office, I use one but I can see that you might prefer to steer clear of it.
    I've been using Dropbox on my devices for the last few years. The integration of OneDrive in Win10 seems pretty deep. I guess I could shift all my telemetry issues back on MS and stop using Dropbox.
    I really dislike the idea of having multiple profiles and accounts on "My-PC." Another project for another day.

    Hyper V does not require an MS account, have a look at this tutorial: Hyper-V virtualization - Setup and Use in Windows 10
    I've already browsed through Kari's Hyper-V thread. That's next weeks project.

    In my view a lot of the concerns over security issues and privacy in W10 are exaggerated but have a look at some of the tutorials and recommendations on this site.
    I've been happy with Win10 security so far.
    I would agree that the privacy issues have probably been over-blown on the web. With Android I already give all my info to Google (and Dropbox) anyway. Good or bad - it seems to be the general direction of tech. I just try to limit my personal exposure on the different company servers around around the world when it's simple, or convenient for me.

    Start with: https://www.tenforums.com/tutorials/1...dows-10-a.html

    then look at some of the related tutorials mentioned at the end of the article.
    Thank you for the link above. Going forward that's probably going to be the easiest method.

    Do you have any thoughts regarding this article: Accounts: Rename administrator account ?
    I do understand that the recommendation is mostly just placebo security.

    Thank you for your time and wisdom philc43
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:21.
Find Us




Windows 10 Forums