1.    24 Jun 2016 #1
    Join Date : Jul 2015
    Posts : 12
    Windows 10 PRO

    Built in Administrator - account security questions?


    After a couple of weeks of using Windows 10, I finally have the OS installed, tweaked and personalized.
    The last thing on the list is to tighten-up the default security account/settings of Windows 10 on the PC. In the past I attempted to do this w/ Windows 7 with nightmarish "Permission," corrupt "User-Profile" results.

    There are currently two accounts on the PC:
    My main account "seedless" [Standard User - Local Account] Windows 10 default settings. No password. Minimal permissions issues (so-far?) on my different HDD's.
    "Built-in "Administrator" [Disabled - never used - no password has been set] I understand that this is a emergency account, and would prefer never having to use it!
    I don't envision having a MS account in the future. My next project is going to be Hyper-V (do I need a MS acct. for that?).

    If I re-name and add a password to the "Built-in "Administrator" account, will I forever have to look at it when I log on the the PC? Will the re-naming change the SID? How have other members done it?

    I've read through the tutorials:
    Administrator account - Enable or Disable in Windows 10
    Account Type - Change in Windows 10
    Permissions - Change Owner of File, Folder, Drive, or Registry Key
    Permissions - Allow or Deny Access to Users and Groups

    As you can see from what I've listed above. I terrified of future "permission" issues. I have a few different HDD's with music, tv, movies, etc. that were created with old Windows 7, using different programs when they were originally created.

    Are there any other recommended guides for the security questions I have without getting to tin-foil-hattty? Any ideas?

    I would prefer to use gpedit.msc to set the password ansd security settings? So after a fresh install down the road, I would be able to just restore the old settings with this guide Group Policy Settings - Backup and Restore and carry-on. Would this be possible?
      My ComputerSystem Spec
  2.    24 Jun 2016 #2
    Join Date : Nov 2015
    Posts : 2,860
    64bit Win 10 Pro ver 1709 Build 16299.64

    The built-in admin account is for emergency use and normally would not be needed. However, you do need at least one administrator user on your PC so that you can make changes. I see that you have set yourself as a standard user which means that you must have downgraded your original account from an administrator to a standard user. This will almost certainly give you problems in the future.

    If I am correct, then you will need to create a new user as an administrator and you will only be able to do this by temporarily enabling your built-in admin account as shown in the tutorial you have been reading.
      My ComputersSystem Spec
  3.    24 Jun 2016 #3
    Join Date : Jul 2015
    Posts : 12
    Windows 10 PRO
    Thread Starter

    Luckily the main account is still listed in the Administrator group


    I've posted for advice here before I make any account changes whatsoever.

    It sounds like I may have error-ed in listing my main account as "standard user" in the OP? Luckily the main account is still listed in the Administrator group

      My ComputerSystem Spec
  4.    24 Jun 2016 #4
    Join Date : Nov 2015
    Posts : 2,860
    64bit Win 10 Pro ver 1709 Build 16299.64

    OK, then you are in good shape! I would not change the built in admin account at all, leave it disabled.

    A Microsoft account can be useful if you want to sync settings between computers, use OneDrive and use MS Office, I use one but I can see that you might prefer to steer clear of it.

    Hyper V does not require an MS account, have a look at this tutorial: Hyper-V virtualization - Setup and Use in Windows 10

    In my view a lot of the concerns over security issues and privacy in W10 are exaggerated but have a look at some of the tutorials and recommendations on this site.

    Start with: https://www.tenforums.com/tutorials/1...dows-10-a.html

    then look at some of the related tutorials mentioned at the end of the article.
      My ComputersSystem Spec
  5.    24 Jun 2016 #5
    Join Date : Jul 2015
    Posts : 12
    Windows 10 PRO
    Thread Starter

    Quote Originally Posted by philc43 View Post
    OK, then you are in good shape! I would not change the built in admin account at all, leave it disabled.
    After stewing on this. And remembering my past wounds trying to lock down win7, I was leaning this way also.
    Thank you!

    A Microsoft account can be useful if you want to sync settings between computers, use OneDrive and use MS Office, I use one but I can see that you might prefer to steer clear of it.
    I've been using Dropbox on my devices for the last few years. The integration of OneDrive in Win10 seems pretty deep. I guess I could shift all my telemetry issues back on MS and stop using Dropbox.
    I really dislike the idea of having multiple profiles and accounts on "My-PC." Another project for another day.

    Hyper V does not require an MS account, have a look at this tutorial: Hyper-V virtualization - Setup and Use in Windows 10
    I've already browsed through Kari's Hyper-V thread. That's next weeks project.

    In my view a lot of the concerns over security issues and privacy in W10 are exaggerated but have a look at some of the tutorials and recommendations on this site.
    I've been happy with Win10 security so far.
    I would agree that the privacy issues have probably been over-blown on the web. With Android I already give all my info to Google (and Dropbox) anyway. Good or bad - it seems to be the general direction of tech. I just try to limit my personal exposure on the different company servers around around the world when it's simple, or convenient for me.

    Start with: https://www.tenforums.com/tutorials/1...dows-10-a.html

    then look at some of the related tutorials mentioned at the end of the article.
    Thank you for the link above. Going forward that's probably going to be the easiest method.

    Do you have any thoughts regarding this article: Accounts: Rename administrator account ?
    I do understand that the recommendation is mostly just placebo security.

    Thank you for your time and wisdom philc43
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved Built-In Administrator Account Confusion
I run lusrmgr.msc > Users. On each account shown there, I right-click > Properties. This tells me that, aside from DefaultAccount, Guest, and HomeGroupUser$, I have an Administrator account that is built-in and disabled, and an account named Ray (my...
User Accounts and Family Safety
Solved The ...cannot be opened with built-in administrator account problem
I am trying to help my neighbor upgrade to windows 10 from 8 (we have downgraded once because of these problems, and if I can't get this solved soon, I will have to do it again). In 8 apparently, she was using the builtin admin account as her...
User Accounts and Family Safety
Solved Built in administrator account
I've been using Windows 10 since the auto update from 8.1 Everything has worked since then, but then this happens. Randomly in the last days, if I click on any app, I get prompted "App cannot be opened using the built-in administrator...
User Accounts and Family Safety
Windows 10 Built-in administrator account problems
i have a clean install of windows 10 pro, before i had a windows 7 and was using the built-in administrator account without problems. now in windows 10 i'm using the built in administrator account but facing problems 1) if i leave the "security...
User Accounts and Family Safety
Windows 10: only have built-in administrator account?
So yesterday i installed windows 10 on my computer and ofcourse i kept all my files. So i logged in to a microsoft account in order to use the app store. But when i looked, windows also used that microsoft account as email adres and name of my...
User Accounts and Family Safety
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 01:56.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums