|
Do you know whether you're using a Limited or Administrator user account right now? You should!
If you're working in a Limited User account, a malicious software attack can only result in minor changes that are unlikely to have serious effects. But if the attack happens while you're in an Administrator account, the attacker can gain full access to your computer and the results can range from annoying to catastrophic. Knowing which kind of account to choose at the right time is an excellent way to help protect your computer, and setting it up is not as hard as it might sound.
How to tell which type of account you're using now
If you're using Microsoft Windows XP, an easy way to tell whether you're using a Limited User or Administrator user account is to move your pointer over the clock on the bottom right of your screen. Right-click the clock, and then click Adjust Date/Time.
| • |
If you're using a Limited User account, you will get a message reading "You do not have the proper privilege level to change System Time." |
| • |
If you are using an Administrator account, a small window will open with controls that enable you to change the time and date on your computer. |
Using Administrator and Limited User accounts
Administrator account: The default type of account for Microsoft Windows XP. This account is designed to let you:
| • |
Set up your computer and install your initial software and hardware. |
| • |
Set preferences and make repairs. |
| • |
Add new programs and hardware, such as music-sharing software or a printer. |
Limited User account: Provides access to your computer's software functionality so you can use your computer to perform common, everyday activities. For example, in a Limited User account, you can use:
| • |
The Internet and e-mail programs |
| • |
Productivity programs such as Microsoft Word, Microsoft Excel, and Microsoft PowerPoint |
| • |
Entertainment programs that let you play music and video, edit photographs, and much more |
Note: There is also a Guest account available, which has most of the functions of a Limited User account but it is not password-protected, so a guest user can quickly log on and off again to perform simple tasks, such as checking e-mail or browsing the Internet.
Setting up a Limited User account
Administrator accounts are not designed for casual use—everyone who uses your computer should be set up with a Limited User account that they can use for regular activities such as word processing or surfing the Web. If you suffer an attack from malicious software, the attacker can gain access to your computer through the account that you're in—limited accounts give the attacker limited access, and administrator accounts give the attacker administrator access.
You can set up as many Limited User accounts as you need for yourself, your family, and even friends.
|
1. |
To set up a Limited User account: Be sure you're logged on as Administrator. |
|
2. |
Click Start, and then click Control Panel. |
|
3. |
Click User Accounts, and then under Pick a Task, click Create a new account. |
|
4. |
On the Action menu, click New User. |
|
5. |
Type the user's name, and then click Next. |
|
6. |
Under Pick an account type, click Limited User, and then click Create account. |
Fast User Switching
Windows XP provides a feature called Fast User Switching that lets you switch between users without closing programs or shutting down your computer. This enables you to switch to the Administrator account for a moment if you want to make modifications or need to install new software and then switch back to Limited User again without interrupting either process.
Setting up Fast User Switching
Your computer will need to be running Windows XP, have at least one Limited User account already set up, and not be part of a network domain. (If you don't know what a network domain is, you're probably not part of one.) Then:
|
1. |
Click Start, click Control Panel, and then click User Accounts. |
|
2. |
Click Change the way users log on or off. |
|
3. |
Select the Use Fast User Switching check box.
(Note: You may need to select the Use the Welcome Screen check box to enable the User Fast User Switching check box.) |
|
4. |
Click Apply Options. |
Using Fast User Switching
Now that you're set up, you can switch back and forth as often as you like when you:
|
1. |
Click Start, and then click Log Off (or press the Windows logo key + L). |
|
2. |
Click Switch User. |
|
3. |
Click the user account that you want to activate. |
Note: Some computer games will not start correctly when you're using fast user switching—the game requests that the original disk be placed in the drive, even if it is already present. For a software remedy for this issue, download the SafeDisc Windows XP Fix for Microsoft Games.
In-depth: on user accounts
Q: Am I at risk of getting a virus, spyware, or other malicious software if I go onto the Internet in an Administrator account, but don't download anything?
A: There are many ways for malicious software to get onto your computer without any action on your part. The recommended way to surf the Internet is in a Limited User account.
Q: My kids play online games that require them to be in Administrator mode. How can I let them play their games more safely?
A: If you decide you or your children should log on to gaming sites that require you to be in Administrator mode, it's important to carefully consider the following:
| • |
The game should come from a trusted source (for example, MSN Games). "Free" software downloads that some game providers require you to download can also come with malicious software secretly attached to it. (This also includes "plug-ins" designed by third-party companies for use with Microsoft ActiveX technology.) For more information, read our articles about choosing online stores for downloading music and videos, and using peer-to-peer software. |
| • |
Leave other Web browsing until later. When you log on to a gaming site with your Administrator account, you should only play the game, and not visit any other Web sites. When you want to surf the Internet, it's best to log off from the Administrator account and log on to your Limited User account. |
| • |
Be the Administrator for your children. You can also keep your Administrator password private from children, and allow online gaming as an Administrator only under adult supervision and the understanding that you're using the account online for the game only. |
Q: Is there a way to set up an account with just enough Administrator privileges to let me play games but limit my risk?
A: To a degree, but it requires quite a bit of complex work and software additions to make the program function properly, and neither are certified by Microsoft. The recommended way to use online games that require your Administrator account is still to play only games from trusted sources, and use Administrator for playing the games only—no Web surfing. |