HelpAssistant and SUPPORT user accounts -> ok to delete?

  • Thread starter Thread starter XP Guy
  • Start date Start date
X

XP Guy

What's the downside of deleting the "HelpAssistant" and
"SUPPORT_numbers" accounts from my XP-pro system(s) ?

I mean, do I _REALLY_ need them?
 
XP said:
What's the downside of deleting the "HelpAssistant" and
"SUPPORT_numbers" accounts from my XP-pro system(s) ?

I mean, do I _REALLY_ need them?

http://support.microsoft.com/kb/947296

"The Support_388945a0 account enables Help and Support Service
interoperability with signed scripts. This account is primarily used
to control access to signed scripts that are accessible from within
Help and Support Services. Administrators can use this account to
delegate the ability for an ordinary user, who does not have administrative
access over a computer, to run signed scripts from links embedded within
Help and Support Services."

http://support.microsoft.com/kb/300692/EN-US

"The Novice computer has a built-in local user account called HelpAssistant.
This account is disabled by default and has a randomly generated strong password.
The account has limited privileges and is used by the Expert to logon to
the Novice computer during the Remote Assistance session."

"The Novice Invites the Expert to Connect to Their Computer
When the Novice's computer creates the invitation file,
the following actions occur:

* The HelpAssistant account is enabled."

"When the Ticket Expires
Remote Assistance disables the HelpAssistant account and removes the Allow
logon through Terminal Services right in one hour. Remote Assistance also
turns off any port mapping on UPnP-compliant NAT devices."

HelpAssistant is also named along with "mebroot" malware. Which is
another angle to consider, if it won't behave itself.

http://forums.pcworld.com/index.php?/topic/64582-helpassistant-folder-keeps-appearing/

Paul
 
"The Support_388945a0 account enables Help and Support Service
interoperability with signed scripts. This account is primarily
used to control access to signed scripts that are accessible
from within Help and Support Services."
"The Novice computer has a built-in local user account called
HelpAssistant. This account is disabled by default and has a
randomly generated strong password. The account has limited
privileges and is used by the Expert to logon to the Novice
computer during the Remote Assistance session."

If I routinely disable the "Help and Support Service", am I therefore
making the Support_388945a0 account redundant or irrelavent?

What is this service anyways? Is this a $paid service where you call up
microsoft and fork over your credit-card number to get some interactive
help with your computer?

The HelpAssistant account I can see nuking (at least in my case).
HelpAssistant is also named along with "mebroot" malware. Which is
another angle to consider, if it won't behave itself.

So basically, for your average "power user" in a home or soho situation,
there's no real downside to deleting those 2 accounts......
 
| So basically, for your average "power user" in a home or soho situation,
| there's no real downside to deleting those 2 accounts......

I don't have either of those users on my system to begin
with. I just have my account, guest and admin. I would
never enable remote anything, either, for security reasons.
But some people do find it convenient to let Dell, a PC
shop, or others log on remotely to fix their PC. Do you
really need to remove the accounts? Can't you just disable
Remote Desktop, Remote Registry and file sharing?
 
Mayayana said:
I don't have either of those users on my system to begin with.

The XP that I have came from a System Builder CD - not from a name-brand
installation or retail CD.

I'm thinking that either XP-SP2 had these accounts by default, or they
came as part of upgrading to SP3.
I just have my account, guest and admin. I would
never enable remote anything, either, for security reasons.

If you think it's possible to install XP without these remote assistance
or help services being set to automatic by default, I'd like to hear
how. I'm always disabling when I'm got a fresh XP install up and
running.
Do you really need to remove the accounts? Can't you just disable
Remote Desktop, Remote Registry and file sharing?

I figure the fewer accounts, the better.
 
| If you think it's possible to install XP without these remote assistance
| or help services being set to automatic by default, I'd like to hear
| how. I'm always disabling when I'm got a fresh XP install up and
| running.
|

There isn't any shortcut that I know of. Like you,
I clean up services after an install. One could write
a script to automate the process, (services can be
changed via WMI or via the Registry directly) but
that would only make sense for mass installing.
 
If you think it's possible to install XP without these remote assistance
or help services being set to automatic by default, I'd like to hear
how. I'm always disabling when I'm got a fresh XP install up and
running.

I've seen various stripped-down versions, presumably for a routine
application to render at some selectable component level to the
install or customization process -- all of course from dedicated
interests outside normal provisions Microsoft derives from its
products;- within which compliance, conversely, and at some other
abstract layering to means "hardening" processes, no less, are found
readily enough available in FAQ and other presentment forms for a
operable level of understanding or competency. Personally, past what
results I'm able to determine, as well lacking a fuller sense of
understanding in terms of remote networking, ie assistance and support
functions, thankfully and in large I deferred to a latter mention of
specialists;. . .though somewhat stymied in a stigma where I've
indulgently preferred placing my feet, up alongside the desktop
monitor -- having never actually bought into secure networking,
passwords, filesharing, or much else regarding computers not
physically or so in placed for domesticity;. . .the inherent bias,
being, a discrepancy of preclusion [upon a limited but tangible number
of computers operated simultaneously] largely for all but rudimentary
streaming forms, related attendant platforms, and all shared resources
similarly not within cognizant form I'm first able to isolate from all
outside contact. To an end, if ever were I permanently to shut off my
modem, I should then know exactly what I can, or not, do within a
reasonable assumption, of course, a hardware platform permits. Purist
reductivism if considered from a vantage of computer programs first
offered as applicable to constraints normally outside budget
considerations, modems then being a speed-constrained restriction to
determinate aims since vastly amplified over a greater apportionment
of marketing and business models for expanding proprietary control
theorems, to a presumption, as it were, indeed I ought buy into their
future interests.
 
So basically, for your average "power user" in a home or soho situation,
there's no real downside to deleting those 2 accounts......

No real upside either, as far as I can tell.
 
If you think it's possible to install XP without these remote assistance
or help services being set to automatic by default, I'd like to hear
how. I'm always disabling when I'm got a fresh XP install up and
running.

I've seen various stripped-down versions, presumably for a routine
application to render at some selectable component level to the
install or customization process -- all of course from dedicated
interests outside normal provisions Microsoft derives from its
products;- within which compliance, conversely, and at some other
abstract layering to means "hardening" processes, no less, are found
readily enough available in FAQ and other presentment forms for a
operable level of understanding or competency. Personally, past what
results I'm able to determine, as well lacking a fuller sense of
understanding in terms of remote networking, ie assistance and support
functions, thankfully and in large I deferred to a latter mention of
specialists;. . .though somewhat stymied in a stigma where I've
indulgently preferred placing my feet, up alongside the desktop
monitor -- having never actually bought into secure networking,
passwords, filesharing, or much else regarding computers not
physically or so in placed for domesticity;. . .the inherent bias,
being, a discrepancy of preclusion [upon a limited but tangible number
of computers operated simultaneously] largely for all but rudimentary
streaming forms, related attendant platforms, and all shared resources
similarly not within cognizant form I'm first able to isolate from all
outside contact. To an end, if ever were I permanently to shut off my
modem, I should then know exactly what I can, or not, do within a
reasonable assumption, of course, a hardware platform permits. Purist
reductivism if considered from a vantage of computer programs first
offered as applicable to constraints normally outside budget
considerations, modems then being a speed-constrained restriction to
determinate aims since vastly amplified over a greater apportionment
of marketing and business models for expanding proprietary control
theorems, to a presumption, as it were, indeed I ought buy into their
future interests.

WTF?
 
GMAN said:
If you think it's possible to install XP without these remote assistance
or help services being set to automatic by default, I'd like to hear
how. I'm always disabling when I'm got a fresh XP install up and
running.
I've seen various stripped-down versions, presumably for a routine
application to render at some selectable component level to the
install or customization process -- all of course from dedicated
interests outside normal provisions Microsoft derives from its
products;- within which compliance, conversely, and at some other
abstract layering to means "hardening" processes, no less, are found
readily enough available in FAQ and other presentment forms for a
operable level of understanding or competency. Personally, past what
results I'm able to determine, as well lacking a fuller sense of
understanding in terms of remote networking, ie assistance and support
functions, thankfully and in large I deferred to a latter mention of
specialists;. . .though somewhat stymied in a stigma where I've
indulgently preferred placing my feet, up alongside the desktop
monitor -- having never actually bought into secure networking,
passwords, filesharing, or much else regarding computers not
physically or so in placed for domesticity;. . .the inherent bias,
being, a discrepancy of preclusion [upon a limited but tangible number
of computers operated simultaneously] largely for all but rudimentary
streaming forms, related attendant platforms, and all shared resources
similarly not within cognizant form I'm first able to isolate from all
outside contact. To an end, if ever were I permanently to shut off my
modem, I should then know exactly what I can, or not, do within a
reasonable assumption, of course, a hardware platform permits. Purist
reductivism if considered from a vantage of computer programs first
offered as applicable to constraints normally outside budget
considerations, modems then being a speed-constrained restriction to
determinate aims since vastly amplified over a greater apportionment
of marketing and business models for expanding proprietary control
theorems, to a presumption, as it were, indeed I ought buy into their
future interests.

WTF?

http://en.wikipedia.org/wiki/Word_salad

Paul
 
Do you really need to remove the accounts? Can't you just disable
Remote Desktop, Remote Registry and file sharing?
I figure the fewer accounts, the better.

In a sense, quite amazing for how little costs need involve freedom
from subscription to service accounting models, provided tangible
means to decipher meaning from alternative interests;. . .a what-if
scenario, then, extensively to a better good of fewer account
alternatives, as it were, from a proffered salad, headers and come-on
links, typical to a course when perusing a buffet of import its
devotees, for lack of better context, ascribe as sundry for business
modeling terminology. Apart from evolving hardware platforms, dare I
say in confidence, over the years I've scarcely given the poor
bastards little else.
 
Back
Top