Limited user on XP SP2

  • Thread starter Thread starter uri.cohen
  • Start date Start date
U

uri.cohen

I've created a limited user account on an XP SP2 machine and this user
can do quite a lot of stuff there:
- Write to the root of C drive
- Write to 'program files' folder
- Write things to the GAC
- Install google toolbar
On my regular XP SP2 machine a limited user can't do any of the
above...

What do I'm missing? I've double checked it belongs only to the
'Users' group...
Is there some group-policy to disallow all the above? Is there a
magical 'limit limited users' configuration somewhere?

Thanks!
Uric
 
I've created a limited user account on an XP SP2 machine and this user
can do quite a lot of stuff there:
- Write to the root of C drive
- Write to 'program files' folder
- Write things to the GAC
- Install google toolbar
On my regular XP SP2 machine a limited user can't do any of the
above...

What do I'm missing? I've double checked it belongs only to the
'Users' group...
Is there some group-policy to disallow all the above? Is there a
magical 'limit limited users' configuration somewhere?

Thanks!
Uric
Click to expand...

Ok, solved it: I've had 'Everyone' in the Administrators group and in
this case the limited user is (implicitly) a member of this group,
even though you can't see it in either the user properties nor the
administrators group properties...

CU
 
Uric said:
Ok, solved it: I've had 'Everyone' in the Administrators group and in
this case the limited user is (implicitly) a member of this group,
even though you can't see it in either the user properties nor the
administrators group properties...

CU
Click to expand...

Hmm, good catch; thanks for the info.

Pop`
 
Back
Top