Windows Vista Beta | WinVistaBeta.com - Message | Vista Hidden Administrator:Password Use

November 20, 2008  
Subject: Vista Hidden Administrator:Password Use
Group: microsoft.public.windows.vista.security
Date: 8/26/2008 11:29:09 PM
From: grinder [Email Address Protection]


The Hidden Administrator account has elevated priviledges that the
ordinary adminsitrator enitity/identity canot use.

Some of these prerogatives are important: such as to immunize the
computer against spy wear ala Spybot program. The 'administrator' title
for me as the sole user is NOT enough to do this task and I must
activate the hidden administrator to do it.

Rather that periodically activate the program to immunize once a new
bunch of threats are available, it is tempting to simply password
protect the hidden administrator account and let it run all the time but
with protection.

::IS THIS A SAFE AND LEGITIMATE COURSE OF ACTION [TO PASS WORD PROTECT
THE HIDDEN ADMINSTRATOR ACCOUNT] ASIDE FROM ANY ENHANCED SECURITY
ISSUES?::


Thanks for the input of the many geeks out there who contribute so
much.

/s/ grinder Vista Ultimate 32X systgem


--
grinder

Back
Subject: Re: Vista Hidden Administrator:Password Use
Group: microsoft.public.windows.vista.security
Date: 8/27/2008 6:18:21 AM
From: grinder [Email Address Protection]


Thank you very much. I am pleased to know I was mistaken. Again,
thanks.

Grinder


--
grinder

Back
Subject: Re: Vista Hidden Administrator:Password Use
Group: microsoft.public.windows.vista.security
Date: 8/27/2008 8:17:22 PM
From: Bruce Chambers [Email Address Protection]

grinder wrote:
> The Hidden Administrator account has elevated priviledges that the
> ordinary adminsitrator enitity/identity canot use.
>

Not true.

> Some of these prerogatives are important: such as to immunize the
> computer against spy wear ala Spybot program. The 'administrator' title
> for me as the sole user is NOT enough to do this task and I must
> activate the hidden administrator to do it.
>


Not so.


> Rather that periodically activate the program to immunize once a new
> bunch of threats are available, it is tempting to simply password
> protect the hidden administrator account and let it run all the time but
> with protection.
>
> ::IS THIS A SAFE AND LEGITIMATE COURSE OF ACTION [TO PASS WORD PROTECT
> THE HIDDEN ADMINSTRATOR ACCOUNT] ASIDE FROM ANY ENHANCED SECURITY
> ISSUES?::
>
>

"Safe" is a relative term, but the account *can* be used safely by a
knowledgeable individual. However, there is no need to do so, as your
assumptions above are false.




--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

Back
Subject: Re: Vista Hidden Administrator:Password Use
Group: microsoft.public.windows.vista.security
Date: 8/28/2008 1:37:56 PM
From: "FromTheRafters" [Email Address Protection]


"grinder" <guest@unknown-email.com> wrote in message
news:fc201dbf1e7f680d9d2e6e109559eece@nntp-gateway.com...
>
> The Hidden Administrator account has elevated priviledges that the
> ordinary adminsitrator enitity/identity canot use.

No, the difference is in the token (it's not split).

> Some of these prerogatives are important: such as to immunize the
> computer against spy wear ala Spybot program. The 'administrator' title
> for me as the sole user is NOT enough to do this task and I must
> activate the hidden administrator to do it.

That shouldn't be necessary. I think you are using the account
just to get around other issues with the progams.

> Rather that periodically activate the program to immunize once a new
> bunch of threats are available, it is tempting to simply password
> protect the hidden administrator account and let it run all the time but
> with protection.

You are not alone in this thinking. Much of the security built
into Vista is circumvented in this scenario.

....and some people *really* don't need the security of UAC.

It is sad to see this option being taken by those that really would
benefit from it - just because of the annoyance factor.

> ::IS THIS A SAFE AND LEGITIMATE COURSE OF ACTION [TO PASS WORD PROTECT
> THE HIDDEN ADMINSTRATOR ACCOUNT] ASIDE FROM ANY ENHANCED SECURITY
> ISSUES?::

The account has too much potential to just leave it lying around.
Keep in mind that a brute force attack against a password will
*eventually* prevail.

> Thanks for the input of the many geeks out there who contribute so
> much.

My advice - don't do it. I am pretty computer savvy (err..geeky?)
and I wouldn't do it.



Back