I want other people to be able to use my computer without them
being able to access my confidential files, and without them
being able to infect my computer accidentally with a virus or
change system settings that might screw things up. How can I do that by adding
another user to the computer?
Windows XP, Windows Vista, and Windows 7 make it easy to add additional
users to your computer. The extra users can create and save their own
files, but (if you choose the settings correctly) they won’t be able to
read or modify the files that you’ve saved, and they won’t be able to change
system settings.
This also offers additional protection against your computer being infected
with a virus. Generally the best protection against viruses is to install
an anti-virus program (don’t get hung up on the differences between them;
anything is better than nothing). However, the nice thing about having
multiple users on the computer is that if a non-administrator user does accidentally
get infected with a virus, it will infect only their files and settings — it won’t
affect the administrator’s account or the system as a whole. (Basically, if a user
accidentally gets infected with a virus, the virus runs “as” that user — meaning,
the virus only has the privileges of that particular user. If that user doesn’t
have privileges to access confidential files or change system settings, then the virus
that infected them, can’t do those things either.)
Before you add additional users to the computer, you should set a password for
the main administrator account on the computer [link to previously published article
on how to do this]. Even if your computer always starts up automatically without
ever asking you to “sign in”, there still is a “main administrator account”
that you’re signed in under, whenever you use Windows. That article shows you how
to set a password for that account. (Obviously, it offers no security protection to
set up extra accounts on the machine for other users to use, if anybody can still
sign in as the main administrator account without entering a password!)
Also, if one of the reasons that you’re creating secondary accounts on the machine is
to prevent other users from being able to access your confidential files, then
when you’re following the instructions in that article to set a password, when Windows
asks you “Do you want to make your files and folders private?”, be sure to say “Yes”.
Once you have created a password for the main administrator account, you can set
up secondary accounts on the same machine. To do this, go to Control Panel and
pick User Accounts:
Then pick “Create a new account”:
Enter a name for the new account, and hit Next:
The next screen asks you to “Pick an account type”. If the reason you’re adding secondary
users to the system is primarily so that those users can use the computer without the
possibility of them damaging your important files, or changing system settings
by accident, then choose account type “Limited”:
The screen in Windows XP warns you that “programs designed prior to Windows XP or Windows
2000 might not work properly with limited accounts”. However, as of 2009, this is very
unlikely to be a problem with most programs in common use today, so you shouldn’t worry
about this.
Then click “Create Account” and the account will be created. Next time you log out of
Windows, the account you just created will be listed.
You may also want to set a password for the new account you just created. You should
do this, for example, if other people have physical access to the computer, and you
don’t want anyone to be able to use the computer at all unless you’ve created an account
for them. To set a password for the new account, click the account name:
When asked “What do you want to change about the account?”, click “Create a password”:
When you do this, you get a screen with a rather ominous warning that
if you create a password for the user, they “will lose all
EFS-encrypted files, personal certificates, and stored passwords for Web sites or
network resources”:
If you just created the new user, then these warnings would not
apply anyway. And even if you’re setting a password for a user who is not a new user,
in most cases you still don’t need to worry about these warnings. (When the warning
says you will “lose stored passwords for Web sites”, for example, that only means
that when you log in to Hotmail, and you had selected the option for Internet Explorer
to fill in your password for you automatically, it won’t fill it in for you automatically
next time you visit the site. It does not mean that you will lose your Hotmail
account!)
Other than that, setting a password for the secondary user is basically the same
as setting a password for your own account [see previous article].
After you have set a password for that user, the next time they sign in to Windows,
they will be required to enter that password in order to log in.
Bennett Haselton is a technology and political blogger who runs a site about
how to bypass SmartFilter and other
sought-after information.
I have been trying to get on facebook forever.I keeps telling me I forgot my password.When I try to change the password they tell me they will send me a code which never happens.
The screen in Windows XP warns you that “programs designed prior to Windows XP or Windows 2000 might not work properly with limited accounts”. However, as of 2009, this is very unlikely to be a problem with most programs in common use today, so you shouldn’t worry about this.
—
Unless, of course, you have hand-me-down kids games that you are installing. (Does the 5-year-old really need the latest version of Reader Rabbit, when you already have one from several years ago?)
But, yes, most programs released in numerous years probably won’t have a problem. (Though they may require an admin account to do the install.)