Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to prevent administrator to change super admin's password?

01 Aug 2014   #1
jakematteau

Windows 7 Pro
 
 
How to prevent administrator to change super admin's password?

Hi! I have 2 users for now on my pc: Super admin and admin. For some personnal reasons, i want the user admin to have the rights to install software...have more rights..

But I don want admin to be able to change the super administrator's password: is there a way, strategy or something i can do to prevent this?

Thank you!


My System SpecsSystem Spec
.
02 Aug 2014   #2
Alejandro85

Windows 7 Ultimate x64
 
 

There is no thing as a "super admin" in Windows, all administrators are exactly the same and have the same privileges. They have the right to install programs, and they need to be admins to do such things, but that also grants them the rights to do any system-wide change, like managing users and their passwords, at the same time.

What is your idea behind having two "levels" of admins? What do you plan to accomplish with that?
My System SpecsSystem Spec
02 Aug 2014   #3
LMiller7

Windows 7 Pro 64 bit
 
 

Quote:
How to prevent administrator to change super admin's password?
You can't.

By "super admin" I assume you mean the built in Administrator account. It was never intended that it be used for general use. Unlike other admin accounts it is not effected by UAC but aside from that all admin accounts are equal. ALL admin accounts have the ability to change ANY password, including that of the Administrator account. This is by design and cannot be restricted.

Bottom line: ALL admin accounts are essentially equal.

There is no technical solution for your issue. All you can do is establish policies known to all admins. If they do not conform you must take the appropriate action, such as removal of admin rights.
My System SpecsSystem Spec
.

02 Aug 2014   #4
Brink

64-bit Windows 10 Pro
 
 

The built-in "Administrator" is an elevated account by default.

By default, a normal administrator account is not elevated and requires UAC (Yes/No) approval first for elevated actions.

Built-in Administrator Account - Enable or Disable


As Alejandro posted above, it's not possible to prevent administrator accounts from doing anything since they all have the rights to do what they please to the system.

If you don't trust them, then you could make them a standard user that would not be able to have any elevated rights.

Hope this helps some,
Shawn
My System SpecsSystem Spec
02 Aug 2014   #5
jakematteau

Windows 7 Pro
 
 

Thank you for your answers: it all does make sense! What i'm trying to do was just have a admin who still can block some access to some folder etc. but I did'nt want to block the other user from intalling programs, doing updates. I guess i will go with a standard user, maybe learn to give it more rights.

I will have to learn more about policies...but that will be another thread!

Thanks again!
My System SpecsSystem Spec
02 Aug 2014   #6
Alejandro85

Windows 7 Ultimate x64
 
 

It's a difficult thing to achieve, administrators by design can do everything on the system, that's the purpose of the account. It includes setting permissions, installing programs and all system-wide changes. All limitations on those accounts can be lifted by themselves, so it's pointless.

I doubt about "giving more rights" to standard users for installations. Properly made installers should display an UAC prompt to begin the process, and that can only be allowed by an administrator user/password, which standard user cannot bypass. Your best bet is probably sticking to the so called "portable" software, which is simply packaged in a zip file that you run directly.
My System SpecsSystem Spec
Reply

 How to prevent administrator to change super admin's password?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
How to change Administrator account password
All, I realized today that I do not have access to my system's "Administrator" account though happily I do have admin privileges in another user account. Using "net user administrator" I learned the Administrator account is not active but a password is required to to make any changes....
General Discussion
administrator account/password need to delete / change
i got this computer from someone and i want to delete the other users and the admin..or make me the admin..however i can not do anything because i dont have the password for the adminastrator...i cant get into the bios without a password i cant even do a diskcheck..it just pops up with the name...
General Discussion
Forgotten password to Administrator i can't change them.
Dear users, i need some help with my administrator account because i forgot my password and nothing helps me...I readed some threads soon but,my tip for the password cannot be displayed and i can't change the options for users.When i searched for the password change with ISO file and tested it then...
General Discussion
Want group to enable administrator account but not change its password
Is this even possible?
General Discussion
Admin password change
OS: W7 Home There are two user accounts: an admin account with password and a std account with password. The following happened when i changed the password of the admin account. I gave in the old password, then the new one. When i clicked on a program to run it with admin rights i logged...
System Security
Administrator Password Change, few thousand PCs
We have about 3300 PCs running Windows 7 and need to change the local administrator account password when someone from the company leaves due to security policies we have. Is there any way to run a script or batch file to do this instead of having to physically touch each machine? It was easy to do...
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:18.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App