Windows 7 Pro: Parent adminstration control and rebellious pre-teen

jeff00seattle · 01 Feb 2012

Hi

I am a dad who wants to give his rebellious pre-teen daughter some control on her laptop, like update iTunes or install games, but she cannot do such as a Standard User.

I initially setup her laptop with both of us (dad and daughter) as admin users. I wanted to be an admin user to help install updates, backup, and check for viruses, etc... Dad as "Home IT guy".

However, in her rebellious attitude over the last couple of months, she removed me as an admin; so, I had no way for login. Pissed IT dad.

IT dad took her laptop away for a week, demanded her password, created IT dad as admin and changed frustrated daughter into standard user.

All fine. No. Daughter wants to upgrade iTunes (admin login required), install games (admin login required), etc... (admin login required). Non-IT mom does not want to do IT stuff (i.e. "admin login required" stuff).

Is there a way to allow my daughter (degraded to Standard User) to have some admin privileges (to perform upgrades and downloads without "admin login required"), but without having the permissions from removing other administrators (i.e. IT dad)?

In other words, IT parents as Uber-Administrators and User children as Limited-Adminstrators (i.e., cannot remove a Uber-Adminstrator but can upgrade and download software)?

IT Dad wants to know, thx

jeff in seattle

TanyaC · 08 Feb 2012

Sorry, I dont have an answer for you, but I'm in exactly the same boat. because I have three sons that install programs and updates like your daughter, that required me to intervene on a multiple-times-per-days basis I gave my kids administrative accounts on their own computers.

BIG MISTAKE!!

I use OpenDNS to prevent access to undesirable web stuff, and so I can have some semblence of knowledge of what is going on. But they hack, and they crack and they circumvent every bit of security I add.

Now I am considering setting them to standard users. And that means non-stop whining, negatively charged atmosphere, and daily interventions by me to install, update, remove and configure things on their PCs.

I feel for you. I hope someone here will be able to offer some guidance to us frustrated parents.

Tanya

seavixen32 · 08 Feb 2012

Unfortunately, parental controls require a standard account to work properly.

However, you should be able to set it up so that your daughter can only visit certain sites, such as iTunes.

Check this Microsoft article: Set up Parental Controls

And this one: How to use parental controls in Windows

If you can't get her to play ball, threaten to remove her laptop permanently and make sure she sees you checking your firearms on a regular basis!

Duzzy · 08 Feb 2012

Only had a quick look so what follows is untested and and only really a guess. I have no idea if they will help or how they could compromise the Systems Security.

Open the Local Group Policy Editor by typing gpedit.msc in the Start Menu.

In the right window click Computer Config -> Administrative Templates -> Windows Components -> Windows Installer.

Now here is 3 things you can look at:
- Enable user to patch elevated products
- Enable user control over installs
- Always install with elevated privileges

Always read the description/help, last one comes with a caution.

FliGi7 · 08 Feb 2012

Jeff in Seattle, having read and participated in several of these types of threads, I must warn you that the solution isn't going to be 100% technical. It's going to be a mix of technical solutions we can offer combined with your own set of rules and policing. Unfortunately, setting controls on the computer is only going to lighten your policing burden, but it certainly won't remove it.

Group Policy is going to be your friend here. Duzzy offers a couple good suggestions, but you're going to want to read up on what you can modify in group policy to give you the rules you desire on the computer.

Local Group Policy Editor - Open

Local Group Policies - Apply to All Users Except Administrators

Group Policy - Apply to a Specific User or Group