Windows update just added a User to my PC, Do I need 2 plus guest?

[BobKoz]

Hello,

My computer is only 3 months old, it's new OS is Windows 7 Premium 64 Bit. I am the only user of the computer meaning no one but myself ever uses it or will ever use it. So I do not need or use a password set, I just don't need one. There were 2 username accounts, one being 'My-PC' (with Administrator rights) and the other was 'Guest' (Standard rights).

When I turned my computer on it went directly to opening Windows without having to pick a user, which is the way I liked it.

Last night when I shut down there were 25 Windows updates, which updated without a problem.
1) But now the upgrades created a 3rd username and called it Administrator (with Administrator rights).
2) Also removing Administrator rights from original 'My-PC' username.
3) And now I have to choose between the usernames 'Administrator' and 'My-PC' every time I reboot or turn the computer on.
4) I also tried to give the user 'My-PC' administrator rights in my Control Panel > User accounts, but it wouldn't allow the change.

The same exact thing happened to my Wife's computer. I'm sure if I just delete the new Administrator username with Administrator rights (or remove it's Admin rights) I will be able to add Admin rights back onto my original username. But does anyone know if this is going to happen with every update?

Also, could someone help me understand a few things
1) Do I really need 3 usernames, 'one with Admin rights', 'one with Standard rights for normal use', and 'a Guest user account' (is this a Microsoft requirement)?
2) Why couldn't I create a second Admin account (is only one allowed per OS)?
3) Is there a way to skip the boot-up usernames choices so it boots directly into my main account?

I would appreciate any help/answers to my issues,
Bob

 

[GokAy]

Can you log in with the Administrator? If so:

- Log in with Administrator
- Change your old account to an administrator - http://www.sevenforums.com/tutorials/103538-user-account-type-change.html
- Disable Guest if not disabled yet - http://www.sevenforums.com/tutorials/7412-guest-account-turn-off.html
- Log off and log in with your old account
- Disable Administrator account - http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

If you can't login with Administrator due to an unknown password - Option 4 or 5 - http://www.sevenforums.com/tutorials/238737-user-account-reset-password-windows-7-a.html

Once you sort the accounts, set auto login (make sure you have a password - CTRL ALT DEL to change password - you can remember even though you don't need it normally) - http://www.sevenforums.com/tutorials/377-log-automatically-startup.html

Lock your PC if you leave it unattended near strangers (CTRL ALT DEL or Win+L)

 

[UsernameIssues]

GokAy has given you some excellent steps and links to use.


> 1) Do I really need 3 usernames, 'one with Admin rights', 'one with Standard rights for normal use', and 'a Guest user account' (is this a Microsoft requirement)?
It is not a Microsoft requirement. It is not even desired to have the built in Administrator account enabled. Microsoft leaves that Administrator account disabled by default. The same is true for the guest account. It is disabled by default.


> 2) Why couldn't I create a second Admin account (is only one allowed per OS)?
You can have more than one admin account per OS. If the account that you normally use was demoted to a Standard account, then that account cannot be used to make itself an admin account.


> 3) Is there a way to skip the boot-up usernames choices so it boots directly into my main account?
There are several ways to do this; however, after you complete GokAy's steps, the computer should boot directly into your main account again.


It is not normal for Windows Update to enable the built in Administrator account. It is not normal for Windows Update to enable the built in Guest account. It is not normal for Windows Update to demote any current admin account. Since this happened to two computers, I would think that the antivirus software had a hand in this. Either the antivirus app made these changes for some inexplicable reason or the antivirus app failed to stop some malware from making these changes.

 

[BobKoz]

Thanks Gokay,

I'll follow your steps in the morning, I'll check back then - but your directions look spot on!

 

[GokAy]

It is not normal for Windows Update to enable the built in Administrator account. It is not normal for Windows Update to enable the built in Guest account. It is not normal for Windows Update to demote any current admin account. Since this happened to two computers, I would think that the antivirus software had a hand in this. Either the antivirus app made these changes for some inexplicable reason or the antivirus app failed to stop some malware from making these changes.

Made me realize I forgot to add - scan with Malwarebytes Anti-Malware free

 

[torchwood]

interesting

Bob,
what have you got here.
Note shorten name field to get all of last modified date.

Roy

 

[BobKoz]

It is not normal for Windows Update to enable the built in Administrator account. It is not normal for Windows Update to enable the built in Guest account. It is not normal for Windows Update to demote any current admin account. Since this happened to two computers, I would think that the antivirus software had a hand in this. Either the antivirus app made these changes for some inexplicable reason or the antivirus app failed to stop some malware from making these changes.

Made me realize I forgot to add - scan with Malwarebytes Anti-Malware free

I have the paid versions of Malwarebytes Anti-Malware Premium and Trend Micro Maximum Security Anti-
Virus running in the background all the time, plus they do a full scan at different times every morning. Everything was fine on my PC until I turned it back on the morning after the 25 updates (My PC is Off at night, with no power to it). But I'll run an extra scan just to be safe!

 

[GokAy]

Alright, even better!

 

[BobKoz]

Please keep in mind my OS is Windows 7 Premium 64Bit (there are things in Premium you can not do), Please read from beginning of Thread.

I worked on the extra user issue all day yesterday and so far I have not found a solution. I don't believe Malware/Virus caused this unless it was picked up with the 25 Windows updates. I have a lot of protection on my PC (as shown above), but anything is possible! Aso my wife's computer did the same thing after the 25 up-dates, her computer is exactly the same as mine and we are not Network Connected.;

It looks more like a change made with one or more of the Windows updates:

A new user was created on my PC during the Windows update named "Administrator" (with administrator rights). I first thought my original user account was changed to Standard, but it was not modified - it is still set with Administrator rights. Also my Guest account was not modified - it is still Turned Off.

When trying to modify or delete the added user - I renamed it from "Administrator" to "Admin-Bob", but renaming was a mistake it didn't help - I also cannot change it back to user name "Administrator", it say's it already exists (and it does in my registry). I also thought Microsoft was making changes and I would have to keep the unwanted user, so I changed it to a better name - but no-one has reported this issue as happening on their computer as far as I know?

I deleted the key in my registry for "Administrator" but it did not delete the User "Admin-Bob", I restored the registry with the backup I made. Maybe I should have deleted the C:\ folder in \Users named "Administrator" but I did not. I also searched my computer for "Admin-Bob" and my registry but did not find it anywhere.
Directions I used to delete registry key: https://support.microsoft.com/en-us/kb/156826

GokAy - could not disable Admin account per your link on added user..

UsernameIssues - Thank you for your answers to my questions.

torchwood - I looked at my System Properties \ User Profiles - (BOBS-PC is name of PC and belongs to a Homegroup - BobsPC is my original user account), I wasn't able to create a screen capture or image but I copied the "User Profiles" results below:

USER PROFILES
Profiles shared on this computer:
----------------------------------------------------------------------------------------
BOBS-PC\Administrator 46.9 MB Local Local 9/12/2015 << Questionable?
BOBS-PC\BobsPC 18.6 MB Local Local 9/12/2015
Default Profile 1.50 MB Local Local 5/20/2015
----------------------------------------------------------------------------------------

I am still looking for assistance with this issue :
The added User Account appeared after Windows Update called "Administrator" (with Administrator rights) - I renamed it "Admin-Bob", which is probably connected to the new folder in my C:\
Drive, in the \Users folder called "Administrator" -- I would like to delete this new added user. GokAy, UsernameIssues, torchwood or any members help is appreciated.

Thank you ,
Bob
See pictures

 

[BobKoz]

Bob,
what have you got here.
Note shorten name field to get all of last modified date.

Roy

Hello,

torchwood - I looked at my System Properties \ User Profiles - (BOBS-PC is name of PC and belongs to a Homegroup - BobsPC is my original user account), I wasn't able to create a screen capture or image but I copied the "User Profiles" results below:

USER PROFILES
Profiles shared on this computer:
----------------------------------------------------------------------------------------
BOBS-PC\Administrator 46.9 MB Local Local 9/12/2015 << Questionable?
BOBS-PC\BobsPC 18.6 MB Local Local 9/12/2015
Default Profile 1.50 MB Local Local 5/20/2015
----------------------------------------------------------------------------------------

Do you think the one marked "Questionable" is the added User account and deleting it will get rid of the added user?
What worries me is that I'm going to delete part of my original User account or the PC name?
And the Date modified is the date of the Windows update when the added User was created - My original User "BobsPC"' was created back in May?

Thanks,

 

[GokAy]

Way to go to break the OS to the point of no return!

Ok, so there were no real issues other than a disabled account being show in accounts section.

Administrator is a default built-in admin account, which is by default disabled.
Guest is by default disabled and built in also.
Your own account should be an admin account.

So the only remaining issue was why disabled admin account showed in accounts. Maybe because it got somehow activated. Anyway,

You can disable administrator with Option 2 of http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html.

Page 11 of said tutorial. post #100 by Brink:

You can't delete the built-in Administrator account. Instead you can only disable it as in the tutorial while logged in another administrator account

 

[Callender]

Sounds like you renamed the built in "Administrator" account which is not for general everyday use.

​

You should be using a "User" account and you can give that account admin rights but it's not recommended.

What do you see if you go to:

Start> Run

then type netplziz

Edit: type netplwiz

Press Enter.

That shouls show a list of users and if you click on a user name and then select "Properties" then "Group Membership" you should see account type.

 

[Callender]

In any event continue to follow Gokay's instuctions.

 

[BobKoz]

GokAy - your comment:

Administrator is a default built-in admin account, which is by default disabled.
Guest is by default disabled and built in also.
Your own account should be an admin account.

I never saw the built-in Administrator account before the Windows update, so your saying it somehow got enabled?

Do you know of anyway I can rename it back to "Administrator"? I'm pissed that I renamed it "Admin-Bob", because now it won't let me rename it back to "Administrator"..

12 years on WinXP with no issues, this Win7 double administrator thing is kicking me in the butt..

 

[GokAy]

Yep, I have both Guest and Administrator, actually everyone with Windows 7 do. It is just disabled.

The double admin thing is a safety measure if user mess up the accounts (due to misuse or malware etc) I believe. You don't need to run an admin account daily as Callender hinted. I prefer to do so, but I have my measures.

Well, try logging in with the Administrator (now Admin-Bob) and if it works, just disable it and remember the name if ever needed. We should be rename it back somehow, maybe others will advice something regarding this.

 

[BobKoz]

GokAy,

netplwiz results:

[X] Users must enter a user name and password to use this computer

Users for this computer:
----------------------------------
Administrator HomeUsers; Administrators
BobsPC HomeUsers; Administrators
HomeGroupUser$ HomeUsers; Administrators

---------------------------------

1) GokAy., I was able to rename the 'Admin-Bob' back to 'Administrator' in netplwiz using properties.

2) I then Hid the built in Administrator using command prompt > net user administrator /active:no

3) Built in Administrator is not displayed in Control Panel/User Accounts anymore (fixed)

4) I tested with a shut down and cold boot and it opens directly into my User Account without any user options


Looks like you fixed all issues GokAy, thanks for all your help

Is it a security risk to set user account to Administrator, is it a security risk from Hackers (because no-one else physically touches my PC)?

Sorry for the delay, I wanted to double check everything,
Bob

 

[GokAy]

Great news, good job Netplwiz proves to be useful these days.

I don't consider it a security risk, but it is safer to use a standard user for daily usage. There is no doubt about that. Add in the knowledge and experience level of the user too.

 

[BobKoz]

I'm going to change it to "Standard" until I get more familiar with Win7, big change from XP..

Netplwiz did actually fix all my issues, I've kept a list of all your directions. I'll mark this thread as solved in a little while.

Thanks again for all your help, you know your stuff !

 

[torchwood]

throws out what i was gonna say next,
which would have been
As your using Pro, and as MS is prepairing PC's for W10, maybe they introduced the additional admin account so that Network/Domain Contollers could deploy via remote desktop.

Roy

 

[GokAy]

Well, I don't think you can change the admin account you use to a standard account. You will have to use a different admin.

So either:
- create another admin that you won't use other than to elevate your standard account
- or create another standard account to use, but this would require all user files to be moved etc

Not very familiar how others achieve this. Will wait for comments.