Admin vs User Config

[Puddin Man]

After 'exploring' my new Win7 system for quite a while, I took the advice of many and created a separate Administrator logon. I am finding that this is another of many Win7 User-Strait-Jackets that will trash my productivity.

I need what we used to have with Windows: Admin privileges on my user logon.

Specifically, I either need the same config (applications, preferences, etc) on the Admin logon so I can use it all the time, -or- to have a way to turn-on Admin privileges painlessly on my user logon when needed.

Is there any way to establish symmetry between config on my user and Admin logons?

Thx,
Puddin'

 

[logicearth]

... to have a way to turn-on Admin privileges painlessly on my user logon when needed...

That would be what UAC is for. Have an account part of the Administrators group with UAC on. This lets everything run as a Standard User. When you need administrative power you right-click on a shortcut > Run as Admin. Or if you searched though the start menu use the hot key CTRL + SHIFT + ENTER.

 

[Pierre50]

I am with LogicEarth on this one!

Unlink most folks, I *love* the UAC! It has stopped more viruses for me, and the clients I support. It really does a good job, but you must be aware of what's going on and not just casually *click* dialog boxes.

I run my UAC all the way on, and have stopped at least 1 dozen viruses in the past couple of months. I was doing research on some concepts and was looking for virus sites... found em, and UAC worked perfectly to stop 95% of the attacks! The others were a different contagion method and the AV (MS Security Essentials) caught them no prob.

Turn up that UAC, and pay attention, and you are much safer than lots of systems.

HTH

 

[Puddin Man]

... to have a way to turn-on Admin privileges painlessly on my user logon when needed...

That would be what UAC is for. Have an account part of the Administrators group with UAC on. This lets everything run as a Standard User. When you need administrative power you right-click on a shortcut > Run as Admin. Or if you searched though the start menu use the hot key CTRL + SHIFT + ENTER.

Not certain I understand ...

Are you saying that, if I follow your instructions, I should never (ever, ever) need to
logon to the Admin account?

Never, ever, ever?? No exceptions???

P

 

[logicearth]

Not certain I understand ...

Are you saying that, if I follow your instructions, I should never (ever, ever) need to
logon to the Admin account?

Never, ever, ever?? No exceptions???

P

The one that is disabled by default? I've been using Windows Vista since it came out with UAC always on, using an account part of the Administrators group. Been using Windows 7 since the beta under the same config as Windows Vista, UAC fully to its max level. I never needed to enable or log into the Administrator account.

(I have enabled it and used it a few times only to modify some files for my user account that can not be while logged into my account.)

 

[Puddin Man]

(I have enabled it and used it a few times only to modify some files for my user account that can not be while logged into my account.)

You had to logon to Admin to modify some files? Why couldn't you mod them running your user account?

Is there any way to replicate all personal settings (desktop, applications, etc) associated with the user account onto the Admin account?

 

[unifex]

In Windows 7 there are accounts of the Administrators group and then there is the (hidden by default) the Administrator account. Under normal operation, the hidden account is not necessary. When running under an account that belongs to the Administrators group, you are capable of doing pretty much everything with the system - install software, modify Windows settings, see hidden files, etc. A lot of these operations will have to be confirmed through UAC, as a security measure. Alternatively, some programs can be run "as administrator" to avoid the UAC prompts. This might be useful with some installers or scripts, provided you trust their origin.

At the same time, there are some files which are locked by the system while the system is operating. This is the reason, why a restart is needed after some Windows updates, for example. In the same way, certain files related to a given user account are locked while this account is active, i.e. you would not be able to modify them from that account. You would be able to do this from another account, and that's what logicearth was talking about. I am not sure what exactly was he doing, therefore I would hesitate to say that the same operation could have been performed from another account of the Administrators group, but more often then not this is the case.

The hidden Administrator account is helpful when there is something wrong with the system and repairs are needed. Otherwise, I would recommend staying away from it, there is no performance gain or any other advantage in using it, while security risks are quite substantial.

 

[mborner]

In 99.9% of cases, you will never need to log on to the administrator account. Unless you're into really heavy duty customizing and tweaking, (ie; taking ownership of a system file for modification) the administrator account need never be logged on. Using the Admin. account only can be risky.

 

[logicearth]

You had to logon to Admin to modify some files? Why couldn't you mod them running your user account?

Because they are in use while logged. I mostly just needed to delete a few temporary files. I could have created a new account to do it, but I only turned it on to accomplish a few operations then disabled it again.

 

[Puddin Man]

Because they are in use while logged. I mostly just needed to delete a few temporary files. I could have created a new account to do it, but I only turned it on to accomplish a few operations then disabled it again.

Were these perhaps open files associated with your user logon (Profile)? Why didn't the system just que up the delete's for the next boot-up or similar?

I'd appreciate it if someone could address the following question:
Is there any way to replicate all personal settings (desktop, applications, etc) associated with the user account onto the Admin account?

 

[logicearth]

Were these perhaps open files associated with your user logon (Profile)? Why didn't the system just que up the delete's for the next boot-up or similar?

Yes...there were a thousands ways I could have done it, but I just took the easy/lazy way out.

I'd appreciate it if someone could address the following question:
Is there any way to replicate all personal settings (desktop, applications, etc) associated with the user account onto the Admin account?

Copy all the "NTUSER" files from the root of a user account folder to the account you want or into "C:\Users\Default". However you will have to have another account to log into. The NTUSER files are locked and cannot be moved for active accounts. Furthermore, do not delete these files only copy.

 

[mborner]

Is there any way to replicate all personal settings (desktop, applications, etc) associated with the user account onto the Admin account?

Sinse you already have an account set up with all your pesonal settings, desktop, documents, etc. all you would really need to do is convert the standard user account to an administrator account. It is not recommended, though. You don't want to be logged on as an administrator at all times. Ultimately, you want two accounts, just for yourself. (even if you're the only one using the PC.)

1. a standard user account with all you settings, start menu, documents, files, customizations. etc.

2. An administrator account that uses default user account settings. This account, you would keep logged off at all times and would use, well, really, never.

Generally, you only need the admin. account because Windows 7 requires at leat one, on a system.

 

[Puddin Man]

Copy all the "NTUSER" files from the root of a user account folder to the account you want or into "C:\Users\Default". However you will have to have another account to log into. The NTUSER files are locked and cannot be moved for active accounts. Furthermore, do not delete these files only copy.

<This is edited. I lost it there for a bit.>

OK, I've copied/renamed. Logged onto each to do the other (Admin and User) to avoid creating new account.

It worked, but it's wierd. Some desktop shortcuts (i.e. Admin Cmd Prompt, Computer Mngt) didn't make it. And some taskbar icons are blank (no graphic).

Any idea?

Thanks,
P

 

[mborner]

<This is edited. I lost it there for a bit.>

OK, I've copied/renamed. Logged onto each to do the other (Admin and User) to avoid creating new account.

It worked, but it's wierd. Some desktop shortcuts (i.e. Admin Cmd Prompt, Computer Mngt) didn't make it. And some taskbar icons are blank (no graphic).

Any idea?

Thanks,
P

I'm just getting back to this thread. If I understand correctly, you now have two user accounts, 1 standard and 1 administrator, is that correct? Further, I'm understanding that you want both accounts to have exactly the same user settings, desktop, programs, etc., is that correct?
IME, copying and renaming user folders is somewhat complicated. As you've seen, they just don't turn out like you expect.
IMO, and on my own system, my administrator account uses the default settings. I don't need, or want, my administrator account to act and look like my standard user account. My standard user account is the only one I customize. Why? because I keep my administrator account logged off at all times and I almost never use it. The administrator account is designed for administrative purposes only and should not be used for daily operations. I can do almost anything from my standard user account through password protected UAC. I had to log on to my administrator account once, to change a local policy. I was logged on for maybe 5 minutes, and for that reason, I do not need to see a custom theme, desktop shortcuts, custom start menu, etc.

 

[Puddin Man]

...
OK, I've copied/renamed. Logged onto each to do the other (Admin and User) to avoid creating new account.

It worked, but it's wierd. Some desktop shortcuts (i.e. Admin Cmd Prompt, Computer Mngt) didn't make it. And some taskbar icons are blank (no graphic).

Any idea?

Thanks,
P

I'm just getting back to this thread. If I understand correctly, you now have two user accounts, 1 standard and 1 administrator, is that correct?

Correct.

Further, I'm understanding that you want both accounts to have exactly the same user settings, desktop, programs, etc., is that correct?

To the extent practical, yes.

IME, copying and renaming user folders is somewhat complicated. As you've seen, they just don't turn out like you expect.

So it goes with many things Win7.

IMO, and on my own system, my administrator account uses the default settings. I don't need, or want, my administrator account to act and look like my standard user account. My standard user account is the only one I customize. Why? because I keep my administrator account logged off at all times and I almost never use it. The administrator account is designed for administrative purposes only and should not be used for daily operations. I can do almost anything from my standard user account through password protected UAC. I had to log on to my administrator account once, to change a local policy. I was logged on for maybe 5 minutes, and for that reason, I do not need to see a custom theme, desktop shortcuts, custom start menu, etc.

No need? Remains to be seen so far as I know.

The fact that creation of an Admin account is required must mean something. I gather the general drift is that the Admin account should be used (almost) only in emergency situations or similar. Fine. Should such an emergency arise, I would need the facilities (pro editor, organization of desktop, etc etc) that I regularly use. I would be much less effective with the standard MS Admin setup.

My intent is not to run Admin regularly.

If you are happy (or think you are) with the standard MS Admin setup, more power to you.

Now it is plain that you dropped in to tell me how happy you are with such, and not to address my query. Seems silly to me.

P

 

[mborner]

My apologies, puddin man, that was not my intent. I'm simply pointing out that, yes, you do in fact need an administrator account and that you may use it from time to time. You may even use it more than most users. What you don't need, is to have your standard user account's custom desktop, user settings, custom start menu, themes, and customizations transferred over to your administrator account. If that is truly what you want, I will try to help you.

1. Go to folder options, click on the view tab and check the dot that says "show hidden files and folders." Also, UNcheck "Hide protected operating system files"

2. Go to C:\users\std (std being the name of your standard user account). Copy all of the contents of this folder. (not the folder, itself, just its contents)

3. Navigate to C:\users\admin (admin being the name of your administrator account) Move the contents of this folder to a new folder on your desktop,(Just in case you need to put it back.) leaving the admin. account folder empty.

4. Paste the contents of your standard user account into the now empty admin folder.

5. Log off and then back on both accounts.
*You may not be able to move the contents from the admin account if the account is logged on.
Hope this helps.

 

[Puddin Man]

...
. What you don't need, is to have your standard user account's custom desktop, user settings, custom start menu, themes, and customizations transferred over to your administrator account.

In a true emergency, none of us know exactly what we will need. Suffice to say I'm not impressed with the defaults on the Admin logon.

If that is truly what you want, I will try to help you.

1. Go to folder options, click on the view tab and check the dot that says "show hidden files and folders." Also, UNcheck "Hide protected operating system files"

This was done quite some time ago.

2. Go to C:\users\std (std being the name of your standard user account). Copy all of the contents of this folder. (not the folder, itself, just its contents)

3. Navigate to C:\users\admin (admin being the name of your administrator account) Move the contents of this folder to a new folder on your desktop,(Just in case you need to put it back.) leaving the admin. account folder empty.

Copy/move -only- the files and not the sub-directories. Eh?

4. Paste the contents of your standard user account into the now empty admin folder.

5. Log off and then back on both accounts.
*You may not be able to move the contents from the admin account if the account is logged on.
Hope this helps.

Looks helpful.

Thanks,
P

 

[mborner]

Copy/move -only- the files and not the sub-directories. Eh?

You want to copy the entire contents of the username folder, including all folders, sub-folders, and files. With the folder open, go to "organize" and then "select all". Copy all selected items to your clipboard. Paste these items into the empty administrator folder.

EDIT:

What might be even easier is to go to C:\users, copy your standard user account folder and paste it to your desktop. Rename this folder to the exact same name as your administrator folder. Go back to C:\users and back up your administrator folder, then remove it from the users window. Now drag your new, renamed administrator folder back into the users folder. You should now have two user folders that, aside from the name, are exactly the same.

Keep in mind, every change you make to one, you'll have to make to the other, separately, including any themes, desktop icons, gadgets, IE/Firefox favorites, pinned start menu items, fonts, screen magnifications, mouse adjustments, documents, etc.

Make sure that you make the adjustment in user accounts, also. IOW, make sure your standard user account is in fact marked as such and the same thing with your administrator account.

Good luck.

 

[mlevy]

Puddin Man, I think you're missing the point of the administrator account. Logging on interactively as the administrator would not be used as a replacement for your standard user account should you have a problem with that account, it would be used to repair the other account or recover from some other issue. After the repair/recovery, you would then log off the admin account and log in as your normal account to continue your normal work.

With that said, I log in to my PCs as an "administrator" account (not named that) but UAC still prompts me for most actions that make changes to applications or system files.

 

[Puddin Man]

Copy/move -only- the files and not the sub-directories. Eh?

You want to copy the entire contents of the username folder, including all folders, sub-folders, and files. With the folder open, go to "organize" and then "select all". Copy all selected items to your clipboard. Paste these items into the empty administrator folder.

EDIT:

What might be even easier is to go to C:\users, copy your standard user account folder and paste it to your desktop. Rename this folder to the exact same name as your administrator folder. Go back to C:\users and back up your administrator folder, then remove it from the users window. Now drag your new, renamed administrator folder back into the users folder. You should now have two user folders that, aside from the name, are exactly the same.

Keep in mind, every change you make to one, you'll have to make to the other, separately, including any themes, desktop icons, gadgets, IE/Firefox favorites, pinned start menu items, fonts, screen magnifications, mouse adjustments, documents, etc.

Make sure that you make the adjustment in user accounts, also. IOW, make sure your standard user account is in fact marked as such and the same thing with your administrator account.

Good luck.

Thanks, but I don't feel comfortable trying that at this time.

I decided to back up both user folders and ran into a hideous permissions, etc issue.
Query is now in "General": Win7 dysfunctional wrt folder creation/use

P