Restrict user accounts in Windows XP
Secure and delete user accounts
User accounts on your system which no one use are better off deleted to eliminate ways hackers can access your system. If your user account is an administrator user account, then you should change this to a limited user account.
You may want administer rights on your machine, and that’s fine, however for security purposes, you need to create an administrator account you will not use for your everyday tasks.
You can access the User Accounts page via Control Panel, Administrative Tools, Computer Management, and then on the left hand side, clicking on Local Users and Computers.
- Create a new user account and make it an administrator user account.
- Now change you’re user account into a limited user account and limit all other user accounts, if they are administrators. You can do this by accessing Local Users and Groups tool, right clicking an account and selecting Properties, then selecting the Member of tab, and if administrator is specified, to delete this and replace with users.
You can also accomplish this via the User Accounts, which is within the Control Panel and is much more user friendly. See below figure. Once your in the Control Panel, there’s an option to change you account from administrator to limited account labeled Change my account type.
Now you can use your user account for normal everyday use, and when you need more privileges like installing a software package, you can log in with the administrative user account to do this.
What’s the purpose of this, and what does this accomplish? Well, when you log into your system, with full administrative user account rights, you’re able to do anything. So when a virus hits your machine it is able to run itself because you are using a user account with access rights to install software. If you were to use a limited account the virus will not be able to install itself, and the next time your virus checker scans your system, it will remove the virus and this way nothing would have been infected or damaged on your system.
Also from the Local Users and Computers area, completely delete unused user accounts, and also disable the guest user account. If the user accounts exist and are never used then there’s no point in keeping them, as they can pose a security threat.
Disable Simple File Sharing
Simple file sharing is a dangerous way to share files. It is an all or nothing feature. You either share nothing when simple file sharing is disabled or you share everything when it is enabled. I advise you to share files and folder using Windows default file sharing method, and not Simple File Sharing!
To disable Simple File Sharing
- Open My Computer
- Go to Tools, folder options
- Select the View tab
- Go to Advanced Settings
- Clear the Use Simple File Sharing box