The Pragmatic Addict
Enable Windows Admin Account
EVERY Linux & Windows Server install out of the box has two things:
- An administrator account
- A user account with no privileges
EVERY Windows 7/10/11 etc install out of the box has two things:
- A DISABLED administrator account
- A user account with admin privileges
Which do you think is the LEAST secure but paradoxically is used on more client machines globally? This is article is going to make your Windows 7/10/11 install act more like a server.
Why do I need this?
- Users are impatient. They will click-through any window to get what they want. This includes UAC (User Account Control), that annoying little popup that confirms you really want to do something. This makes it real easy to accidentally install malware.
- By adding an actual Admin auth (with password), that user will need to consciously enter the password or in the case of a child/senior keep them from shooting themselves in the foot.
- This reduces greatly (not REMOVES) the risk of many phishing/virus attacks.
Open Computer Mgmt/Users & Groups
- Press [Windows key]-x and select Computer Management
- Select Local Users and Groups followed by Users
Enable Administrator Account
- Double click on the Administrator account
- Uncheck Account is disabled
- Click OK
Set Administrator Password
- Right click on the Administrator account
- Select Set Password…
- Click Proceed
- Enter your new password
- Click OK
Remove user account admin privileges
- Double click on your User account
- Select Member Of tab
- Click Add
- Enter Users into the Enter the object names to select field
- Click Check Names. This should resolve to an object.
- Click OK
- Select Administrators
- Click Remove
- Click OK
Created: 2024-06-10 |
Modified: 2024-06-10 |