My Thoughts and Notes

Logging into Windows XP

User Groups Overview

This document is an additional fact sheet on the differences between various user groups in Windows XP. Please read the documentation on Domain and Passwords in Windows XP before reading this document.

Every user account on a Windows XP machine is part of a local user group on that computer. A user group is a set of users who have a certain amount of control over the Windows XP computer. The two main groups are Power User and Administrator, and it is these two groups that Information Services uses for setup and testing of Windows XP.

We recommend that if you add users to your college-owned computer, you should only add users as Administrators or as Power Users.

All domain accounts are part of the Power Users group on public lab Windows XP computers. Local accounts may be created on a specific Windows XP computer as part of any user group on that computer.

The tasks permitted to each group are outlined below.

• Administrators
• Power Users
• Users
• Guests

Administrators

Members of the Administrator group have total control over the computer and everything on it. The user named Administrator is the default account within this group. The domain account of each faculty or staff member with a Windows XP computer is part of the Administrator group on his or her computer.

Administrators Can:

• Create, modify, and access local user accounts, including the ability to see, delete or modify someone else's files
• Install new hardware and software
• Upgrade the operating system
• Back up the system and files
• Claim ownership of files that have become damaged
• Do anything a Power User can

Power Users

The Power User class can perform any task except for those reserved for Administrators. They are allowed to carry out functions that will not directly affect the operating system or risk security. All domain accounts are part of the Power Users group on public Windows XP computers.

Power Users Can:

• Create local user accounts
• Modify user accounts which they have created
• Change user permissions on users, power users, and guests
• Install and run applications that do not affect the operating system
• Customize settings and resources on the Control Panel, such as Printers, Date/Time, and Power Options
• Do anything a User can

Power Users Cannot:

• Access other users' data without permission
• Delete or modify user accounts they did not create

Users

Users can perform common tasks, but have little power to affect the computer outside of their own account. Note: Information Services does not do any testing to ensure that this group can use all software installed on our Windows XP computers.

Users Can:

• Create, modify, and delete their own data files
• Run system-wide or personally installed applications
• Change their personal settings
• Install programs for their own use only
• Access the network
• Print to local or networked printers
• Do anything a Guest can

Users Cannot:

• Modify system-wide settings, operating system files, or program files
• Affect other users' data or desktop settings
• Install applications that can be run by other users
• Add printers
• Configure the system for file sharing

Guests

The Guests group grants limited access to occasional or one-time users. Once a Guest logs out, all files created by the guest is deleted. Note: Information Services does not do any testing to ensure that this group can use all software installed on our Windows XP computers.

Guests Can:

• Log in and out
• Run installed applications
• Navigate through the file system
• Shut down the system

Guests Cannot:

• Do anything else.