Windows 8 and 8.1 Forums


New User Does Not Appear In Security Tab

  1. #11


    Posts : 22,573
    64-bit Windows 10


    Quote Originally Posted by slick View Post
    As usual, a good plan is thwarted by Microsoft! What I envisioned was an Administrator not being able to change the action of another Administrator without access to the originating Administrators account. Guess not. It wish there was the ability to have a "Super" Administrator that could have a level of control over all other Administrators...it seems this would open up more options for controlling access. So if I am understanding correctly, the locked out Administrator could gain access by taking Ownership of the folder? If that is the case, that is the part I didn't understand was possible.

    As for other options, Bitlocker was mentioned. I read up a little about Bitlocker yesterday and it appears that it has the capability of encrypting an individual partition (Data Partition), which would work for us as long as the separate System partition is unaffected (I am partitioned into a System and a Data Partition). If this is true, does the Bitlocker encryption stay in place if a User other than the User that set it up logs on? In other words, if I log on with my Main User account and apply Bitlocker to just the Data Partition (leaving the System Partition unencrypted), will the New User unlock the Bitlocker encryption when they log in, or will the encryption protect my Data Partition from them while still allowing them access to all of the Programs, System Files, etc.?

    I know my ignorance of all of these issues is probably frustrating (it is for me!) but I greatly appreciate all of the advice...and I'm learning a bit in the process.


    Don't worry about it. None of us know everything, and that's what asking questions is all about.

    Yes, you could encrypt only a data partition with BitLocker. No other user (including an administrator) will be able to access it without having the password or recovery key.

    BitLocker - Turn On for Fixed Data Drives in Windows 8

      My System SpecsSystem Spec

  2. #12


    Any admin account can take ownership of any folder belonging to any user and change permissions for any file or folder. Such an account can also change the password or other account details of any user account, including an admin account, without knowing the existing password. All admin accounts are equal. The built in Administrator account has some differences but none are relevant to your situation. I agree with all of this 100%. In a limited context it may seem desirable that you could limit an admin account. But in a general sense not being able to do any of the above could create some serious problems. Such as an administrator not being able to do his job.

    The intention is that each computer will have one or a small number of TRUSTED administrators. Trust is essential. They have full access to everything on the computer. Whatever access they may not have initially they can easily obtain. An admin that does not have all of these rights isn't really an admin at all.
      My System SpecsSystem Spec

  3. #13


    Posts : 7
    Windows 8.1 Pro


    I understand now how this won't accomplish what I wanted it to. It does seem odd to me though that a complex system like Windows would have no capability to keep an individual folder or file private while allowing access to the rest of the computer. I'm always trying to go against the grain in all things, I guess!

    I apparently need to look at Bitlocker as a solution, but don't have a TPM chip in my computer. I guess I can still use Bitlocker but need to manually enter a password key each time I log on, right? I trust that Bitlocker has proven to be reliable and won't hose all of my data unless I lose the key.
      My System SpecsSystem Spec

  4. #14


    Posts : 22,573
    64-bit Windows 10


    You could set to have to enter a password each time before being able to access the encrypted drive.

    An alternative, is to have Windows automatically allow you access to the encrypted drive. Other users will still be denied access.
      My System SpecsSystem Spec

  5. #15


    Posts : 7
    Windows 8.1 Pro


    Shawn,

    Thank you and everyone else for all of the great information. It sounds like Bitlocker is the best solution to my problem. Again, I really appreciate the help and I will mark this as solved.
      My System SpecsSystem Spec

  6. #16


    Posts : 22,573
    64-bit Windows 10


    You're most welcome. I'm glad we could help. Please let us know how it went.
      My System SpecsSystem Spec

Page 2 of 2 FirstFirst 12
New User Does Not Appear In Security Tab
Related Threads
New user cannot login (user profile service failed) in User Accounts and Family Safety
I am trying to add a second account to my machine and whether I try a Local or Microsoft account, I get the same "User Profile Service failed the sign-in. User profile cannot be loaded" error every time I try to sign in for the first time. I've Googled this a bit and it seems everything I've found...
I need to add another standard user. I have one admin account and one standard user. After adding the second standard account name and password on Control Panel I get the confirmation that the new user can now sign in. However,I get this famous message that the profile service cannot open. ...
My grandmother was recently hacked and she changed all her passwords herself (yay!):thumb:. However she did not write down her new local user account password for her laptop. I tried downloading OPHCrack, I burned it as an ISO file and put it on a DVD-R(only thing I had on hand) and i changed...
Hi! IŽd like to get some information about how to, in Windows (8.1): Change the Local Security Policy Open Local Security Policy: XP: From the Start menu choose Run. In the resulting dialog, type "secpol.msc" (without quotes) and click OK. Vista: From the Start menu, in the...
Hi guys. Windows 8 screwed up my old user account so I had to transfer to a new one. Unfortunately that new one was named after my email address for some reason as I logged on as a microsoft account rather than a local one. Hence in my computer its called users/email_000 This is very...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook