Windows
XP
PC
XP
PC
|
Windows
XP PC |
This document is an additional fact sheet on the differences between various user groups in Windows XP. Please read the documentation on Domain and Passwords in Windows XP before reading this document.
Every user account on a Windows XP machine is part of a local user group on that computer. A user group is a set of users who have a certain amount of control over the Windows XP computer. The four primary user groups are Administrators, Power Users, Users, and Guests. Wellesley College only supports Power User and Administrator user groups because those are the only user groups that Information Services has thoroughly tested with the Wellesley College network. We recommend that if you add users to your college-owned computer, you should only add users as Administrators or as Power Users.
All domain accounts are part of the Power Users group on public Windows XP computers. Local accounts may be created on a specific Windows XP computer as part of any user group on that computer.
The tasks permitted to each group are outlined below.
Members of the Administrator group have total control over the computer and everything on it. The user named Administrator is the default account within this group. The domain account of each faculty or staff member with a Windows XP computer is part of the Administrator group on his or her computer.
Administrators Can:
- Create, modify, and access local user accounts
- Install new hardware and software
- Upgrade the operating system
- Back up the system and files
- Claim ownership of files that have become damaged
- Do anything a Power User can
The Power User class can perform any task except for those reserved for Administrators. They are allowed to carry out functions that will not directly affect the operating system or risk security. All domain accounts are part of the Power Users group on public Windows XP computers.
Power Users Can:
- Create local user accounts
- Modify user accounts which they have created
- Change user permissions on users, power users, and guests
- Install and run applications that do not affect the operating system
- Customize settings and resources on the Control Panel, such as Printers, Date/Time, and Power Options
- Do anything a User can
Power Users Cannot:
- Access other users' data without permission
- Delete or modify user accounts they did not create
Users can perform common tasks, but have little power to affect the computer outside of their own account. The Users group is the most secure environment in which to run programs, since a User cannot affect the operating system or program files.
Users Can:
- Create, modify, and delete their own data files
- Run system-wide or personally installed applications
- Change their personal settings
- Install programs for their own use only
- Access the network
- Print to local or networked printers
- Do anything a Guest can
Users Cannot:
- Modify system-wide settings, operating system files, or program files
- Affect other users' data or desktop settings
- Install applications that can be run by other users
- Add printers
- Configure the system for file sharing
The Guests group grants limited access to occasional or one-time users. Once a Guest logs out, all files created by the guest is deleted.
Guests Can:
- Log in and out
- Run installed applications
- Navigate through the file system
- Shut down the system
Guests Cannot:
- Do anything else.
| Computing at Wellesley | Macintosh Documentation | PC Documentation |