Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.os.windows-10 > #182763

Re: Fresh reinstall and file associations

Show all headers | View raw

"John C." <r9jmg0@yahoo.com> wrote:

> Not sure what a PDA server is. I'm using a local account on a one-user
> system, non-networked.

Then I'm guessing you also don't know what is a domain in a corporate
network of workstations.

PDC = Primary Domain Controller (PDA was a typo).  

When logging into a corporate workstation, you are logging into the
corporate domain (although you may have the option to login into a local
account, too, but usually you aren't given the login credentials for
local acocunts since the IT folks are supposed to manage the
workstations).  When logging into a domain, policies get pushed onto
your workstation.  Since all policies are registry entries, and *if* you
were given the login credentials for an admin-level account on your
workstation, you can add a batch script with reg.exe commands to change
those policies.  I had to do that to override the timeout and password
requirement on the screen saver decided by IT for a pushed policy, for a
kiosk workstation that had to always be available to anyone in QA that
needed to use it, but it was in a digitally locked room, so only users
with the code could get at it (me, my manager, his manager, and a backup
person in case the others were out sick, got killed, or moved to a
different job).

https://en.wikipedia.org/wiki/Domain_controller_(Windows)

By the way, NEVER log into the Administrator account except in an
emergency.  Don't use it as a working account.  If you need to always
login to an admin-level Windows account (in the Administrators security
group), create your own Windows account with admin privileges.  In fact,
for me, right after installing Windows, I create a secondary
Administrator account called TechSupport, AdminBkup, or some such name
to distinguish from working accounts (admin or restricted).  Sometimes
user profiles get corrupted.  If you have image backups, you can restore
to get your account working again; else, you need a non-corrupted admin
Windows account to make repairs, and that's when you use the
Administrator or other admin-level Windows account that is rarely
touched to prevent its profile getting corrupted.

Windows will create multiple profiles in the registry for backup.
You'll see them under HKEY_LOCAL_MACHINE\SYSTEM listed as ControlSetxxx,
where xxx is a number, like 001, 002, etc.  CurrentControlSet is the
pointer to whichever ControlSetxxx is the default during startup.  If
the current control set gets corrupted, you can try selecting a
different config set during bootup (you need to see the boot menu to
make that choice).  For example, a driver install since they run at ring
0 could cause Windows to hang or crash, and you need to revert to an
earlier config set where the driver did not exist, or was a prior
version.  However, that doesn't always work to get you back a working
Windows.  Image backups are important not just for data recovery, but
also for system recovery.

> Nice to know that CFA is disabled by default. Onerous indeed when it's
> enabled.
> 
> How enabled do you leave [UAC protection]? Just curious.

2nd setting down from top, which is:

  Notify only when apps try to make changes to my computer (default)

That is the default setting.  For example, although I am logged into a
Windows account in the Administrators security group, I will get the UAC
prompt when I open apps with admin priveleges, like a shortcut to
cmd.exe where "Run as administrator" is enabled.  The next setting is:

  Notify me only when apps try to make changes (do not dim my desktop)

I don't see a reduction in UAC prompts, but the prompt itself does not
get focus.  When the other setting, the UAC prompt gets focus, and I
don't have to use the mouse, but just the keyboard (left arrow to switch
from No to Yes, and Enter key) to get past the UAC prompt.

Few programs need admin privileges.  Most times when I'm in a cmd shell,
I'm doing admin functions, and why I have that shortcut run under admin
privs.  I could have another shortcut to run cmd.exe without admin
privs, but I don't as much need a command shell for non-admin functions.
Some programs will attempt system changes, like the registry editor, but
again I'm not often in there.  Other programs, like Word, NNTP client,
e-mail client, web browser, calculator, games, etc, don't need and
really should not run with admin privs.

If you get lots of UAC prompts, perhaps reconsider why those non-system
programs must run with admin privileges.  They probably should not, by
default.  You should be getting UAC prompts when you run a program that
must be ran with admin privs, and that means you are digging into the OS
instead of just using it as a platform to run user-mode software.  The
UAC prompt occurs when doing something to the OS; i.e., admin functions.

Back to alt.comp.os.windows-10 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-06 06:46 -0800
  Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-02-06 09:26 -0600
  Re: Fresh reinstall and file associations Newyana2 <newyana@invalid.nospam> - 2025-02-06 12:00 -0500
    Re: Fresh reinstall and file associations Java Jive <java@evij.com.invalid> - 2025-02-06 17:59 +0000
  Re: Fresh reinstall and file associations "Alan K." <alan@invalid.com> - 2025-02-06 13:47 -0500
  Re: Fresh reinstall and file associations ...w¡ñ§±¤ñ  <winstonmvp@gmail.com> - 2025-02-06 14:16 -0700
  Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-06 17:26 -0800
    Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-06 17:40 -0800
      Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-02-06 21:11 -0600
        Re: Fresh reinstall and file associations Java Jive <java@evij.com.invalid> - 2025-02-07 12:59 +0000
      Re: Fresh reinstall and file associations "Allan Higdon" <allanh@vivaldi.net> - 2025-02-07 07:24 -0600
      Re: Fresh reinstall and file associations Newyana2 <newyana@invalid.nospam> - 2025-02-07 10:57 -0500
      Re: Fresh reinstall and file associations Frank Slootweg <this@ddress.is.invalid> - 2025-02-07 16:40 +0000
      Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-07 15:24 -0800
    Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-02-06 21:12 -0600
      Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-07 04:17 -0800
        Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-02-07 08:18 -0600
          Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-07 15:31 -0800
            Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-02-07 19:10 -0600
        Re: Fresh reinstall and file associations ...w¡ñ§±¤ñ  <winstonmvp@gmail.com> - 2025-02-07 09:37 -0700
      Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-03-02 05:42 -0800
        Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-03-02 14:50 -0600
          Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-03-03 06:19 -0800
            Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-03-03 14:26 -0600
              Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-03-04 04:04 -0800
                Re: Fresh reinstall and file associations VanguardLH <V@nguard.LH> - 2025-03-04 11:53 -0600
    Re: Fresh reinstall and file associations Java Jive <java@evij.com.invalid> - 2025-02-07 16:48 +0000
  Re: Fresh reinstall and file associations Mr Xi Ji Ping <ping@china.cn> - 2025-02-07 03:00 +0000
    Re: Fresh reinstall and file associations "John C." <r9jmg0@yahoo.com> - 2025-02-07 04:19 -0800

csiph-web