MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Table 7-1 Built-In Local User Accounts
Account Description
Lesson 1 Introduction to User Accounts
SUPPORT_xxxxxxxx The SUPPORT_xxxxxxxx account (where xxxxxxxx is a random number
generated during Windows setup) is used by Microsoft when providing
remote support through the Help And Support Service account.
It is not available for logon or general use
Although you cannot delete any of the built-in user accounts, you can rename or disable
them. To rename a user account, right-click the account in the Computer Management
window and then select Rename. You will learn more about disabling accounts
later in this section.
Real World Using RunAs to Start a Program
As you might expect, administrators require more permissions and user rights to
perform their duties than other users. However, logging on using an administrator
account as a regular practice is not a good idea because it makes the computer
(and the network) more vulnerable to security risks such as viruses, Trojan
horses, spyware, and other malicious programs. A much safer practice is to log on
routinely using a normal account that is a member of the Users or Power Users
group and to use the RunAs command to perform tasks that require administrative
rights or permissions. For example, you could log on using your normal user
account and then launch the Computer Management tool using administrative
credentials.
Windows XP Professional provides this functionality using the Secondary Logon
service, which must be enabled for the RunAs command to work. To learn how
to enable this service, read Chapter 1, “Introduction to Windows XP Professional.”
After the Secondary Logon service is enabled, you can use the RunAs command
in one of two ways.
■ In Windows Explorer (or on the Start menu), hold down the SHIFT key, rightclick
the program (or shortcut) you want to run, and click Run As. In the Run
As dialog box, provide your administrative credentials.
■ At the command prompt, type runas /user: domain_name\administrator_
account program name. For example, you might type runas /user: contoso\administrator
compmgmt.msc to start the Computer Management
tool using an account named Administrator in a domain named Contoso.
7-5