On Monday, June 17, 2019 at 8:14:38 AM UTC-7, Paul wrote:
Robert in CA wrote:
On Sunday, June 16, 2019 at 3:28:48 PM UTC-7, Paul wrote:
Robert in CA wrote:

I started to get the MediaCreationTool and was going to put it
on my flash key but it said, Windows 10 setup so I cancelled it.
I re-read the posts,. what about using Linux, Unix or Ubuntu? I
know I can keep using Win7 but I'm just thinking long term like
I did by buying the power supplies so am thinking of a backup OS
just in case. I can still of course get the Win10 key as a matter
of course while I still can.

What do you think?
Thanks
Robert
There should be an option to "create media for another computer".

Don't let the "scary intro" bother you.

The way these work, is there is *always* a
confirmation screen, that summarizes what's going
to happen if you click "Next", so it won't sneak
up on you and destroy the computer.

https://i.postimg.cc/mkcQnjTC/Media-...n-Tool1903.gif

Paul

I tried to follow your instructions, but I
don't understand what you mean by double clicking
or using Imagineburn to open the ISO file. I
see no ISO file. I do not know if I'm doing this
correctly and I have to login as Administrator to
do this. Again, I am leery of doing this if I have to
go to the Admin Account.

http://i66.tinypic.com/9qkx00.jpg

http://i66.tinypic.com/2uylk77.jpg

http://i65.tinypic.com/4r48r5.jpg

http://i68.tinypic.com/vcyxw4.jpg

http://i65.tinypic.com/2vdn1pu.jpg

Should I login as Admin and proceed?

Thanks,
Robert

Do you use a "limited account" normally ?

If the tool wanted to be elevated, it would
have put up a UAC box confirming that
it would be using administrator group privileges.

If you use the Accounts control panel, it may
state whether your current login user belongs
to the Administrator Group or not.

There are several account types, and this is a sample.

1000 - User Rob, belongs to Administrators Group
The first account created on the machine, usually
belongs to Administrator group, because MS
doesn't want you to lose the ability to do
Admin stuff.

1001 - If you made a second account, the second account
could belong to Administrator Group too. Or you
could remove the Administrator Group and
this would be a "LimitedRob" account. Such a
Limited User, cannot install software, because
without Admin they can't do stuff like Impersonate
System or perhaps, get a TrustedInstaller token.

500 - Real administrator. On modern Windows this
account is disabled. If you enable the account,
you should set a decent password for it.

Logging in as the 500 account, leaves you elevated at
all times. If you run the browser, watch Yahoo flash movies,
if the browser is exploited, the whole machine could easily
be tipped over.

If you run as 1000 in the example, while you belong to
Administrator group, the UAC prompt determine when
the program is "elevated". To run Firefox, you don't
see the UAC box, and Firefox runs "un-elevated". If the
browser is exploited, the damage could be less.

On the 1001 account in the example, the user can never
elevate, so running Firefox is the same as the previous
paragraph. More likely to limit damage if there is
an exploit on the loose.

Note that the numbers above (the ones in the 1000 range)
are only an example. And sometimes the numbers are
assigned slightly differently. There is only one "500" though.

The account 1000 in the example, offers the flexibility
via the usage of the UAC box, of running as Administrator Group,
or not. And that account provides safety and power at
the same time.

The account 1001 in my example, is for "keeping the kids safe".
To limit the stuff they can get into (via TakeOwn), removing
their Administrator Group membership ensures they can get
into less mischief.

Review your account setup, and determine which case of the
above, applies to your current account.

I don't typically recommend logging in as "500", as
the "1000" in the example is just as effective when
the UAC box is acknowledged.

WinXP didn't have a UAC box, and if you belonged to
the Administrator Group there, it was always enabled.
You could probably use the "droprights" or similar
program (third party) to de-elevate.

*******

Summary: You can log in as anything you want. Review the
Accounts control panel first, and see how many
accounts you have, and which one is "the right size"
for this job.

whoami /user /priv

A privilege list with four lines, might be a limited
one, while a privilege list with maybe fifteen items
could be Administrator Group.

Paul



I'm in the 1001 example; I have two accounts I created,
my Administrator Account and my User Account. I usually
am on my User Account when online but sometimes I have
to go into the Administrator Account like if I need to go
into disk management etc.

So should I proceed?

Thanks,
Robert