Will wrote:
Hi. You thoughts welcome on my latest conundrum.

Just trying to setup a new laptop (well make a start) for someone's birthday soon.
Windows 8 - 64b (basic win8 I think) pre-loaded but was a virgin install (manufacture's).
I've not connected to the net yet and not activated anything yet.

Now thinking like XP and bad idea to set up usual owner/user as admin, and thinking I should build an admin account (if only to
'fix it' at term ends) I have added an admin (for me) and user (for daughter) but wonder if this is the best way.

She'll want to have access to admin from time to time but on her account it prompts for my admin (only) to change say the time, no
UAC ? - or is this because I've added my admin account (or because I haven't set her a password yet). If I promote her to admin is
it safe for normal use.

So what is the correct way to set this up for one owner/user ? (I should be able to delete any/both accounts I've set up so far I
think).

Also, is there no "Administrator" default account on W8? With no one logged in, control -alt-del doesn't bring up any options to
access 'Administrator'.



There's some info here. Any time you see an article like this,
search for "Metro", to see if the procedure has any
side effects on Metro apps. On mobile devices and
WinRT, Metro is bound to be more "locked down" and
more resistant to screwing around with administration.
Not a problem for the laptop and its version of Windows 8 (non-RT).

http://www.eightforums.com/tutorials...ndows-8-a.html

The newer OSes are set up such that no administrator account, opens
every door. There is resistance at every turn. Lots of things
require extra steps. So if you see "access denied" or UAC
prompts or whatever, don't freak out. It's supposed to work
that way. It's the new security model. Only an older OS,
allows running "as a God" and messing with everything directly.

You could just as easily not modify the laptop, give the laptop
to recipient, as well as a copy of TeamViewer. Then connect remotely
when you need to help the recipient.

http://en.wikipedia.org/wiki/Teamviewer

The new user can enter their details, sign up for a Microsoft
Store account and so on, when they get the machine. That is,
if they expect to use the App Store. There should be an option
to only use local accounts, if that person wants. But they're
likely to want to connect to the App Store. And for that reason,
I might just leave the laptop "sealed" until the recipient
receives it.

Paul