Windows 2000/XP users switch Dafa

Users who use Windows 2000/XP know that it is best not to log in as a member of the Administrators group in their daily work. This is because the administrator has the power to kill the system files. If you are not careful, you will "indiscriminately kill innocent", causing the system to "refuse to play again". Usually you should log in to the system as a normal user (member of the Users group). Since the accounts of the Users group cannot modify the system registry settings, operating system files or program files, they have innate immunity to viruses and Trojans!

Obviously, using the Users group to log in can make Windows 2000/XP not as easy as Windows 98, but users can't use applications that can only be executed by system administrators, such as system management. Tasks (disk defragmenters, etc.), use virtual drives, and more.

It seems that the fish and the bear's paw can't have both —— However, these Microsoft have already considered for us, it provides us with the "User Switch" function in Windows 2000/XP. This function is different from the user logout. For example, different user accounts are like actors on the stage. Logout is to replace the actors (user accounts), and all the props that are carried with this actor (the application opened by the user account) ) All are removed; and the user switch is equivalent to only giving the actor a "face change" (temporarily changing the user account identity), and will not remove the item costume (retain the session opened by the user account). Let's say that we don't practice it. We will use Windows XP as an example to see how to use the fast user switching function.

Using “Logout&#;>Menu Method

The most common way to switch users is to access the User Switching feature via the “Logout” menu. The method is: click “ start → logout & rdquo;, in the "Open Windows" dialog box shown in Figure 1, click the "Switch User" button, the system will retain the current session state. On the surface, this is no different from logging out users, but using the switch user method can keep the session opened by the original user account (for example, if you are in the process of downloading the software, the download task will continue after the user switch. If you use "Logout", then the software download task will be forcibly closed).

Figure 1

Fast User Switching

Obviously, the above method is cumbersome: the user needs to switch to the administrator environment and then log out. In fact, many times there is no need to do it, we can use the fast user switching function to run the application as an administrator directly in the current user environment!

Suppose we are in the normal user environment and want to configure the trust domain of Norton Personal Security. However, because the current user's "face" (ie, permissions) is not large enough, the firewall configuration program refuses to execute. Let's come up with a quick user switch. "Block": Open “Start →All Programs & Rarr; Norton Internet Security", right-click on the "Norton Internet Security" menu item and select "Run Mode" Menu item, the program will open the "Run Identity" dialog box, click on the "The following users" box, and then select an administrator account in the "User Name" drop-down list box, and in the In the "Password" text box, enter the corresponding account password. Finally click on the “OK” button, as shown in Figure 2. Next, the system will run Norton Personal Security's configuration program as an administrator!

Figure 2

Using the Runas command

Friends who are familiar with Linux/UNIX will not be unfamiliar with this command. You can use this command to superusers and ordinary users. Freely carry out "face change". Now Windows 2000/XP also has a similar command ——Runas command. Runas is a DOS command that runs only in the Windows 2000/XP DOS command window. It allows the user to run specified tools and programs with other privileges instead of the permissions provided by the currently logged in user account. The syntax is as follows:

Runas [{/profile| /noprofile}] [/env] [/netonly] [/showtrustlevels] [/trustlevel] /user:UserAccountName program

The role of each parameter is as follows:

/profile: load user profile Is the default parameter of the Runas command.

/no profile: Does not load the user profile, which can improve the loading speed of the application, but because some applications need to read the configuration file of a specific user, it is not recommended to use this parameter.

/env: Specifies the network environment currently in use, not the user's local environment.

/netonly: Indicates that the specified user information is only used for remote access.

/showtrustlevels: Lists the /trustlevel switch.

/trustlevel: Specifies the authorization level at which the application runs.

/user:UserAccountName: Specifies the name of the user account under which the program will run. For stand-alone users, the following format can be used:

/user:UserName@ComputerName

or /user:ComputerNameUserName

UserName here should use a specific user account Instead, ComputerName refers to the computer name.

For users of domains or workgroups, you can use the following format:

/user:UserNme@DomainName(WorkGroupName)

or /user:DomainName(WorkGroupName)UserName< Br>

The DomainName (WorkGroupName) here refers to the domain name of the domain where the computer is located (or the name of the workgroup).

program: Specify the program or command to run. You can use the Runas command to launch any application, MMC console project, or “control panel” project. It should be noted here that not all projects can be started with Runas, such as "Printers" folders and desktop items.

Application Examples:

To give the Runas command "show", it's an extraordinary example. Here is an example. Suppose you want to run Group Policy as Administrator:

(1) Open the "Run" dialog box, type "ldd; cmd" and press Enter to open the DOS command window;

(2 At the command prompt, type “runas /profile /user:ourcomputeradministrator "mmc gpedit.msc"” and press Enter;

(3) Next, you will be prompted to enter the password for the administrator account. Note that the account entered will not be displayed here! As shown in Figure 3.

(4) If the account number and password are correct, the system will start the group policy management program as an administrator.

Figure 3

Tips for use:

Obviously, it would be very cumbersome to enter a long list of commands each time you start the Group Policy Manager. Fortunately, Runas also provides the ability to create shortcuts. We just need to create a shortcut on the desktop to save the trouble of entering commands every time. Suppose we often run as an administrator & ldquo; computer management & rdquo; program:

(1) right-click on the blank space on the desktop, click on the shortcut menu pop-up menu & ldquo; new & rarr; shortcut Way & rdquo;, open the "Create Shortcuts" wizard dialog.

(2) Enter “runas.exe /user:ourcomputeradministrator "mmc %windir%system32compmgmt.msc"” in the "Project Location" text box, and then specify the shortcut according to the screen prompts. Name, then & ldquo; OK & rdquo;

(3) In the future, just double-click the shortcut to pop up a DOS command window, prompt for the administrator password, enter the correct password and press Enter to start the “Computer Management” program.

Summary

The three user switching methods described above can be described as different. The logout menu method is the most cumbersome, but also the most thorough method; while using the "Run Identity" dialog box and the Runas command, although it is relatively simple to use, not all tasks can be completed, such as setting folder sharing.

Figure 4

One more thing to note here: To ensure that the Fast User Switching feature is used, you must ensure that the "Secondary Logon" service and the "Fast User Switching Compatibility" service have been started, here is the most Good to set up to automatically start with Windows. The way to open these two services is:

Double-click "Control Panel & Rarr; Management Tools & Rarr; Service", and then find the "Fast User Switching Compatibility" service in the window. Then double-click to open the Service Properties dialog box, switch to the "General" tab, select the "Automatic" option in the "Startup Type" drop-down list box (as shown in Figure 4), as shown . Then switch to the "Dependency" tab to ensure that the dependent services displayed under it are all set to run automatically, as shown in Figure 5.

Set the "Secondary Logon" service in a similar way. Ok, now that everything is ready, you have nothing to steal!

Figure 5