Advanced Step 1: Create a Separate Admin Account

Most of your daily computer activity does not require admin access. Normally, you only need admin access to install software and make critical configuration changes. An admin account, however, can be used to override all security settings. By using a normal user account for daily work you limit the damage a virus or malicious attacker can inflict to ONLY that account should it be compromised.

To create a separate admin account follow these steps:

1. From the Apple menu, select System Preferences.
2. In the System Preferences window, click Accounts.
3. Click the lock icon to make changes.
4. If prompted, enter the admin userid and password.
5. In the Accounts window, click the plus sign to add a new account.
   
6. In the New window complete the following fields:
   • Name - create a name for the admin account (i.e., main-admin).
   • Password - select a password that is difficult for someone to guess. Follow the guidelines in the Selecting a Secure Password section of the Managing Your Andrew Account and Password document AND use the Password Assistant to create a strong password.
   • Verify - Retype the password you selected.
   • Check Allow user to administer this computer.
     
7. Select Create Account .
8. Click the lock icon to prevent further changes and close the Accounts window.

Advanced Step 2: Remove Admin Access from Everyday Accounts

Last Updated:  01/24/07