Page 1 of 1

Create a user with absolutely no admin capability?

Posted: Thu Dec 26, 2019 4:33 pm
by jharris1993
Greetings!

Question:

I want to install Mint on a system for my 8 and 10 y/o granddaughters. However, I want to create a user(s) for them that is completely devoid of ANY administrative capabilities whatsoever. No "sudo". No "enter your password to change system features". No updates. No Synaptic. Just use the system at a basic user level.

In current versions of Windows, you can create a user that requires a DIFFERENT credential / password to access system level features. Is it possible to do something like that here? (i.e. The user's password can be used to login and unlock the screen, but a *different* password is needed to make administrative changes.)

Can do?

Thanks!

Jim "J.R."

Re: Create a user with absolutely no admin capability?

Posted: Thu Dec 26, 2019 4:42 pm
by Larry78723
Any user you create as the admin user has only those permissions that you grant. That means that if you create a user, they have no rights to do make any changes unless you add those rights. Only you, logging in as the administrator, will be able to make changes on that machine if you don't grant those rights.

Re: Create a user with absolutely no admin capability?

Posted: Thu Dec 26, 2019 5:19 pm
by jglen490
Agree with Larry78723. It's been a while, but by default a new user created by the original user has no admin rights and no group memberships - unless the original user grants those rights and memberships. Go ahead and create each user, and then login as the user and see what groups that user is in and if that user is in sudoers - both should come up negative. You may end up adding the users to sound or printing groups, but that's easy to do on an exception basis.

Re: Create a user with absolutely no admin capability?

Posted: Fri Dec 27, 2019 5:13 am
by jharris1993
This is different than the original user created during installation?

AFAIK, user (users?) I create inherit these capabilities by default - or do I misunderstand this?

Re: Create a user with absolutely no admin capability?

Posted: Fri Dec 27, 2019 7:06 am
by Moem
jharris1993 wrote:
Fri Dec 27, 2019 5:13 am
This is different than the original user created during installation?
Yes, because that user has to be able to use sudo or you'd be in big trouble.

New users inherit only what you make them inherit... check the groups membership of the new user you are creating.

Re: Create a user with absolutely no admin capability?

Posted: Fri Dec 27, 2019 9:04 am
by karlchen
Hello, jharris1993.

I assume that you use the application "Users & Groups" in order to create new user accounts.
There are 2 predefined user types here on the xfce desktop, Administrator and Desktop-User.
I assume that on Mate desktop and Cinnamon desktop the user types are called Administrator and Desktop-User as well.
Might be the Desktop-User is called Standard User instead. But Administrator will always be Administrator.

When you create a new user, who must not have any sudo privileges, make sure that the selected user type is not Administrator, but Desktop-User / Standard User.

Regards,
Karl

Re: Create a user with absolutely no admin capability?

Posted: Sat Dec 28, 2019 4:40 am
by jharris1993
Up until now, I've never needed more than one user, so this is (relatively) new territory for me.

I'll try what you suggest and see what happens.

Thanks!

Re: Create a user with absolutely no admin capability?

Posted: Sun Dec 29, 2019 6:07 am
by fabien85
+1 on everything said, just to add that on CInnamon when you add a user from "Users and Groups", you have the choice of the account type : "Administrator" or "Standard". So what karlchen calls "Desktop-User" for Xfce is "Standard" in Cinnamon.