Create a user with absolutely no admin capability?

Questions about Grub, UEFI,the liveCD and the installer
Forum rules
Before you post please read how to get help
Post Reply
jharris1993
Level 3
Level 3
Posts: 128
Joined: Mon Nov 05, 2012 9:43 pm
Location: Woprcester Ma. (USA) when I'm not in Moscow Russia
Contact:

Create a user with absolutely no admin capability?

Post by jharris1993 »

Greetings!

Question:

I want to install Mint on a system for my 8 and 10 y/o granddaughters. However, I want to create a user(s) for them that is completely devoid of ANY administrative capabilities whatsoever. No "sudo". No "enter your password to change system features". No updates. No Synaptic. Just use the system at a basic user level.

In current versions of Windows, you can create a user that requires a DIFFERENT credential / password to access system level features. Is it possible to do something like that here? (i.e. The user's password can be used to login and unlock the screen, but a *different* password is needed to make administrative changes.)

Can do?

Thanks!

Jim "J.R."
Jim "JR"

Some see things as they are, and ask "Why?"
I dream things that never were, and ask "Why Not".

Robert F. Kennedy

“Impossible” is only found in the dictionary of a fool.
Old Chinese Proverb

User avatar
Larry78723
Level 7
Level 7
Posts: 1808
Joined: Wed Jan 09, 2019 7:01 pm
Location: Jasper County, SC, USA

Re: Create a user with absolutely no admin capability?

Post by Larry78723 »

Any user you create as the admin user has only those permissions that you grant. That means that if you create a user, they have no rights to do make any changes unless you add those rights. Only you, logging in as the administrator, will be able to make changes on that machine if you don't grant those rights.
Image

jglen490
Level 6
Level 6
Posts: 1000
Joined: Sat Jul 15, 2017 9:57 pm

Re: Create a user with absolutely no admin capability?

Post by jglen490 »

Agree with Larry78723. It's been a while, but by default a new user created by the original user has no admin rights and no group memberships - unless the original user grants those rights and memberships. Go ahead and create each user, and then login as the user and see what groups that user is in and if that user is in sudoers - both should come up negative. You may end up adding the users to sound or printing groups, but that's easy to do on an exception basis.
I feel more like I do than I did when I got here.
Toshiba A135-S2386, Intel T2080, ATI Radeon® Xpress 200M Chipset, 2GB RAM, 500GB

jharris1993
Level 3
Level 3
Posts: 128
Joined: Mon Nov 05, 2012 9:43 pm
Location: Woprcester Ma. (USA) when I'm not in Moscow Russia
Contact:

Re: Create a user with absolutely no admin capability?

Post by jharris1993 »

This is different than the original user created during installation?

AFAIK, user (users?) I create inherit these capabilities by default - or do I misunderstand this?
Jim "JR"

Some see things as they are, and ask "Why?"
I dream things that never were, and ask "Why Not".

Robert F. Kennedy

“Impossible” is only found in the dictionary of a fool.
Old Chinese Proverb

User avatar
Moem
Level 20
Level 20
Posts: 10637
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Create a user with absolutely no admin capability?

Post by Moem »

jharris1993 wrote:
Fri Dec 27, 2019 5:13 am
This is different than the original user created during installation?
Yes, because that user has to be able to use sudo or you'd be in big trouble.

New users inherit only what you make them inherit... check the groups membership of the new user you are creating.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

User avatar
karlchen
Level 20
Level 20
Posts: 12248
Joined: Sat Dec 31, 2011 7:21 am
Location: Germany

Re: Create a user with absolutely no admin capability?

Post by karlchen »

Hello, jharris1993.

I assume that you use the application "Users & Groups" in order to create new user accounts.
There are 2 predefined user types here on the xfce desktop, Administrator and Desktop-User.
I assume that on Mate desktop and Cinnamon desktop the user types are called Administrator and Desktop-User as well.
Might be the Desktop-User is called Standard User instead. But Administrator will always be Administrator.

When you create a new user, who must not have any sudo privileges, make sure that the selected user type is not Administrator, but Desktop-User / Standard User.

Regards,
Karl
Image
Linux Mint 19.2 64-bit Cinnamon, Total Commander 9.22a 64-bit
Haß gleicht einer Krankheit, dem Miserere, wo man vorne herausgibt, was eigentlich hinten wegsollte. (Goethe)

jharris1993
Level 3
Level 3
Posts: 128
Joined: Mon Nov 05, 2012 9:43 pm
Location: Woprcester Ma. (USA) when I'm not in Moscow Russia
Contact:

Re: Create a user with absolutely no admin capability?

Post by jharris1993 »

Up until now, I've never needed more than one user, so this is (relatively) new territory for me.

I'll try what you suggest and see what happens.

Thanks!
Jim "JR"

Some see things as they are, and ask "Why?"
I dream things that never were, and ask "Why Not".

Robert F. Kennedy

“Impossible” is only found in the dictionary of a fool.
Old Chinese Proverb

fabien85
Level 7
Level 7
Posts: 1673
Joined: Tue Mar 11, 2014 4:30 pm

Re: Create a user with absolutely no admin capability?

Post by fabien85 »

+1 on everything said, just to add that on CInnamon when you add a user from "Users and Groups", you have the choice of the account type : "Administrator" or "Standard". So what karlchen calls "Desktop-User" for Xfce is "Standard" in Cinnamon.

Post Reply

Return to “Installation & Boot”