Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Correct me if I am wrong, but I think Windows 7 is the only operating system out there that requires a hint for the first user created on the system (have not had a chance to check out Windows 8 Beta). Why does Microsoft insist on requiring a hint for what could be seen as the root user? Of course you could always put something bogus in the field, but why require a hint?

share|improve this question
up vote 8 down vote accepted

Because these devices are for mass consumption. Security must fight with dealing with a spectrum of users and usability. It is possible that users will only ever set up the first user. Let's face it, a good hint can be useful if created properly. However, bad passwords are more common than bad hints.

share|improve this answer
Should I undersand your answer that Windows 7 doesn't have in-built (in all Windows) non-removable Administrator user? – Gennady Vanin Геннадий Ванин Mar 25 '12 at 3:16
You can remove the root administrator account. It has the potential to break a lot of things though if apps aren't written correctly. It sounds like @Logicalscope was referring to consumer users, not business users. – Steve Mar 25 '12 at 17:48
This questions was asked with businesses in mind, but logicalscope makes a good point that business is not the only market Microsoft is in. – hydroparadise Mar 26 '12 at 13:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.