Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Correct me if I am wrong, but I think Windows 7 is the only operating system out there that requires a hint for the first user created on the system (have not had a chance to check out Windows 8 Beta). Why does Microsoft insist on requiring a hint for what could be seen as the root user? Of course you could always put something bogus in the field, but why require a hint?

share|improve this question
add comment

1 Answer

up vote 8 down vote accepted

Because these devices are for mass consumption. Security must fight with dealing with a spectrum of users and usability. It is possible that users will only ever set up the first user. Let's face it, a good hint can be useful if created properly. However, bad passwords are more common than bad hints.

share|improve this answer
    
Should I undersand your answer that Windows 7 doesn't have in-built (in all Windows) non-removable Administrator user? –  Gennady Vanin Novosibirsk Mar 25 '12 at 3:16
    
You can remove the root administrator account. It has the potential to break a lot of things though if apps aren't written correctly. It sounds like @Logicalscope was referring to consumer users, not business users. –  SteveS Mar 25 '12 at 17:48
    
This questions was asked with businesses in mind, but logicalscope makes a good point that business is not the only market Microsoft is in. –  hydroparadise Mar 26 '12 at 13:32
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.