Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a co-worker who is set up as an admin user under Win XP SP3 and I'm trying to switch her to being a restricted user. The short story is that when I switch her account to restricted, Chrome can't make HTTPS connections and Outlook can't connect to our Office 365 Exchange server. Firefox can make HTTPS connections with no problem.

Some things I've tried

  • Append ":443" to the HTTPS URL in Chrome
  • Reset browser settings in Chrome
  • Deleted Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists
  • Changed the account to the Power Users group

Some background

When I first changed her account to restricted she couldn't access any files in her home directory. This turned out to be because her home directory was owned by the Administrators group, not by her user account. I switched the ownership to her home account and she was able to access the files.

After that, even though she could access her files, she couldn't do things like make changes to her desktop or access the Recycle Bin settings. This turned out to be because her HKEY_CURRENT_USER keys were also owned by the Administrators group.

A potentially helpful error message

When Outlook starts up after her account has been switched to restricted, it gives this error message:


autodiscover-s.outlook.com

Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.

The application experienced an internal error loading the SSL libraries.

This site should not be trusted


So apparently there's something in the way that Google and Outlook (but not Firefox) handle HTTPS/SSL that gets broken when she doesn't have access to something somewhere. I imagine it's another thing that is owned by the Administrators group instead of her account. I just can't figure out what and where that something is.

share|improve this question
1  
Reason 138 to get rid of XP –  MDT Guy Jan 3 at 18:12
    
If you create a new user account does it work? The user profile problems are likely the reason you have this problem. You should never had that problem to be honest. Have you improted your security certificates into the Windows Certificate Store? Chrome and Outlook uses the` Windows Certificate Store`. Firefox handles its own certificates. –  Ramhound Jan 3 at 18:16
    
Steve, Windows XP was not designed for users running with non-admin users. Microsoft does say you can do that but there are many issues with that. Try making her account a power user and see if it helps. Its not as bad as an admin account but I think its worth the try –  Ganesh R. Jan 3 at 18:36
    
@GaneshR. - I always ran my Windows XP machine as a normal User and I never experienced the problems described. Where does Microsoft say this exactly? –  Ramhound Jan 3 at 18:48
    
@Ramhound I don't know anything about importing certificates, but I'll do some research on the Windows Certificate Store and see if that leads anywhere. It sounds like a good lead. –  SSteve Jan 3 at 20:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.