此主題已被鎖定
Kargor 2013 年 9 月 7 日 上午 11:17
Steam and Windows accounts?
Am I getting the wrong impression here, but does Steam really store at least some settings "globally", across all accounts on a machine?

I was trying to setup a Steam account for my parents; first thing I noticed is that I couldn't even run the Steam client, probably because it was already running on my account, which I just exited via "switch user", not via logoff.

The next thing -- I don't store my password on a machine that's basically not mine, but I stored theirs. Turns out, launching the steam client on my account gets their credentials -- WTF?

Is there a way to tell Steam to respect the boundaries between windows accounts?
< >
目前顯示第 1-15 則留言,共 67
Bad 💀 Motha 2013 年 9 月 7 日 上午 11:27 
引用自 Kargor
Turns out, launching the steam client on my account gets their credentials -- WTF?

Is there a way to tell Steam to respect the boundaries between windows accounts?

What exactly do u mean by this? You're not making any sense.
If you logged them into their account, how does it have any info from YOUR account?

What can happen though is if u login to your account on their machine, and then switch. A library view in Steam can reflect multiple users. This is done because of both accounts sharing the same local Steam Library Folder (aka SteamApps folder)

But in no way can logging into their account compromise your account.

What you can further do is if you both have Steam accounts, yet there are two Windows user accounts on the same machine. When u switch to yours (or vice versa), you should be logging off the currently open Windows user account. Do not simply switch users. When you only switch users and not log out of it, the other users apps remain open. Thus u won't be able to run Steam on two user accounts that are basically both trying to have their Windows (and thus Steam) accounts logged on at same time.

Also if you are sharing a system, with multiple Windows user accounts, then do not setup Steam to remember the login info.
最後修改者:Bad 💀 Motha; 2013 年 9 月 7 日 上午 11:29
Kargor 2013 年 9 月 7 日 上午 11:57 
Also if you are sharing a system, with multiple Windows user accounts, then do not setup Steam to remember the login info.

Well, that's exactly the problem -- why does Steam "leak" credentials into other windows accounts, instead of just keeping them where they have been entered? It just makes things so much more difficult for me, since I have to remember to "fix" the steam setup for them whenever I have used Steam...

At least I'm reading your post like that -- Steam just doesn't have a way to not leak credentials throughout the entire system?

I mean, no other software does that, and for good reason. When I access my mail it doesn't mean the next time my parents start the mail client they'll access MY mail too. Passwords stored in "my" Firefox are separate from passwords stored in "their" Firefox etc.

There is a reason why user accounts have been invented decades ago...
windar 2013 年 12 月 7 日 上午 3:42 
引用自 Bad-Motha
What you can further do is if you both have Steam accounts, yet there are two Windows user accounts on the same machine. When u switch to yours (or vice versa), you should be logging off the currently open Windows user account. Do not simply switch users. When you only switch users and not log out of it, the other users apps remain open. Thus u won't be able to run Steam on two user accounts that are basically both trying to have their Windows (and thus Steam) accounts logged on at same time.

Also if you are sharing a system, with multiple Windows user accounts, then do not setup Steam to remember the login info.

This is so incredibly wrong, it's not even possible to condone this way of doing things.
Software that cannot handle multiple user accounts of the system is just poorly designed software.
_wilco 2013 年 12 月 7 日 上午 4:39 
The thing is, Steam stores all configs and users in its install directory, unlike your Firefox, your mail client and other applications, which normally use the respective Windows Users AppData folder to store their user specific data.

You can however install another instance of Steam and use that for your parents' account. For example:
C:\Program Files\MySteam\...
C:\Program Files\ParentsSteam\...

You just have to use the right Steam.exe from the different folders on each Windows account. But keep in mind, if you store the login credentials for each account, you can access that account by activating the respective Steam.exe. For example:
C:\Program Files\MySteam\Steam.exe uses your account credentials, but can also be accessed by your parents' Windows User and vice versa. If you don't have a problem with that, it's an easy way how you can keep the convenience of an auto Login. But what's the big deal to simply enter your details, if you want to use Steam and don't keep the credentials stored?

And finally, Steam can't run in both Windows User accounts at the same time. So if you chose to use the method of two Steam instances, you can't use Windwos' "switch user" to keep one account logged in with Steam running and start it again with the other account. You'll have to log your Windows User out to start the second instance of Steam in the other account.
最後修改者:_wilco; 2013 年 12 月 7 日 上午 4:40
Burgeoning 2014 年 10 月 12 日 下午 5:57 
This is just bad programming.
Hilarion 2015 年 6 月 2 日 下午 1:18 
For some reason the Steam Client will not let me post my full answer here...
Hilarion 2015 年 6 月 2 日 下午 1:18 
This problem with the Steam Client not properly handling Windows User accounts and rights needs to be fixed!
Hilarion 2015 年 6 月 2 日 下午 1:19 
The fact that Valve is not doing anything about it comes only from the users not complaining about it. The users are not complaining because they are not aware of the security issues that come from this approach. One thing is that any Windows user can easily access any Steam user account, because he has access to all Steam users data as it's stored in the common Steam structures. The other, and maybe even more important thing is that for this to work, the Steam application installer actually sets access rights for that Steam application folder so that any user can change that folder contents.
Hilarion 2015 年 6 月 2 日 下午 1:22 
This allows Steam to write its settings there, to download games there, to update itself, regardless of the Windows user account used - if it is an administrative user or not. It also allows any user, or any malware running from that user account, to put a malicious files there for any other Windows user - including an administrative user - to get infected when trying to use Steam.
Hilarion 2015 年 6 月 2 日 下午 1:22 
Unfortunately other gaming platforms (e.g. GOG Galaxy, EA Origin) are sharing the same (or similar) dubious approach.

Yes, the solution will not be easy. Fortunately Valve has some skilled software developers on board. There will be issues, like when having a shared Steam installation and/or a shared game library, you would probably have to allow only the Windows administrative users to update it or have part of the Steam application to work as a Windows service, that will have necesary privileges to do that. This way the unprivileged Windows users would not be able to spread an infection to the whole system.
Hilarion 2015 年 6 月 2 日 下午 1:22 
What we - the users - should be doing is whining about it not yet being done. Tell Valve that we need that more than some new music playing, family sharing or game streaming features.
Hilarion 2015 年 6 月 2 日 下午 1:23 
Oh man... I had to split my message to so many parts, work around it not liking apostrophes and/or quotes or brackets... This is heavily broken...
Deozaan 2015 年 7 月 30 日 上午 9:35 
I've never messed with multiple users on my Windows machine before because it always seemed complicated and messy. But with Windows 10 (and possibly Windows 8, which I've never used), having multiple users is a cinch!

So I thought it would be a great idea to finally put multiple Windows accounts on my machine so that when my wife wanted to play her Steam games, it wouldn't log me out of my Steam account. (I have a long and secure Steam password, so it's annoying having to type it in again every day on my own machine.)

The simple act of adding another Windows account to my machine made me realize how utterly broken and insecure Steam is in this regard!

If I switch Windows users, the Steam client closes (on my Windows account). If my wife (in her Windows account) logs into her Steam account, it logs me out of my Steam account on my Windows account.

But what this also means is that if I password protect my Windows account, and therefore assume that all my data is protected and safe from anybody who doesn't know my password, and with that assumption, I tell Steam to remember my password... That means that any other Windows account that launches Steam will automatically be logged into my Steam account and have access to my games/saves/data.

I really don't understand how they could get this so wrong. It's really basic. Program files go in.... Program Files. User data (aka App data) goes in... you guessed it! the User/AppData folder! Keep them separate so that you can easily back up user data even if the program files need to be removed/replaced for troubleshooting.
Burgeoning 2015 年 7 月 30 日 下午 4:09 
You mean it's not secure for a guest to log into the admin's steam account? Get it together Steam.
Looming Dementia 2015 年 8 月 23 日 下午 7:56 
引用自 Bad-Motha
Also if you are sharing a system, with multiple Windows user accounts, then do not setup Steam to remember the login info.
I'm having the same problem as the original poster.

My girlfriend and I are using the same computer for gaming. We use separate Windows logins and separate Steam accounts, and we aren't using Switch User in Windows. We're doing a complete reboot. Yet if one of us logged into our Steam account, under our own Windows profile, when the other one of us logs in with our own Windows user profile, we get auto-logged into the other person's Steam account.

Your suggestion about not using the Remember Me checkbox isn't acceptable. We shouldn't have Steam crossing the barriers between Windows user accounts, with our login information.
< >
目前顯示第 1-15 則留言,共 67
每頁顯示: 1530 50

張貼日期: 2013 年 9 月 7 日 上午 11:17
回覆: 67