Windows 98 User Profiles and Multi-User Settings

This article examines how Microsoft Windows 98 managed personalized desktop environments for multiple people sharing a single computer. It covers the setup process for enabling multi-user profiles, the file structure and Windows Registry mechanics behind desktop customization, the scope of settings individual users could modify, and the fundamental security limitations of this implementation compared to enterprise operating systems.

Enabling Multi-User Profiles

By default, Windows 98 operated in a single-user configuration, presenting the same desktop, Start menu, and application preferences to anyone who turned on the machine. To support multiple users, an administrator had to enable User Profiles manually through the Passwords applet in the Control Panel.

Under the User Profiles tab, selecting the option "Users can customize their preferences and desktop settings" activated the multi-user system. Windows 98 then prompted the user to select which specific elements to individualize, such as:

  • Desktop icons and Network Neighborhood contents
  • The Start menu
  • Favorites folder
  • Downloaded web pages and My Documents folder

The Storage Architecture and Registry Structure

Once enabled, Windows 98 created a dedicated directory structure for each user under the main system directory, typically located at C:\WINDOWS\Profiles\<Username>\. Inside this folder, Windows created local versions of redirected shell folders, including:

  • Desktop
  • Start Menu
  • Favorites
  • Application Data

User-specific configurations relied heavily on the Windows Registry. Windows 98 maintained its registry using two primary binary files: SYSTEM.DAT, which held hardware and machine-wide configurations, and USER.DAT, which stored individual user preferences. In a multi-user setup, the global USER.DAT remained in C:\WINDOWS\, but each profile maintained its own copy of USER.DAT within C:\WINDOWS\Profiles\<Username>\.

When a user logged in, the operating system loaded that user's specific USER.DAT file into the HKEY_CURRENT_USER registry hive, applying their custom themes, screen savers, wallpaper, and application preferences.

The Logon Process

With profiles enabled, Windows 98 displayed a logon dialog box upon boot. If a new user entered a unique username and created an optional password, Windows initiated the Add New User Wizard. This wizard copied default desktop configurations to establish the new profile's baseline files.

When returning users entered their credentials, the system mapped the user-specific folders to the shell and loaded their individual registry branch. If network connectivity was present, Windows 98 could also pull a "roaming profile" from a Windows NT or Novell NetWare server, synchronizing local changes back to the server upon logoff.

Security and Architectural Limitations

Windows 98 was built on the legacy DOS/Windows 9x architecture and lacked the access control mechanisms found in Windows NT. Consequently, Windows 98 profiles provided personalization, not data security:

  • Bypassable Logon: Clicking the "Cancel" button or pressing the Escape key at the logon prompt dismissed the dialog and granted access to the operating system using the generic default profile.
  • No File Access Controls: Because the underlying file systems (FAT16 and FAT32) lacked access control lists (ACLs) and file-level permissions, any user could browse to C:\WINDOWS\Profiles\ in Windows Explorer and view, edit, or delete files belonging to other users.

Despite these security shortcomings, Windows 98 user profiles established a functional method for households and small offices to maintain separate, customized desktop environments on a shared personal computer.