Re: administrator vs limited account

Tech-Archive recommends: Fix windows errors by optimizing your registry

richard wrote:
A writer about security measures in the Washington Post says that there is no better way of securing one's computer from attack than by changing one's user account to limited. He seems pretty convincing.

Before I make the change, I wanted to get some feedback from others who may have already made the change. Any problems?

thanks


I think there are other, more important precautions to take, but he does have a point.

Routinely using a computer with administrative privileges is not without some risk. You will be much more susceptible to some types of malware, particularly adware and spyware. While using a computer with limited privileges isn't the cure-all, silver bullet that some claim it to be, any experienced IT professional will verify that doing so definitely reduces that amount of damage and depth of penetration by the malware. If you get infected/infested while running as an administrator, the odds are much greater that any malware will be extremely difficult, if not impossible, to remove with formating the hard drive and starting anew. The intruding malware will have the same privileges to all of the files on your hard drive that you do.

A technically competent user who is aware of the risks and knows how to take proper precautions can usually safely operate with administrative privileges; I do so myself. But I certainly don't recommend it for the average computer user.

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
.

Relevant Pages

  • Re: foolproof computer from malware?
    ... If I make his account a limited user account, would that stop all malware from entering his computer? ... A technically competent user who is aware of the risks and knows how to take proper precautions can usually safely operate with administrative privileges; ... reliable and up-to-date antivirus software, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Windows Security Center damaged
    ... This one runs four different "command-line" scanners, ... In the Security Center, ... I'm sure that some malware caused that ... ETrust Internet Security Suite includes a firewall. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: OE6 slow after installing SP2 patch
    ... >> It turns out that Norton Internet Security was the problem. ... >>> Because of this tendency of attachments to infect, ... >>> The problem with this approach is that the antivirus software can ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Windows Security Center damaged
    ... In the Security Center, ... I'm sure that some malware caused that ... It looks like you recommend having 5 to 6 tools, ... ETrust Internet Security Suite includes a firewall. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to set up a secure XP windows home edition w/service pack
    ... to my satisfaction the Administrative tools: Microsoft Management Console, ... IP Security policy, ... I have copied the link on firewalls, ... > reliable and up-to-date antivirus software, ...
    (microsoft.public.windowsxp.setup_deployment)