administrator vs limited account

  • Thread starter Thread starter richard
  • Start date Start date
R

richard

A writer about security measures in the Washington Post says that there
is no better way of securing one's computer from attack than by changing
one's user account to limited. He seems pretty convincing.

Before I make the change, I wanted to get some feedback from others who
may have already made the change. Any problems?

thanks
 
richard said:
A writer about security measures in the Washington Post says that there
is no better way of securing one's computer from attack than by changing
one's user account to limited. He seems pretty convincing.

Before I make the change, I wanted to get some feedback from others who
may have already made the change. Any problems?

thanks


I think there are other, more important precautions to take, but he
does have a point.

Routinely using a computer with administrative privileges is not
without some risk. You will be much more susceptible to some types of
malware, particularly adware and spyware. While using a computer with
limited privileges isn't the cure-all, silver bullet that some claim it
to be, any experienced IT professional will verify that doing so
definitely reduces that amount of damage and depth of penetration by the
malware. If you get infected/infested while running as an
administrator, the odds are much greater that any malware will be
extremely difficult, if not impossible, to remove with formating the
hard drive and starting anew. The intruding malware will have the same
privileges to all of the files on your hard drive that you do.

A technically competent user who is aware of the risks and knows
how to take proper precautions can usually safely operate with
administrative privileges; I do so myself. But I certainly don't
recommend it for the average computer user.

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
A writer about security measures in the Washington Post says that there
is no better way of securing one's computer from attack than by changing
one's user account to limited. He seems pretty convincing.

Before I make the change, I wanted to get some feedback from others who
may have already made the change. Any problems?

That is how I have been running from the get-go, and I believe it is
a valuable security precaution.

The biggest problem I've seen is that people here suggest various
things in TweakUI, and many TweakUI features are unavailable to
limited users. (TweakUI is very stupidly written in this respect --
even quite a few per-user settings can't be changed unless you're an
administrator.)

That's not a very serious problem, in the scheme of things. I mention
it only to let you know I've found nothing more serious than that.
 
Wed, 07 Feb 2007 09:12:25 -0700 from Bruce Chambers
I think there are other, more important precautions to take, but he
does have a point.

Bruce gives a valuable warning.

By endorsing running as limited user, I didn't mean to imply that
that's the only security precaution to take.
 
Back
Top