|
|
|
|
![]() ![]() |
Sep 20 2006, 10:55 PM
Post
#1
|
|
|
-=Hybrid Bus=- ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 744 Joined: 2-November 05 From: My hybrid bus (in NYC), a computer Member No.: 13,709 ![]() |
We all know the difference between a limited user and an administrator user under Win2k/XP - you can't/can install major software, perform system maintainence, and other stuff. But using a limited user on a day-to-day basis also provides you with decent protection from a bunch of threats: if the malware is running under your limited-rights user, it can only do as much as you can. For instance, a limited rights user can't edit the HKLM hive of the Registry, so any malware running under the same user won't be able to touch that area. It's extremely simple to implemnt, and pretty effective.
Note: don't forgo the anti-virus and Windows updates just because your user is slightly protected. |
|
|
|
Sep 21 2006, 01:09 AM
Post
#2
|
|
|
Advanced Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 144 Joined: 17-September 06 Member No.: 30,138 |
i think it is pretty uncomfortable, to be changin users, expecialy whith my slow pc
|
|
|
|
Sep 21 2006, 02:22 AM
Post
#3
|
|
|
-=Hybrid Bus=- ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 744 Joined: 2-November 05 From: My hybrid bus (in NYC), a computer Member No.: 13,709 ![]() |
i think it is pretty uncomfortable, to be changin users, expecialy whith my slow pc Here's a trick to work with my security method: If you need to run an executable (say, an installer), right click on the file in Explorer (or on any shortcut) and choose Run As.... You will get a dialog box asking you to enter an admin password. Supposedly Windows Vista will do this for you, but let's not discuss that..... |
|
|
|
Sep 21 2006, 01:20 PM
Post
#4
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 273 Joined: 14-April 06 From: Ontario, Canada, North America, Planet Earth Member No.: 21,845 |
I always use the RunAs command. It DOESN'T work on the Internet/E-mail programs on the start menu (although you can do it on those programs, just not there). Microsoft Office programs can't do that (you can do it in Program Files).
This is a good security tip. |
|
|
|
Sep 21 2006, 04:06 PM
Post
#5
|
|
|
Advanced Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 138 Joined: 16-September 06 From: Montevideo, UY Member No.: 30,036 |
Can't a malware that captures keystrokes or saves critical data use the RunAs command to abuse it ?
|
|
|
|
Sep 21 2006, 07:44 PM
Post
#6
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: [HOSTED] Posts: 449 Joined: 19-June 06 From: The Basement Member No.: 25,379 |
Ok, if you're on a school computer, here's a tip to run whatever you want... just name it the same as an existing program (e.g. notepad.exe, iexplore.exe) and it will run... It is really nice and you can do stuff like run Firefox on school computers. (Portable firefox is really nice at school.)
|
|
|
|
Sep 28 2006, 09:22 AM
Post
#7
|
|
|
Newbie ![]() Group: Members Posts: 2 Joined: 28-September 06 Member No.: 30,716 |
for the slower pc - log-off first before you change to another account . it is safe to say Run As is handy but can be as sluggish too at times
|
|
|
|
Sep 28 2006, 11:37 AM
Post
#8
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: [HOSTED] Posts: 496 Joined: 15-March 05 Member No.: 4,538 |
Hm..very good advice. Though I am a bit sceptical because if you know that, hackers know that also almost for sure so they make such programs that use the runas command or something similar that bypasses this limited account...However, this is still a good way to protect youself if you don't mind switching between acounts when trying to install a new program or something...
Greetz |
|
|
|
Sep 29 2006, 06:48 PM
Post
#9
|
|
|
-=Hybrid Bus=- ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 744 Joined: 2-November 05 From: My hybrid bus (in NYC), a computer Member No.: 13,709 ![]() |
... I am a bit sceptical because if you know that, hackers know that also almost for sure so they make such programs that use the runas command or something similar that bypasses this limited account... Greetz They can't make their programs use runas because most people should have a password on their administrator accounts (whether it's one they made, or the one windows has by default). To change the passwword of the administrator, log on as an administrator, go to start -> Run, enter control userpasswords2 and hit enter, click on Administrator in the list, and click Reset Password. |