Do you use Standard User Account?

  • Yes

    Votes: 33 37.5%
  • No

    Votes: 55 62.5%

  • Total voters
    88

Andy Ful

Level 33
Content Creator
Verified
Joined
Dec 23, 2014
Messages
2,243
Operating System
Windows 10
Antivirus
Windows Defender
#14
For security reasons, it is good to use SUA as a daily work account.

About 80% malware run with the rights higher than standard user:
Malicious code and the Windows integrity mechanism - Securelist

Most Windows vulnerabilities can be mitigated by removing Administrator's rights from the PC's user:
Want to secure a Windows PC? Turn off Administrator rights

When using SUA (without a pain), some conditions should be fulfilled for daily work applications:
1. They should work as standard user (no UAC prompt when executing, saving config files, etc.).
2. They should autoupdate with higher rights via scheduled task.
3. Alternatively, they should work in AppContainer (Universal Applications from Windows Store).

SUA can work well for anyone, who does not:
  • install many programs,
  • frequently run programs & tasks, that require Administrative Rights,
  • need frequent access to 'Windows' or 'Program Files ...' folders.
I think that most average users can be secure & happy with SUA, with occasional help & guiding from more experienced user. The experienced user, should persuade family members or friends to use SUA, because he/she will have much less work with their computers.

See also (some of many threads):
User Account like a Castle
Poll - Administrator Account vs Standard/Limited User Account
Is using the Admin Account safe?
 

rockstarrocks

Level 16
Verified
Joined
Apr 16, 2017
Messages
762
Operating System
Windows 10
Antivirus
Kaspersky
#17
SUA all the way here; I don't mind writing the password as many times as it takes when I'm doing something that requires administrator privileges.
Imo if you need to write admin password while SUA then you are using it wrong. All admin related work should be done with an admin account when needed. More experienced members here can explain it better why that's the case.
Edit: I forgot to say, I am using SUA.
 

Andy Ful

Level 33
Content Creator
Verified
Joined
Dec 23, 2014
Messages
2,243
Operating System
Windows 10
Antivirus
Windows Defender
#19
Shortly, on admin account processes ran normally (without elevation), share the same account as processes ran with elevation. So, it is very hard to isolate one from the other.
When working on SUA, processes ran with elevation are started from admin account, not from SUA. They do not share the same account as normal (standard-rights) processes ran without elevation. So, elevated and non-elevated processes are isolated much better.
Security: Inside Windows Vista User Account Control
Still, the isolation is not perfect. Some malware ran with standard-rights, can wait until the user is going to elevate a process, and then elevate without user permission. But, this is not common malware ability.
 
Last edited: