Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 753539" data-attributes="member: 32260">Generally, SUA is much safer than Admin Account. But, when using Hard_Configurato default-deny setup, the difference is less important.The malware on Admin Account is more dangerous, because it has much more possibilities to elevate. But with default-deny setup + forced SmartScreen, the malware execution will be mostly blocked or mitigated in the Userspace, before it can elevate. That is valid also for exploits distributed as executables. Other vulnerabilities come from applications that can be exploited by opening the files with vulnerable content. Most such files are blocked by Hard_Configurator, except media files, documents and some other frequently used file types. This is also well mitigated by default-deny setup. In fact, the Hard_Configurator restrictions for MS Office applications, are stronger on Admin Account (because it is more vulnerable).Assuming that you are using well-updated Windows and Edge (or Chrome), the last dangerous area is related to the vulnerable &amp; not patched applications. If you have such applications, then it is really better to use SUA + apply Exploit Guard restrictions + block outbound Internet connection for those applications.</blockquote>

[QUOTE="Andy Ful, post: 753539, member: 32260"] [B]Generally, SUA is much safer than Admin Account.[/B] [B][COLOR=rgb(41, 105, 176)]But, when using Hard_Configurato default-deny setup, the difference is less important.[/COLOR][/B] The malware on Admin Account is more dangerous, because it has much more possibilities to elevate. But with default-deny setup + forced SmartScreen, the malware execution will be mostly blocked or mitigated in the Userspace, before it can elevate. That is valid also for exploits distributed as executables. Other vulnerabilities come from applications that can be exploited by opening the files with vulnerable content. Most such files are blocked by Hard_Configurator, except media files, documents and some other frequently used file types. This is also well mitigated by default-deny setup. In fact, the Hard_Configurator restrictions for MS Office applications, are stronger on Admin Account (because it is more vulnerable). Assuming that you are using well-updated Windows and Edge (or Chrome), the last dangerous area is related to the vulnerable & not patched applications. If you have such applications, then it is really better to use SUA + apply Exploit Guard restrictions + block outbound Internet connection for those applications. [/QUOTE]

Verification