Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 969687" data-attributes="member: 32260">This and a few seconds are the differences.Let&#039;s Suppose that you use SUA for daily work and sometimes also Admin account for administrative tasks. On SUA there is no difference in protection if you use system-wide or local H_C. On Admin the current H_C setup is much stronger until you do not turn it off.I am not sure what you mean. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />I&nbsp; have in mind the current system-wide H_C vs. the possible local H_C.In local H_C you have restricted SUA with H_C and non-restricted Admin account. If you log in to the Admin account, you do not need to switch off the H_C.In the current system-wide H_C the only difference is that after logging into the Admin account it is still restricted. If you want it to be unrestricted (like in the local H_C setup), then you have to use SwitchDefaultDeny (or H_C). On my computer, the difference is about 10 seconds.Furthermore, I do not fully understand your actual setup. If you want, then you can suggest what change in the H_C is needed to get your setup. I do not like the ACL folder/file restrictions. They cannot be easily and quickly modified for large folders and they do not work for (FAT 32) USB drives.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 969687, member: 32260"] This and a few seconds are the differences. Let's Suppose that you use SUA for daily work and sometimes also Admin account for administrative tasks. On SUA there is no difference in protection if you use system-wide or local H_C. On Admin the current H_C setup is much stronger until you do not turn it off. I am not sure what you mean. :unsure: I have in mind the current system-wide H_C vs. the possible local H_C. In local H_C you have restricted SUA with H_C and non-restricted Admin account. If you log in to the Admin account, you do not need to switch off the H_C. In the current system-wide H_C the only difference is that after logging into the Admin account it is still restricted. If you want it to be unrestricted (like in the local H_C setup), then you have to use SwitchDefaultDeny (or H_C). On my computer, the difference is about 10 seconds. Furthermore, I do not fully understand your actual setup. If you want, then you can suggest what change in the H_C is needed to get your setup. I do not like the ACL folder/file restrictions. They cannot be easily and quickly modified for large folders and they do not work for (FAT 32) USB drives.(y) [/QUOTE]

Verification