Do you use an Admin account or Standard User Account?

[blackice]

It's been about a year since a big discussion on this, but even longer since a poll has been posted. Last I checked the community had been drifting towards favoring an SUA, adoption was up in 2017 over 2016. So I'm just curious where the community is at these days? We know SUA is more secure, there's no need to debate that, but it comes with usability issues. Do you use an Admin Account or an SUA? Forgive me if I missed a more recent pole, but I hadn't seen one.

2016

Administrator Account vs Standard/Limited User Account

Since this a security forum, I thought it would be nice to see how many of our members bother creating a Standard User Account or simply use the default Admin User Account. Anyone is free to explain their own reasoning for choosing a type of account if he/she wants to. Currently I use a...

malwaretips.com

2017

Do you use a Standard User Account (SUA)?

What do you say about SUA?

malwaretips.com

 

[blackice]

I've been using a SUA for several years, but have some issues with programs and tray icons that won't start with the system. I've tolerated it, and don't mind entering a pin for elevation, but it does tempt me to run as Admin sometimes. Thankfully I don't reboot more than a couple times a week. I think most people with good habits will survive an administrator account with no issues, but there's always that just in case scenario.

 

[DSD27]

Admin. You can't even install programs with a standard account.

 

[Ink]

Admin. You can't even install programs with a standard account.

Yes you can.

You can install web browsers to your local user account folder, and certain other software that don't require the Program Files directory.

Also apps from the Microsoft Store - correct if wrong.

 

[DSD27]

Yes you can.

You can install web browsers to your local user account folder, and certain other software that don't require the Program Files directory.

Also apps from the Microsoft Store - correct if wrong.

GT Explains: Difference Between Standard User and Administrator in Windows 10

Learn the difference between Standard user and Administrator accounts, and know why you should prefer Standard user account as your daily, primary account.

www.guidingtech.com

"Moreover, a Standard user is also not allowed to install new or even run certain existing apps on the computer. Some may think this to be a hassle. It was done to protect your computer from malware and viruses that often install without your permission. "

 

[blackice]

Admin. You can't even install programs with a standard account.

You just need the Admin credentials. So you have a local admin account and then the SUA. When you install a program the UAC prompt will ask for Admin credential. There was a POC last year about malware abusing the credential elevation prompt to steal the Admin token, but it's not very common. Also, it's still safer than Admin 24/7. However the best practice is install items in admin and do daily tasks in SUA (I don't bother with this personally).

 

[CyberTech]

GT Explains: Difference Between Standard User and Administrator in Windows 10

Learn the difference between Standard user and Administrator accounts, and know why you should prefer Standard user account as your daily, primary account.

www.guidingtech.com

"Moreover, a Standard user is also not allowed to install new or even run certain existing apps on the computer. Some may think this to be a hassle. It was done to protect your computer from malware and viruses that often install without your permission. "

Click this

Advanced Plus Security - DeletedMessiah's 2020 configuration

Still on 1809 because I'm lazy to clean install newer builds :D Enterprise 1809 gets updates till May 2021. I'll update to 2009 build or whatever it'll be called later this year.

malwaretips.com

I'm sorry if you got that article from me who posted it

 

[Ink]

"Moreover, a Standard user is also not allowed to install new or [...] "

Just happened to install Opera GX under a Standard User account, no approval required. You can try it.

When you install a program the UAC prompt will ask for Admin credential.

There was one for Firefox, but no Admin creds. required for Opera GX. Might be because it's default is the local directory?

 

[blackice]

Just happened to install Opera GX under a Standard User account, no approval required. You can try it.
View attachment 239199
View attachment 239201


There was one for Firefox, but no Admin creds. required for Opera GX. Might be because it's default is the local directory?

Yes I believe Firefox installs needing admin credentials. I just meant in general, you can still use SUA without having to always be in an administrator account. I think Chrome will also install without UAC, but I could be wrong since it’s been a while.

Edit: sorry had that first sentence backwards initially. I think Chrome and Firefox require UAC prompts, but can update without UAC.

 

[ForgottenSeer 55474]

Hey, I use an Admin Account.

 

[CyberPanther]

Admin account to freely control your device.

 

[silversurfer]

Admin. You can't even install programs with a standard account.

Nonsense, I'm using SUA for almost 10 years, first on Windows7 and later on Windows10, installing software/programs is possible!

 

[Marko :)]

Never used standard account. I always use admin account...

 

[oldschool]

Nonsense, I'm using SUA for almost 10 years, first on Windows7 and later on Windows10, installing software/programs is possible!

Finally, some sanity.

I install everything, including all browsers, using a SUA. More time-consuming and a bit of a hassle? Maybe. I use a keyboard-friendly password and have peace of mind with no issues.

 

[blackice]

Based on the current numbers it looks like adoption hasn't changed much in a couple years (70/30). But, I know there are more SUA users lurking out here.

 

[upnorth]

SUA, should IMO be one of the main mantras that's used just the same as backup. Well that and verified backups of course, as otherwise it could come as a painful experience down the road.

If we want common users to learn any basic security, this is one of the first. It's too easy to elevate permission if actually needed.

 

[Chri.Mi]

I will not use anymore SUA. Personally is almost useless for me, safe apps, safe web sites and without SUA i can clean some leftovers in appdata and user folder. If ppls start to use unsafe programs (cracks,etc) is a mandatory.

 

[blackice]

SUA, should IMO be one of the main mantras that's used just the same as backup. Well that and verified backups of course, as otherwise it could come as a painful experience down the road.

If we want common users to learn any basic security, this is one of the first. It's too easy to elevate permission if actually needed.

My only issue is that not all programs are written to be able to startup in SUA. It drives me nuts that they don't consider this. I guess that's what happens when 90% of the population runs an admin account.

 

[bayasdev]

Admin, I only use SUA for proctored exams

 

[blackice]

I will not use anymore SUA. Personally is almost useless for me, safe apps, safe web sites and with SUA i can clean some leftovers in appdata and user folder. If ppls start to use unsafe programs (cracks,etc) is a mandatory.

Yes it can depend how the computer is being used. Some people have more risk than others, and some people have different needs. Devs have a hard time running on SUA.