Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
General Security Discussions
Proper setup of admin & standard user account
Message
<blockquote data-quote="ForgottenSeer 823865" data-source="post: 852922"><p>There is nothing really special to do on the admin account, however:</p><p>1- I would recommend to use a <u>local account</u> (not a Microsoft one).</p><p>2- You may want tighten security a bit by using few registry tweaks.</p><p>- deny elevation of unsigned apps. This would prevent execution of let say 80% of ordinary malware.</p><p>- force admin to enter credentials for UAC prompts. This supposedly make the job harder for auto-elevation of malware.</p><p>3- don't use your browser on admin account, download apps (and check they are clean) on SUA then logout and install them on Admin Account.</p><p></p><p>On the other other hand, on the SUA account, setting UAC at max is an obligation.</p><p></p><p>Note than SUA was originally designed for privacy between users on shared computers (SUA is just admin account stripped of most privileges), not security unlike Linux which use real separated users accounts.</p><p></p><p>Also some tools like cleaners or process monitors are more effective on Admin Account than SUA (if not elevated), since they will get more privileges but they still work well on SUA (but you can still run them as admin anyway even on SUA).</p></blockquote><p></p>
[QUOTE="ForgottenSeer 823865, post: 852922"] There is nothing really special to do on the admin account, however: 1- I would recommend to use a [U]local account[/U] (not a Microsoft one). 2- You may want tighten security a bit by using few registry tweaks. - deny elevation of unsigned apps. This would prevent execution of let say 80% of ordinary malware. - force admin to enter credentials for UAC prompts. This supposedly make the job harder for auto-elevation of malware. 3- don't use your browser on admin account, download apps (and check they are clean) on SUA then logout and install them on Admin Account. On the other other hand, on the SUA account, setting UAC at max is an obligation. Note than SUA was originally designed for privacy between users on shared computers (SUA is just admin account stripped of most privileges), not security unlike Linux which use real separated users accounts. Also some tools like cleaners or process monitors are more effective on Admin Account than SUA (if not elevated), since they will get more privileges but they still work well on SUA (but you can still run them as admin anyway even on SUA). [/QUOTE]
Insert quotes…
Verification
Post reply
Top