SECURE Shmu26 Config in 2017

Discussion in 'PC Security Configuration' started by shmu26, Feb 14, 2017.

  1. Evjl's Rain

    Evjl's Rain Level 28
    Trusted AV Tester

    Apr 18, 2016
    1,798
    13,155
    Vietnam
    Windows 8.1
    Avast
    HMPA can't stop bugging people's computers
     
  2. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,255
    13,527
    Utopia
    Current config:
    Emsisoft
    AppGuard at protected level

    I used to run additional softs because I was worried about what noobs might do on the other user accounts on this PC (they are on standard user accounts). But then I realized that I personally have nothing to worry about, because they can only hurt themselves.
    Appguard, even out-of-the-box settings, should prevent any malware activity that could affect a different user account, because:
    1 Even if malware is signed, it won't be able to write to system space, because it first executes in user space.
    2 Processes running in one user account cannot interact with processes running in another user account. (This is the principle on which ReHIPS is based, if I am not mistaken.)

    Do you agree?
     
    Sr. Normal 2.0, XhenEd, AtlBo and 5 others like this.
  3. SHvFl

    SHvFl Level 32
    Content Creator Trusted

    Nov 19, 2014
    2,153
    16,392
    Supermodel for McDonald's
    Europe
    Windows 10
    Emsisoft
    Assuming others are not admins. they don't have your admin password and their account asks for one for elevation and you don't share storage devices then yeah you are pretty much right. Their actions can't really affect you.
     
  4. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,163
    29,641
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    Your config is similar to my productivity machine, i just have ReHIPS on top because:
    1- i love it.
    2- i'm so used to sandboxes, i can't live without them.
    3- for beta testing sake.

    :p
     
  5. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,255
    13,527
    Utopia
    :)
    I have ReHIPS on a different system, which I can keep the noobs away from.
     
  6. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,255
    13,527
    Utopia
    Thanks. Good points. So I need to prevent certain user accounts from accessing my second hard disk, which has storage.
    What's the easiest way to do that?
     
  7. SHvFl

    SHvFl Level 32
    Content Creator Trusted

    Nov 19, 2014
    2,153
    16,392
    Supermodel for McDonald's
    Europe
    Windows 10
    Emsisoft
    Remove their write permissions or even read for the whole drive. That should solve normal people issues and if you are also running something decent on those machines you are 100% covered.
     
  8. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,163
    29,641
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    Yes set the permissions, put UAC at max and your are good.
     
Loading...
Similar Threads Forum Date
Shmu26's new security config SCW Archive May 31, 2016
shmu26 security config SCW Archive Nov 24, 2015
SECURE Sunshine-boy Security config(2018) PC Security Configuration Yesterday at 6:48 PM