Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1055638" data-attributes="member: 32260">In the OP, I described two WHH setups: the default and supersafe.It is possible to use a setup very similar to the default one on the Admin account together with supersafe setups on any SUA account.[ATTACH=full]278333[/ATTACH]As we can see the whitelist includes most of the default folders for the Admin account (named AdminUser). So, when using this Admin account, almost all applications will work and auto-update. The AdminUser can also install applications via &quot;Run By SmartScreen&quot;.On the contrary, on any standard user account, the files from its AppData will be blocked (they are not included on the whitelist). Furthermore, the AppData locations in the Admin account cannot be easily accessed from the standard user account:<ol>
<li data-xf-list-type="ol">AppData locations are hidden in Explorer.</li>
<li data-xf-list-type="ol">Accessing the Admin AppData folder from the standard user account requires entering the Admin credentials.</li>
</ol>This is probably the setup, similar to that preferred by [USER=69126]@NormanF[/USER].Even if something is exploited on SUA, then it will be blocked on SUA by supersafe setup (supersafe SUA). This can be an advantage when one does not use other WHH tools (ConfigureDefender, DocumentsAntiExploit, FirewallHardening).</blockquote>

[QUOTE="Andy Ful, post: 1055638, member: 32260"] In the OP, I described two WHH setups: the default and supersafe. It is possible to use a setup very similar to the default one on the Admin account together with supersafe setups on any SUA account. [ATTACH type="full" alt="1693505946203.png"]278333[/ATTACH] As we can see the whitelist includes most of the default folders for the [COLOR=rgb(0, 168, 133)][B]Admin account[/B][/COLOR] (named AdminUser). So, when using this [B][COLOR=rgb(0, 168, 133)]Admin account[/COLOR][/B], almost all applications will work and auto-update. The AdminUser can also install applications via "Run By SmartScreen". On the contrary, on any [COLOR=rgb(41, 105, 176)][B]standard user account[/B][/COLOR], the files from [COLOR=rgb(41, 105, 176)][B]its AppData[/B][/COLOR] will be blocked (they are not included on the whitelist). Furthermore, the [COLOR=rgb(0, 168, 133)][B]AppData locations[/B][/COLOR] in the Admin account cannot be easily accessed from the [COLOR=rgb(41, 105, 176)][B]standard user account:[/B][/COLOR] [LIST=1] [*]AppData locations are hidden in Explorer. [*]Accessing the Admin AppData folder from the standard user account requires entering the Admin credentials. [/LIST] This is probably the setup, similar to that preferred by [USER=69126]@NormanF[/USER]. Even if something is exploited on SUA, then it will be blocked on SUA by supersafe setup (supersafe SUA). This can be an advantage when one does not use other WHH tools (ConfigureDefender, DocumentsAntiExploit, FirewallHardening). [/QUOTE]

Verification