Saturday, October 29, 2005

Least Privilege -- Quick & Easy

Below is a zero risk, zero cost measure than can make your computer invulnerable to the vast majority of the malware and spyware that has circulated in recent years. (Caveat: you still need an effective firewall, as this measure does not stop the bad guys from getting at your computer through the internet connection.) In Win XP, the least privilege accounts are called "Limited". (It seems Microsoft applied the perjorative label "Limited" to discourage people from taking advantage of least privilege protection -- but you do not have to be Microsoft's sucker!)

This should "work" for all Win XP and Win 2000 users:

1) You create new accounts by clicking on Start, Control Panel, User Account, Create an account. Create a new administrator account, and do not name the new account for a person. For example, the name could be "Grand Wizard", "Big Kahuna", or "Root". It is best to put a password on this account.

2) Change the account type for all existing accounts to "Limited". (Passwords are optional for "Limited" accounts.)

3) Use the new account only for administrative tasks like updating virus definitions, downloading security patches from Microsoft, and installing/removing software. Other than installing/removing software, which most people do rarely, tasks like updating virus definitions and downloading security patches from Microsoft can be done every week or two.

4) Use the old accounts for everything else.

Computer users who surf the web, do email with Outlook, and use MS Office applications (Office 2000 or later) should have no problems whatsoever. There could be annoying little problems with some other applications. There is a sledgehammer work around that works for most problems, and it is even documented in Win XP: set up an administrator account, and use that account for the applications that are not least privilege compatible. You can find it in Win XP on the last paragraph of the account type screen after you choose "Limited" account; there is a screenshot here:

http://www.advanced-app.com.hk/MiscJunk/LimitedAccounts.jpg

There is an inconvenience factor to this work around, as one must switch between the regular ("Limited") account and the least privilege accounts. If the inconvenience factor is unbearable, you can always go back to using your computer "the Microsoft way" -- set the account type to Administrator for all accounts. You can even delete the new Administrator account you set up under item 1 above.

Some applications that are not least privilege compatible can be tweaked to make them least privilege compatible. Aaron Margosis's web log has been recommended by Microsoft for work arounds:

http://blogs.msdn.com/aaron_margosis

12 Comments:

At 4:39 PM, Anonymous spybot search and destroy said...

netvig or, today I was looking for a nice blog
experience on spybot search and destroy and I found your website.
Least Privilege -- Quick & Easy wasn’t exactly what I was looking for but it
did get my attention and interest. I see why I arrived
on your excellent blog when I was searching for
spybot search and destroy related information and I’m glad I did
even though its not an exact fit. Well let me contribute
to your website by leaving you with one of my favorite
quote from Robert Orben: "To err is human - and to
blame it on a computer is even more so. - Robert Orben
Informative Post, thanks for the read and nice
experience.

 
At 1:48 AM, Anonymous addaware download said...

Hello there netvig or, I’m out surfing for a good blog
experience on addaware se and found your great site.
Although Least Privilege -- Quick & Easy wasn’t exactly what I’m looking for
it certainly got my attention and interest. I see now
why I found your excellent blog-site when I was
searching for addaware se related web sites and I’m
glad I found your site even though its not an exact
match. I’ll leave you with a good quote from Walter F.
Mondale - "What do we want our kids to do? Sweep up
around Japanese computers? " -- Walter F. Mondale
Excellent Post, thank you for the read.

 
At 11:36 AM, Anonymous addaware se said...

netvig or, today I was looking for a nice blog
experience on spybot and I found your website.
Least Privilege -- Quick & Easy wasn’t exactly what I was looking for but it
did get my attention and interest. I see why I arrived
on your excellent website when I was searching for
spybot related information and I’m glad I did
even though its not an exact fit. Let me contribute
to your website by leaving you with one of my favorite
quote from Thomas Jefferson: "To err is human - and to
blame it on a computer is even more so. - Robert Orben
Informative Post, thanks for the read and nice
experience.

 
At 12:17 AM, Anonymous addaware se said...

netvig or, today I was looking for a nice blog
experience on adaware and I found your website.
Least Privilege -- Quick & Easy wasn’t exactly what I was looking for but it
did get my attention and interest. I see why I arrived
on your excellent blog when I was searching for
adaware related information and I’m glad I did
even though its not an exact fit. Well let me contribute
to your website by leaving you with one of my favorite
quote from Robert Orben: "To err is human - and to
blame it on a computer is even more so. - Robert Orben
Informative Post, thanks for the read and nice
experience.

 
At 10:49 AM, Anonymous spybot said...

netvig or, today I was looking for a nice blog
experience on spybot search and destroy and I found your website.
Least Privilege -- Quick & Easy wasn’t exactly what I was looking for but it
did get my attention and interest. I see why I arrived
on your excellent blog when I was searching for
spybot search and destroy related information and I’m glad I did
even though its not an exact fit. Well let me contribute
to your website by leaving you with one of my favorite
quote from Robert Orben: "To err is human - and to
blame it on a computer is even more so. - Robert Orben
Informative Post, thanks for the read and nice
experience.

 
At 5:28 PM, Anonymous spyware blaster said...

Hi there netvig or, I was just browsing, looking for spyware blaster related information and found your blog. Very Nice! I have a spyware blaster site. You'll find everything you need to know about protecting your internet privacy, right here, including popup blocker, spyware doctor and more! Please visit, check it out and enjoy!

 
At 2:14 PM, Anonymous spyware said...

Hi netvig or. I was looking for adware related information and came across your blog. Very good reading! I have a adware site. You'll find everything you need to know about protecting your internet privacy, right here, including popup blocker, spyware doctor and more! Check it out when you can :)

 
At 1:02 AM, Anonymous Spyware and adware removal program said...

Hi, I've found a great adware removal tool available for free download. Take a look at Yahoo adware removal.

 
At 9:51 PM, Anonymous computer repair said...

Fix Slow Computer Problems with Error Doctor Free Scan!

 
At 9:40 PM, Anonymous spyware said...

Hi netvig or, very unique blog you have! I was looking for spyware blaster related information and came across your site. Very good info, I'm definitely going to bookmark you! I have a spyware blaster site. You'll find everything you need to know about protecting your internet privacy, right here, including popup blocker, spyware doctor and more! Please visit and enjoy!

 
At 6:56 AM, Anonymous spyware said...

Hi there netvig or, I was just browsing, looking for free spyware remover related information and found your blog. Very Nice! I have a free spyware remover site. You'll find everything you need to know about protecting your internet privacy, right here, including popup blocker, spyware doctor and more! Please visit, check it out and enjoy!
If you have a site similar to mine and would like to exchange links, please contact me through my website.

 
At 3:45 PM, Anonymous adware said...

Hi netvig or. I was looking for free spyware remover related information and came across your blog. Very good reading! I have a free spyware remover site. You'll find everything you need to know about protecting your internet privacy, right here, including popup blocker, spyware doctor and more! Check it out when you can :)
If you have a site similar to mine and would like to exchange links, please contact me through my website.

 

Post a Comment

<< Home