The easiest way to run as non-admin

Upcoming posts in my LUA/non-admin track: Using secondary logon (RunAs) Running control panel applets as admin Using RunAs with Explorer Temporarily elevating your current account to admin without logging out Running with a restricted token (what does “protect my computer and data from unauthorized program activity” actually mean) “etc.” But first, the low-hanging fruit:  how…

61

Why you shouldn’t run as admin…

First, let’s define terms.  This may be oversimplifying, but for the purpose of this discussion there are only two types of users:  Administrators, and Users.  They are essentially distinguished by membership in the “Administrators” and “Users” local groups.  “Administrators” have complete and unrestricted access to the computer/domain.  “Users” are prevented from making accidental or intentional…

70

Not running as admin…

The security principle of “least privilege” is well understood:  Software should run with the smallest set of privileges needed to perform its tasks.  Low-privileged processes can do a lot less damage when they are compromised (or just buggy) than processes running at high privilege levels.  Windows has made great strides to run services with lower…

43