Administrator or User

[Skavenger]

Hello;

I am running WinXP Pro and have only one Login "Administrator".
In order to boost security for internet access etc should I set up a "User"
account to limit access from unwanted external attacks.

I am running Norton AV 2004 and Zone Alarm, both up to date.
I also run Spyblaster occasionally an Spybot Search & Destroy

(e-mail address removed)

 

[usasma]

Yep, you should. Create a user with administrative privileges.

Generally, here's how it goes: If you're logged on using the
Administrator account - a hacker has 1/2 of his job done for him (since
everyone knows there's an Administrator account). If you don't password
protect your Administrator account - you've done 100% of the job for the
hacker. If you use another account with a good password, you've made
the hacker's job that much harder!

- John

 

[Guest]

Just to add to usasma's comments; consider creating a second additional user
with only User or Power User level privileges for everyday use. These limited
users are prevented from doing many things that compromise the security of
the system (such as loading drivers, installing services and making changes
to system files or the registry). The added security far outweighs the
inconvenience of logging off the user and logging on as the administrator on
those occasions when you need to install a program.

To increase your security even more, once you've created your own
Administrative user, consider disabling the built in administrator account or
renaming it. That makes it even harder for a hacker to make use of it to gain
access to your system. Many people recommend renaming the built-in
Administrator and then creating a disabled account called "Administrator"
with Guest privileges and a strong password. This can distract a determined
hacker into spending time and resources hacking the "Administrator" account,
only to find that it cannot do anything within the system.

 

[Skavenger]

Many Thanks

Just to add to usasma's comments; consider creating a second additional
user
with only User or Power User level privileges for everyday use. These
limited
users are prevented from doing many things that compromise the security of
the system (such as loading drivers, installing services and making
changes
to system files or the registry). The added security far outweighs the
inconvenience of logging off the user and logging on as the administrator
on
those occasions when you need to install a program.

To increase your security even more, once you've created your own
Administrative user, consider disabling the built in administrator account
or
renaming it. That makes it even harder for a hacker to make use of it to
gain
access to your system. Many people recommend renaming the built-in
Administrator and then creating a disabled account called "Administrator"
with Guest privileges and a strong password. This can distract a
determined
hacker into spending time and resources hacking the "Administrator"
account,
only to find that it cannot do anything within the system.