File Sharing & User Permissions

[Guest]

In the past, I was instructed to install software and configure Windows using
the Admin account, and use the User account for everything else (Internet
browsing, apps, etc.)

So, I have three accounts on my WinXP laptop: Admin, User & Guest.

I seem to have a file sharing and/or user permission problem. For instance,
because I installed a program using the Admin account (with all of its
permissions), I may get an error using that same program as a User due to
User's limited permissions. Like, the application I'm running as a User will
try to update the system registry upon quitting the application (as it is
designed to do) but the User account doesn't have permission to update the
system registry, so I get an error dialog box.

My first attempt at solving this problem was to logon as User and run my
Admin-installed application using Admin's rights. This solved the permissions
problem, but another problem cropped-up: if the application I'm running with
Admin rights creates a folder or file, then I cannot change/delete the folder
or file as a User. It's a sticky situation.

I'm basically concerned about opening my system to clever Internet bot-ware
programs that do crazy stuff without my knowledge. So, I'd like to continue
reserving the Admin account for software installations & configurations while
maintaining the User account primary for regular daily use.

Any suggestions?

 

[Guest]

IMHO, the risks of Internet-attack mainly arise from using insecure
browser/email programs, and from the lack of a firewall and (updated)
antivirus. Being Admin or not has only a minor relation to this aspect.

Where being Admin causes security-issues is on your own network, as it can
create situations where one computer as able to do things to other computers
that it ought not be able to. Main things to watch-for here are the "admin
shares" C$,D$, etc. and the possibility of remote registry-manipulation.

 

[Guest]

That's good to know, Ian. I've already disabled all of my "remote" services.
I don't have a personal "network" to this laptop, and Norton's Internet
Security 2006 is installed and running properly; so do you think I'd be safe
using the Internet with my Admin account from now on? Doing so would solve
all of my file permission/sharing issues but I don't want to create new
problems by leaving a door open, somewhere. Do u get my philosophy?

Thanks so much for the time you took to respond to my question! You get a
gold star, today!!!

 

[Guest]

If you haven't done so already, investigate a replacment for Internet
Explorer as that is THE biggest Internet risk.

http://www.mozilla.com

 

[Guest]

I don't see how using a specific/different browser would raise/lower the
risks with browsing the Internet. I used FireFox last year but I found it
lacking the seamless ability to run scripts/ActiveX/3rdParty Plug-ins that IE
handles otherwise. In order for me to adopt Mozilla, you'd have to convince
me that using Firefox would do everything IE does, and more.