Protecting Limited Users

F

ForestSpirit

Many security-oriented web sites (and Microsoft) agree that it is definitely
not a good idea to be logged in as administrator all the time, especially if
you have a DSL connection and are always online. They suggest you do most
work as a limited user and only log on as administrator when you need to
change system settings, install or uninstall programs, or run a program that
requires administrative rights.

When I am logged in as a limited user, I do not know if I am protected by
SpywareGuard, SpywareBlaster, IE-SPYAD, Spybot, and similar programs that
add sites to the Restricted Zone in HKEY_CURRENT_USER. That is my first
question.

The HOSTS file (C:\WINDOWS\system32\drivers\etc\hosts) does protect whatever
user is logged in. Any site in HKEY_LOCAL_MACHINE also protects whatever
user is logged in, but only an administrator can add, remove, or edit
listings in HKLM, and the sites might not display in Internet Options in
Control Panel for the limited users.

IE-SPYAD adds sites to HKCU. IE-SPYAD2 adds sites to HKLM. I do not think
you can have the same site in both HKCU and HKLM keys at the same time,
meaning you cannot have both IE-SPYAD and IE-SPYAD2 installed at the same
time. Would that not cause conflicts?

As a limited user, I cannot run programs that require administrative rights
such as PeerGuardian, ProtoWall, and a few others. I am, however, able to
update and run scans with Ad-Aware, Spybot, and eTrust EZAntivirus. I can
also run scans with A2 (a-squared) but cannot update it. To update A2, I
must be logged in as administrator. I do not know if I am protected by the
real-time features of these various security programs when logged in as a
limited user. I even wonder about real-time antivirus protection.

There is a program called RunASP ($29.95) that allows limited users to run a
program with administrative rights.
http://www.websunlimited.com/order/Product/RunASP/runasp.htm

Does anyone know of a free program (or one that costs less) that does the
same thing? I would like to use such a program to run ProtoWall or
PeerGuardian while logged in as a limited user. ProtoWall or PeerGuardian
supplement my firewall for additional inbound protection even when I am not
actively downloading or surfing the Internet.
 
T

Torgeir Bakken \(MVP\)

ForestSpirit said:
(snip)
There is a program called RunASP ($29.95) that allows limited users to run a
program with administrative rights.
http://www.websunlimited.com/order/Product/RunASP/runasp.htm

Does anyone know of a free program (or one that costs less) that does the
same thing? I would like to use such a program to run ProtoWall or
PeerGuardian while logged in as a limited user. ProtoWall or PeerGuardian
supplement my firewall for additional inbound protection even when I am not
actively downloading or surfing the Internet.
Hi


A couple of free ones that might work for you:

SUperior SU
http://www.stefan-kuhr.de/supsu/main.php3


LSrunas/LSrunasE (the latter with password encryption)
http://www.linkselection.com/lsrunas.asp
 
F

ForestSpirit

1. Is it true that any site added to HKCU protects only the administrator
account that created it and no other accounts?

2. Am I protected by SpywareGuard, SpywareBlaster, IE-SPYAD, and other
programs having real-time protection when logged in as different users,
whether limited users or other administrators?

3. Is it true that I cannot install the same site to HKCU and HKLM at the
same time?

4. Is it true that IE-SPYAD and IE-SPYAD 2 cannot both be installed at the
same time?


When I am logged in as a limited user, I do not know if I am protected by
SpywareGuard, SpywareBlaster, IE-SPYAD, Spybot, and similar programs that
add sites to the Restricted Zone in HKEY_CURRENT_USER. That is my first
question.

IE-SPYAD adds sites to HKCU. IE-SPYAD2 adds sites to HKLM. I do not think
you can have the same site in both HKCU and HKLM keys at the same time,
meaning you cannot have both IE-SPYAD and IE-SPYAD2 installed at the same
time. Would that not cause conflicts?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top