Re: Limited account in WinXP

From: Tony Lawrence (foo_at_pcunix.com)
Date: 05/16/05 

Date: Mon, 16 May 2005 13:27:49 -0400

speeder wrote:
> I´ve been thinking about creating a limited account in WinXP as
> another layer of security. An administrator level account would exist
> only for installing new stuff. Is this a valid idea as a threat
> deterrent?
>
> My assumption is that in a limited account malicious code from
> webpages or possible injection of malicious code through unknown
> server vulnerabilities (I run a few) would not be able to install or
> provide further attack venues.
>
> If my assumption is all wrong can the limited account be helpful at
> all in providing further security?

Yeah, it's a great idea - but because of how Windows works, I bet you
can't stand running that way very long..

What's really dumb about it is that Windows does have the ability to ask
for a password and run apps as another user - they just don't implement it. 

-- 
Tony Lawrence
Unix/Linux/Mac OS X  resources: http://aplawrence.com

Relevant Pages

  • Re: How safe is a "Limited" XP account?
    ... > My motivation is very simple; I use a Limited account on my home ... I don't rely on it for security, and in fact I am quite ... If you're using windows,, using a limited account is definitely better ...
    (microsoft.public.windowsxp.general)
  • Re: How safe is a "Limited" XP account?
    ... > My motivation is very simple; I use a Limited account on my home ... I don't rely on it for security, and in fact I am quite ... If you're using windows,, using a limited account is definitely better ...
    (comp.security.misc)
  • Re: How safe is a "Limited" XP account?
    ... > My motivation is very simple; I use a Limited account on my home ... I don't rely on it for security, and in fact I am quite ... If you're using windows,, using a limited account is definitely better ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Limited User has some Administrator Privilages
    ... although the security toolkit at http://www.dougknox.com ... limit access, it doesn't appear to limit access to programs, other than ... The limited account can install software, change firewall settings, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How safe is a "Limited" XP account?
    ... I use a Limited account on my home ... and I want to understand how much extra security this ... try to escalate privileges if it finds itself running on a Limited ... My impression is that most Windows users spend most of their time ...
    (microsoft.public.windowsxp.general)