Re: Being logged on as admin and user at the same time (in XP)?

From: Herb Martin (news_at_LearnQuick.com)
Date: 01/05/05


Date: Wed, 5 Jan 2005 01:30:09 -0600


<gaikokujinkyofusho@gmail.com> wrote in message
news:1104816600.854020.226930@c13g2000cwb.googlegroups.com...
> Hi, i have a security questions of sorts. In XP (I think) there is a
> way that multiple users can be logged in at the same time (Say admin
> and regular user) and you can just switch between the two (kinda). My
> question is, would the admin account be ok if i had it running while i
> was doing most of my stuff in the user account? (using the user account
> so that viruses etc have less chance to nuke my system). Any help or
> suggestions would be greatly appreciated!

RunAs approximates what you describe.

It is much better than staying logged on as the Admin
while doing other stuff (dirrectly) in that same context.

One warning, when you run Explorer you must run the
FIRST instance from the account you wish to use for
it -- or you must restrict yourself to command line and
other tools.

[Reason: Explore is always run as one instance and
the user context is derived from the FIRST window
opened -- this means that if you use Start/Run or any
clicking around while running Explorer as an admin
then you are running the new program (child process)
as the admin too.]

You cannot have be using two accounts on the same
machine concurrently but you can do several things that
approximate that: you can add the user to additional
groups (not recommened for the Admins group) or have
the user explicitly authenticate as another user for the
purpose of access (technically he is only one user in
each context.)

RunAs and even "mapping a network drive" (even against
the same machine as where he is sitting logged on) can
provide means to change users for that access.



Relevant Pages

  • Re: Being logged on as admin and user at the same time (in XP)?
    ... i have a security questions of sorts. ... would the admin account be ok if i had it running while i ... while doing other stuff in that same context. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: VB 6 and Vista problem
    ... delivered the context of the admin-account, whose login-Data I used to run ... Only now can I see them in my original account! ... The fact, that I, as a normal user, execute a program with admin-rights, ... Seems to me, that each and every program, that is installed with admin ...
    (microsoft.public.vb.general.discussion)
  • Re: Paste action doesnt work into text fields (is trying to paste a printscreen, not whats in the cl
    ... account without Admin privileges, and another with admin rights for software ... On the Admin account, copy and paste would work fine, as ... the context menu or by keyboard shortcut, ...
    (microsoft.public.windowsxp.general)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Security Breach in AD! Help!
    ... > about 5 minutes the user was removed from the built in admin group. ... > changed the default domain policy, the default domain controller policy, ... >> auditing of account logon for success and failure and account management ... >> success and failure in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)

Quantcast