Re: Run As Adminstrator - why hasn't it saved us?

Here's what to do: just make your normal user account an Administrator account, and re-enable UAC.

You still run as a normal user, except that when elevation is required you just get a confirmation box, rather than the whole "Administrator's username and password" prompt.

It takes one click of the mouse, or two key presses. And to be honest you give nothing away in terms of security, unless other people can get unauthorised access to your machine.

Like you, I run a few programs that need elevation, and this is how I run my machine. It's great: whenever something that might affect the integrity or security of the OS is about to happen, UAC gives me a single "are you sure?" prompt. This should have been implemented years ago, to be honest. It's known as Administrator Approval mode, and is very low hassle.

SteveT

.

Relevant Pages

  • Re: Online Arrmor
    ... Use an administrator account only for administrative ... Use a normal user account for everything else. ... Before installing software think twice about whether you really need ... The person who installs the personal firewall for aunt Esther could just ...
    (comp.security.firewalls)
  • Delete admin shorcut
    ... I'm on a Win Xp sp2 computer with two users, and administrator account ... and a normal user account. ... conection and I could use it on the user and the admin desktop withou ... Is there anyway to do it without loging out and loging in as admin. ...
    (microsoft.public.windowsxp.general)
  • Re: Start menu programs dont appear
    ... > All apps now installed under the administrator account, and the shortcuts ... > copied to the All Users profile, but under a normal user account half of ...
    (microsoft.public.win2000.general)
  • Locked out after changing Domain Security Policy
    ... specifying a normal user account that could "log in locally" I now cannot ... login to the AD controller as administrator account. ... I get the following error when trying to login as the administrator account:- ... "The local policy does not permit you to logon interactively" ...
    (microsoft.public.win2000.general)