Re: XP/Home Security issues
From: Kevin Davisł (zkevindavisz@ask.me.for.my.address.if.u.really.want.it)
Date: 06/10/02
- Next message: Roger Abell: "Re: decrypting files after changing password"
- Previous message: Alan Rosenberg: "Windows Update...NO!!"
- In reply to: Kent W. England [MVP]: "Re: XP/Home Security issues"
- Next in thread: M.L.: "Re: XP/Home Security issues"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Kevin Davisł <zkevindavisz@ask.me.for.my.address.if.u.really.want.it> Date: Mon, 10 Jun 2002 03:38:20 GMT
On Sun, 9 Jun 2002 17:57:05 -0700, "Kent W. England [MVP]"
<kwe@mvps.org> wrote:
>Kevin;
>
>I don't see you as being argumentative. I said that Power Users couldn't
>write to the Program Files and that was a mistake. I'm always saying
>things like that about XP Pro when I am logged onto Home and can't check
>myself. :-)
I understand completely.
>
>To debate the issue a bit further, if you make the account a limited
>user (aka, User group member) and then give users permission to *one*
>program files folder, that is the most limited expansion of their
>privileges, which I like, and is why I recommend that as the solution
>for the problem-at-hand.
>
>If you make them Power Users, 1) you can't do that in Home and 2) you
>expand their powers to all Program Files folders and allow them to
>install their own software. Beyond that, I'm not clear on what Power
>Users can't do that admins can. One thing they can't do is take
>ownership of folders that belong to Administrators group and that is
>very important for maintaining the integrity of your system. They can
>write to the Windows folder so they can change system files but windows
>file protection will stop most of that.
Hmmm.... I'm not sure I like the sound of that. I was hoping that the
power user account would do something like allow limited writing to
the Windows folder such that they couldn't alter any system files that
would be considered particularly sensitive. Something must be
different since at least one of the games I tried to play under the
power user status wouldn't play unless I did a "Run as.."
Administrator. It must be protecting some system files.
>
>So I like my fix better than yours, but yours is workable as a fix for
>the problem-at-hand and I said it wasn't, so I have to correct that
>error before someone acts on it.
>
Well given the context that you have multiple users of which you
prefer not to give the Admin password to, and when limited to the Home
Edition, I think there is more merit to your solution than I
previously thought.
My proposed solution was more within the thinking that there was one
main user of the PC (and I didn't realize the "Power User" wasn't
available in the Home Edition) who was trying to avoid running as
Administrator for security reasons but wanted more flexibility in what
they could run outside the Administrator's account.
>We can discuss which solution we like best as much as we want, once I
>correct my error. Thanks for not being a horse's ass about my mistake.
>There are others on these groups that leap on any error in a kind of
>religious ecstasy of oneupsmanship that is tiresome. Your politeness is
>most welcome.
I know what you mean. My thinking and approach within these
newsgroups is that people are trying to learn something or find
something out. That's definitely why I'm here. I certainly enjoy
joking around as much as anyone else but bashing someone just to show
others how "smart" one is is totally uncalled for and
counter-productive. Having respectful disagreements are fine, but I
too have seen too many people in newsgroups go way over the line.
>
>Home has a runas feature, but since that means giving away the admin
>password, it's best used as a tool for admins to use from a limited
>account, but with fast-switching, runas isn't as useful as it once was
>since you can fast-switch to an admin account, do your thing and then
>switch back to a limited account.
I tried that initially and I was having some conflicts with some stuff
in my startup folder. I have since made some changes that seemed to
have helped, but I am still uncertain to it my firewall software is
handling this properly. Seems like you would be gobbling up more
memory doing the fast switch thing as opposed to Run as.
Kevin Davisł
---------------------------------------
What could possibly go wrong?
- Next message: Roger Abell: "Re: decrypting files after changing password"
- Previous message: Alan Rosenberg: "Windows Update...NO!!"
- In reply to: Kent W. England [MVP]: "Re: XP/Home Security issues"
- Next in thread: M.L.: "Re: XP/Home Security issues"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
