Re: firewall on budget ?

[may appear twice]
On Jul 25, 7:26 pm, Ansgar -59cobalt- Wiechers
<usenet-2...@xxxxxxxxxxxxxxxx> wrote:
In comp.security.firewalls jameshanle...@xxxxxxxxxxx <jameshanle...@xxxxxxxxxxx> wrote:





You speak of workarounds to the issue of the firewall getting taken
down when in admin mode.
workarounds that you don't mention (wise given that leythos knows them
anyway and the detail is a side point to the disagreement, but a bit
selfish not to mention them, given that it's a public newsgroup and
others can benefit)

I know of 2 workarounds
1)Work in Admin mode (many techies do), and through 'run as', browse
in a guest account.
2)Work in Guest mode, and if you want to make an administrative
change, log in as administrator. Or, if it's something like double
clicking the clock and seeing the time, then go into admin and give
yourself the right. Or if you want to install a program whose
installation needs admin access to install it, then let the
installation program 'run as' admin.

but there are issues with the workarounds.

For '1'
If working in admin mode and doing runas to browse in a guest account.
How do you quickly get the browser open? I'd like something as quick
as start..run..iexplore, and and an icon too. Is that possible? If so
then I may be converted.

For '2'
If working in Guest mode and you want to make an administrative
change, you have to log off!!!! What a hassle!! I don't want to close
my programs. and even if somehow there's a way to get windows to keep
them open, i'd have to save everything and wait around for a while.
I seriously doubt you have a way around that, you're not Q from star
trek tng.
Or do you have a way?

Work as a normal user (not guest). Adjust the rights for programs that
need to be run by users but won't run as a normal user [1]. Replace
programs where this isn't possible.

For administrative tasks use runas or log in as an administrative user.
The latter is the preferred method, because the former may allow for
shatter attacks against the programs started with admin privileges.

[1]http://www.planetcobalt.net/sdb/submission.shtml


You reference currently only brings up or redirects to a welcome page.
I don't see what article has the relevant info.

For what I called running as guest,
I had in mind limited user account or non-admin account... But it's
quite a nuisance. For reasons mentioned . Maybe ok for an end user
that doesn't need administrative rights very often. Or for a techie
using the family machine (not commonly experimenting on it putting
servers on or amending the firewall settings, installing other
programs)

An obvious nuisance is you can't get the date up by double clicking
the clock. That can be sorted out. Under 'local security policy'.

You can't write a little file like c:\a.txt, ok, that can be sorted..
you can create a folder on c:\, so can do c:\a\a.txt or c:\crp\a.txt

Installing a program, getting an error, then doing the run as, can be
a nuisance. If I was installing many programs, trying loads out, over
a few days, and I wanted to browse the internet and do other things.
It'd be too much hassle doing so from a limited account. It's a good
reason why a techie's computer may most practically be best off
running as administrator all the time.

My experience is that you can't burn a CD from a limited account. I
tried with a few different pieces of software. nero, cdburnerxp, and
prob another one. I guess maybe your reference would work for that.

Logging off and on is a hassle in time, and especially moreso if it
means closing your programs. Is a bit off-putting too. If you're busy
with all these windows up.
Furthermore, if one had a P2P app it means they'd end up far away in
the queue.. In annoyance that'd be fairly high on the richter scale
Or if they were logging IRC chat, that'd stop..

I prefer the other option, of browsing as limited - less hassle .
Still, that has similar issues related to launching the browser, as
mentioned.



.

Relevant Pages

  • Re: firewall on budget ?
    ... 1)Work in Admin mode, and through 'run as', browse ... If working in admin mode and doing runas to browse in a guest account. ... Installing a program, getting an error, then doing the run as, can be ... running as administrator all the time. ...
    (microsoft.public.windowsxp.security_admin)
  • Users with admin access still cant run programs
    ... Software installed from other computer admin ... accounts fails. ... administrator change your ...
    (microsoft.public.windowsxp.security_admin)
  • Re: firewall on budget ?
    ... 1)Work in Admin mode, and through 'run as', browse ... If working in admin mode and doing runas to browse in a guest account. ... Installing a program, getting an error, then doing the run as, can be ... running as administrator all the time. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: firewall on budget ?
    ... 1)Work in Admin mode, and through 'run as', browse ... Installing a program, getting an error, then doing the run as, can be ... running as administrator all the time. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Alternative to Windows Explorer
    ... One drawback if you use that "runas" approach then you really won't know ... Administrator versus their using their actual account. ... admin, a variation of their normal account. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
Loading