Startup Accounts

Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
it the startup account provide any internet security or is it simply to deal
with multiple users ? I am the only user on the computer. TIA.

RonJ
Tue Mar 22 03:19:03 CST 2005

Hello drive,
The biggest advantage to haveing a limted user account for searching
the net, is that if someone hacks your system while you are using it they
will not have the rights of System Admin. It is also a good idea to rename it
, if you are using the guest account. Best of luck to you.
Ron J

"drive55" wrote:

> Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> it the startup account provide any internet security or is it simply to deal
> with multiple users ? I am the only user on the computer. TIA.

drive55
Tue Mar 22 17:21:02 CST 2005

Does designating a restricted account as the startup account mean that every
time I access the Internet, I'll be logged on with the limited account ? I
got the idea from the Symantec help center that a child's account as startup
would be the most secure. However, that would be prohibitive for Internet
use. Would I then be required to log back on as an adult (supv.,admin.,etc.)
to obtain acceptable Internet results ? That sounds like I'd be back at
square one. TIA for any input.

"Ron J" wrote:

> Hello drive,
> The biggest advantage to haveing a limted user account for searching
> the net, is that if someone hacks your system while you are using it they
> will not have the rights of System Admin. It is also a good idea to rename it
> , if you are using the guest account. Best of luck to you.
> Ron J
>
> "drive55" wrote:
>
> > Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> > it the startup account provide any internet security or is it simply to deal
> > with multiple users ? I am the only user on the computer. TIA.

RonJ
Tue Mar 22 20:45:04 CST 2005

Enable fast user switching then you can switch accounts very easy. A user
account whether a child or not is still limted by you and what rights you
want it to have.
Best of luck to you.
Ron J

"drive55" wrote:

> Does designating a restricted account as the startup account mean that every
> time I access the Internet, I'll be logged on with the limited account ? I
> got the idea from the Symantec help center that a child's account as startup
> would be the most secure. However, that would be prohibitive for Internet
> use. Would I then be required to log back on as an adult (supv.,admin.,etc.)
> to obtain acceptable Internet results ? That sounds like I'd be back at
> square one. TIA for any input.
>
> "Ron J" wrote:
>
> > Hello drive,
> > The biggest advantage to haveing a limted user account for searching
> > the net, is that if someone hacks your system while you are using it they
> > will not have the rights of System Admin. It is also a good idea to rename it
> > , if you are using the guest account. Best of luck to you.
> > Ron J
> >
> > "drive55" wrote:
> >
> > > Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> > > it the startup account provide any internet security or is it simply to deal
> > > with multiple users ? I am the only user on the computer. TIA.

RonJ
Tue Mar 22 20:47:03 CST 2005

I dont know what you mean when you say start up account. You can chose which
account to sign on with at the welcome screen.
ron

"drive55" wrote:

> Does designating a restricted account as the startup account mean that every
> time I access the Internet, I'll be logged on with the limited account ? I
> got the idea from the Symantec help center that a child's account as startup
> would be the most secure. However, that would be prohibitive for Internet
> use. Would I then be required to log back on as an adult (supv.,admin.,etc.)
> to obtain acceptable Internet results ? That sounds like I'd be back at
> square one. TIA for any input.
>
> "Ron J" wrote:
>
> > Hello drive,
> > The biggest advantage to haveing a limted user account for searching
> > the net, is that if someone hacks your system while you are using it they
> > will not have the rights of System Admin. It is also a good idea to rename it
> > , if you are using the guest account. Best of luck to you.
> > Ron J
> >
> > "drive55" wrote:
> >
> > > Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> > > it the startup account provide any internet security or is it simply to deal
> > > with multiple users ? I am the only user on the computer. TIA.

drive55
Tue Mar 22 22:03:02 CST 2005

The Symantec help center states- Everytime that you start your computer, NIS
automatically logs on to the account that is designated as the startup
account. To ensure that users do not make unwanted changes to NIS settings,
you should create a Restricted account and set it as the default startup
account. I was wondering if using the most restricted account as the default
startup account would, since I'm the only user and not concerned about others
making changes to my settings, be advisable for security reasons alone. As it
stands now, the Supervisor's account is the one that NIS recognizes as the
startup. I thought it might be better to use the restricted account as the
startup; but from your answer, it seems as if I might just make basic
Internet usage more difficult for myself in doing so.


"Ron J" wrote:

> I dont know what you mean when you say start up account. You can chose which
> account to sign on with at the welcome screen.
> ron
>
> "drive55" wrote:
>
> > Does designating a restricted account as the startup account mean that every
> > time I access the Internet, I'll be logged on with the limited account ? I
> > got the idea from the Symantec help center that a child's account as startup
> > would be the most secure. However, that would be prohibitive for Internet
> > use. Would I then be required to log back on as an adult (supv.,admin.,etc.)
> > to obtain acceptable Internet results ? That sounds like I'd be back at
> > square one. TIA for any input.
> >
> > "Ron J" wrote:
> >
> > > Hello drive,
> > > The biggest advantage to haveing a limted user account for searching
> > > the net, is that if someone hacks your system while you are using it they
> > > will not have the rights of System Admin. It is also a good idea to rename it
> > > , if you are using the guest account. Best of luck to you.
> > > Ron J
> > >
> > > "drive55" wrote:
> > >
> > > > Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> > > > it the startup account provide any internet security or is it simply to deal
> > > > with multiple users ? I am the only user on the computer. TIA.

RonJ
Tue Mar 22 22:37:02 CST 2005

They are talking about NIS I told you about Windows XP Pro. If you use NIS
then do it the way they say. It is still the same thigSuoer=admin &
restricted=limted user. I never said anything to imply that it would be
harder for you to use the
Internet . You just have to switch accounts. If you want it to be just as
easy in one account as it is the other,
why bother to set up an account.???????
Ropn J
"drive55" wrote:

> The Symantec help center states- Everytime that you start your computer, NIS
> automatically logs on to the account that is designated as the startup
> account. To ensure that users do not make unwanted changes to NIS settings,
> you should create a Restricted account and set it as the default startup
> account. I was wondering if using the most restricted account as the default
> startup account would, since I'm the only user and not concerned about others
> making changes to my settings, be advisable for security reasons alone. As it
> stands now, the Supervisor's account is the one that NIS recognizes as the
> startup. I thought it might be better to use the restricted account as the
> startup; but from your answer, it seems as if I might just make basic
> Internet usage more difficult for myself in doing so.
>
>
> "Ron J" wrote:
>
> > I dont know what you mean when you say start up account. You can chose which
> > account to sign on with at the welcome screen.
> > ron
> >
> > "drive55" wrote:
> >
> > > Does designating a restricted account as the startup account mean that every
> > > time I access the Internet, I'll be logged on with the limited account ? I
> > > got the idea from the Symantec help center that a child's account as startup
> > > would be the most secure. However, that would be prohibitive for Internet
> > > use. Would I then be required to log back on as an adult (supv.,admin.,etc.)
> > > to obtain acceptable Internet results ? That sounds like I'd be back at
> > > square one. TIA for any input.
> > >
> > > "Ron J" wrote:
> > >
> > > > Hello drive,
> > > > The biggest advantage to haveing a limted user account for searching
> > > > the net, is that if someone hacks your system while you are using it they
> > > > will not have the rights of System Admin. It is also a good idea to rename it
> > > > , if you are using the guest account. Best of luck to you.
> > > > Ron J
> > > >
> > > > "drive55" wrote:
> > > >
> > > > > Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> > > > > it the startup account provide any internet security or is it simply to deal
> > > > > with multiple users ? I am the only user on the computer. TIA.

drive55
Tue Mar 22 23:15:02 CST 2005

The initial question should have simply been, "Does NIS recognizing my
Supervisor account as the default startup compromise security ?" I felt that
Symantec implied that using a restricted account instead would be mainly
because of other users of the computer; not necessarily because of a security
problem. Sorry for any misunderstanding.

"Ron J" wrote:

> They are talking about NIS I told you about Windows XP Pro. If you use NIS
> then do it the way they say. It is still the same thigSuoer=admin &
> restricted=limted user. I never said anything to imply that it would be
> harder for you to use the
> Internet . You just have to switch accounts. If you want it to be just as
> easy in one account as it is the other,
> why bother to set up an account.???????
> Ropn J
> "drive55" wrote:
>
> > The Symantec help center states- Everytime that you start your computer, NIS
> > automatically logs on to the account that is designated as the startup
> > account. To ensure that users do not make unwanted changes to NIS settings,
> > you should create a Restricted account and set it as the default startup
> > account. I was wondering if using the most restricted account as the default
> > startup account would, since I'm the only user and not concerned about others
> > making changes to my settings, be advisable for security reasons alone. As it
> > stands now, the Supervisor's account is the one that NIS recognizes as the
> > startup. I thought it might be better to use the restricted account as the
> > startup; but from your answer, it seems as if I might just make basic
> > Internet usage more difficult for myself in doing so.
> >
> >
> > "Ron J" wrote:
> >
> > > I dont know what you mean when you say start up account. You can chose which
> > > account to sign on with at the welcome screen.
> > > ron
> > >
> > > "drive55" wrote:
> > >
> > > > Does designating a restricted account as the startup account mean that every
> > > > time I access the Internet, I'll be logged on with the limited account ? I
> > > > got the idea from the Symantec help center that a child's account as startup
> > > > would be the most secure. However, that would be prohibitive for Internet
> > > > use. Would I then be required to log back on as an adult (supv.,admin.,etc.)
> > > > to obtain acceptable Internet results ? That sounds like I'd be back at
> > > > square one. TIA for any input.
> > > >
> > > > "Ron J" wrote:
> > > >
> > > > > Hello drive,
> > > > > The biggest advantage to haveing a limted user account for searching
> > > > > the net, is that if someone hacks your system while you are using it they
> > > > > will not have the rights of System Admin. It is also a good idea to rename it
> > > > > , if you are using the guest account. Best of luck to you.
> > > > > Ron J
> > > > >
> > > > > "drive55" wrote:
> > > > >
> > > > > > Using NIS 2004 in XP/SP2. Does creating a restricted account and designating
> > > > > > it the startup account provide any internet security or is it simply to deal
> > > > > > with multiple users ? I am the only user on the computer. TIA.

lecter
Wed Mar 23 06:21:50 CST 2005

"First of all when you run Windows XP as an administrator, you are
running the computer with a higher level of privileges which can make
system wide changes to the computer. It also makes the system
vulnerable to Trojan horses and other security risks. Visiting an
Internet site can be extremely damaging to the system, because
unfamiliar Internet sites may have Trojan horse code that can be
downloaded to the system and executed.

If you are logged on with administrator privileges, a Trojan horse
could do things like reformat your hard drive, delete all your files,
create a new user account with administrative access, and so on. To
minimize the risk, it is recommended to log in as a user when doing
day to day tasks and use the administrator account only for
administrative tasks or making modification to the softwares.

If you frequently need to log on as an administrator, you can use
the $)A!0runas!1 command to start programs as an administrator."


Lecter
"Trust No One!"

Roland
Wed Mar 23 16:42:00 CST 2005


"lecter" <2@2.com> wrote in message
news:ull241t5dqevoes89roat0vqdpciohhjsr@4ax.com...
: "First of all when you run Windows XP as an administrator, you are
: running the computer with a higher level of privileges which can make
: system wide changes to the computer. It also makes the system
: vulnerable to Trojan horses and other security risks. Visiting an
: Internet site can be extremely damaging to the system, because
: unfamiliar Internet sites may have Trojan horse code that can be
: downloaded to the system and executed.

Please provide me with a link so I may peruse this risky site while logged
on as Administrator. Danger is my middle name, well, actually my last name,
but still.

: If you are logged on with administrator privileges, a Trojan horse
: could do things like reformat your hard drive, delete all your files,
: create a new user account with administrative access, and so on. To
: minimize the risk, it is recommended to log in as a user when doing
: day to day tasks and use the administrator account only for
: administrative tasks or making modification to the softwares.

Sounds good on paper. Yet to meet someone who does it.

: If you frequently need to log on as an administrator, you can use
: the $)A!0runas!1 command to start programs as an administrator."

Exactly what does  do?

How does one take advantage of running an application from Explorer using
runas?

BTW... I don't disagree with the "runas" use policy, just asking.

--
Roland Hall
- Look Ma! No security! -

/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech

Pete
Thu Mar 24 08:53:36 CST 2005


"Roland Hall" <nobody@nowhere> wrote in message
news:eF6EIm$LFHA.3812@TK2MSFTNGP10.phx.gbl...

{snipped}
>
> : If you are logged on with administrator privileges, a Trojan horse
> : could do things like reformat your hard drive, delete all your files,
> : create a new user account with administrative access, and so on. To
> : minimize the risk, it is recommended to log in as a user when doing
> : day to day tasks and use the administrator account only for
> : administrative tasks or making modification to the softwares.
>
> Sounds good on paper. Yet to meet someone who does it.


Hail and well met!

(You can no longer make that claim. )

Prior to entering into a Mandrake 10.1 test drive I religiously used a
generic user account for everything. I used RunAs whenever possible and the
only time I logged in with administrative privileges was to do "janitorial"
stuff.

What do you see as the problem?

--
Pete

drive55
Thu Mar 24 14:41:08 CST 2005

I know about a limited account being safer for the Internet, but I'm still
puzzled as to whether NIS recognizing my Supervisor account as the default
startup is, in of and by itself, a security compromise. By the way, what key
does one strike to type the boxes that appear in Lecter's post ?

"Pete" wrote:

>
> "Roland Hall" <nobody@nowhere> wrote in message
> news:eF6EIm$LFHA.3812@TK2MSFTNGP10.phx.gbl...
>
> {snipped}
> >
> > : If you are logged on with administrator privileges, a Trojan horse
> > : could do things like reformat your hard drive, delete all your files,
> > : create a new user account with administrative access, and so on. To
> > : minimize the risk, it is recommended to log in as a user when doing
> > : day to day tasks and use the administrator account only for
> > : administrative tasks or making modification to the softwares.
> >
> > Sounds good on paper. Yet to meet someone who does it.
>
>
> Hail and well met!
>
> (You can no longer make that claim. )
>
> Prior to entering into a Mandrake 10.1 test drive I religiously used a
> generic user account for everything. I used RunAs whenever possible and the
> only time I logged in with administrative privileges was to do "janitorial"
> stuff.
>
> What do you see as the problem?
>
> --
> Pete
>
>
>

Roland
Thu Mar 24 22:51:14 CST 2005

"Pete" wrote in message news:eZlqmDIMFHA.3340@TK2MSFTNGP14.phx.gbl...
:
: "Roland Hall" <nobody@nowhere> wrote in message
: news:eF6EIm$LFHA.3812@TK2MSFTNGP10.phx.gbl...
:
: {snipped}
: >
: > : If you are logged on with administrator privileges, a Trojan horse
: > : could do things like reformat your hard drive, delete all your files,
: > : create a new user account with administrative access, and so on. To
: > : minimize the risk, it is recommended to log in as a user when doing
: > : day to day tasks and use the administrator account only for
: > : administrative tasks or making modification to the softwares.
: >
: > Sounds good on paper. Yet to meet someone who does it.
:
:
: Hail and well met!

Not sure what you just said.

: (You can no longer make that claim. )

Sure. We haven't met and this is not something you do religiously since you
stated you did it once.

: Prior to entering into a Mandrake 10.1 test drive I religiously used a
: generic user account for everything. I used RunAs whenever possible and
the
: only time I logged in with administrative privileges was to do
"janitorial"
: stuff.

Mandrake is Linux. How does this relate to MSFT? BTW... I leave the
janitorial stuff to the janitor. Jes' sayin'...

: What do you see as the problem?

Your inability to understand my response. I said I didn't disagree with the
approach, just never met anyone who practiced it. Still waiting for that
web site URL and the process to use runas from Windows Explorer. MSFT
offers OPEN, OPEN AS.

--
Roland Hall
No Fear!

/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech

Roland
Thu Mar 24 22:54:02 CST 2005

"drive55" wrote in message
news:F10BB68E-70C1-49D3-A4AA-CCC397BF946A@microsoft.com...
:I know about a limited account being safer for the Internet, but I'm still
: puzzled as to whether NIS recognizing my Supervisor account as the default
: startup is, in of and by itself, a security compromise. By the way, what
key
: does one strike to type the boxes that appear in Lecter's post ?

Already asked that question and was already ignored. Perhaps you'll have
better luck. It's probably a copy/paste from something that embeds control
characters, like MS Word or an IDE.

--
Roland Hall
I just don't know anymore

/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech

Pete
Fri Mar 25 07:36:30 CST 2005


"Roland Hall" <nobody@nowhere> wrote in message
news:ebxkHZPMFHA.2648@TK2MSFTNGP14.phx.gbl...
> "Pete" wrote in message news:eZlqmDIMFHA.3340@TK2MSFTNGP14.phx.gbl...
> :
> : "Roland Hall" <nobody@nowhere> wrote in message
> : news:eF6EIm$LFHA.3812@TK2MSFTNGP10.phx.gbl...
> :
> : {snipped}
> : >
> : > : If you are logged on with administrator privileges, a Trojan horse
> : > : could do things like reformat your hard drive, delete all your
files,
> : > : create a new user account with administrative access, and so on. To
> : > : minimize the risk, it is recommended to log in as a user when doing
> : > : day to day tasks and use the administrator account only for
> : > : administrative tasks or making modification to the softwares.
> : >
> : > Sounds good on paper. Yet to meet someone who does it.
> :
> :
> : Hail and well met!
>
> Not sure what you just said.

Read a book once in a while.


>
> : (You can no longer make that claim. )
>
> Sure. We haven't met and this is not something you do religiously since
you
> stated you did it once.

We're meeting on Usenet.
You say you have "Yet to meet someone who does it.". I'm telling you that
prior to the middle of January of this year I have spent better part of a
couple of years running XP Pro SP1 and then SP2 running just as described.

>
> : Prior to entering into a Mandrake 10.1 test drive I religiously used a
> : generic user account for everything. I used RunAs whenever possible and
> the
> : only time I logged in with administrative privileges was to do
> "janitorial"
> : stuff.
>
> Mandrake is Linux. How does this relate to MSFT?

Yes & it doesn't. Other than to say that at the moment I'm not using XP for
my daily computing needs. However, as stated above, I have done so
extensively in the past.

>BTW... I leave the
> janitorial stuff to the janitor. Jes' sayin'...

So you leave the administrative stuff to the Administrator? What are you
trying to say here?

>
> : What do you see as the problem?
>
> Your inability to understand my response.
>I said I didn't disagree with the
> approach, just never met anyone who practiced it. Still waiting for that
> web site URL and the process to use runas from Windows Explorer. MSFT
> offers OPEN, OPEN AS.
>

Now, you're just being aguementative. You say you don't know anyone that
practices this - I'm telling you I have.
As you obviously seem to be aware of, RunAs through Explorer is problematic.
That is not to say it can't be done.

http://blogs.msdn.com/aaron_margosis/archive/2004/07/07/175488.aspx

And since you've obviously never heard of Google:
http://www.google.com/search?hl=en&q=runas+windows+explorer


Troll away somewhere else.

/Plonk/


--Pete