VOTE (or comment) - Curious - home user/admin setup configurations

Forums › Microsoft Windows › VOTE (or comment) - Curious - home user/admin setup configurations

1 | 2

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1694810 25-Dec-2016 07:46

Work in IT, fully cognoscente of the risks, still grant home account admin rights.

That being said I'm trying to pursuade my manager at work we should be working towards MS's 4 tier account model at work.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

Kiwifruta

1423 posts

Uber Geek

ID Verified

#1694812 25-Dec-2016 07:57

1. Separate admin and user accounts. Only log in to admin to download the virtual box extension.

Others have commented that doing this is no longer necessary on Windows 10. Could someone please elaborate? Thanks

MadEngineer

4292 posts

Uber Geek

Trusted

#1695025 26-Dec-2016 09:58

Kiwifruta: 1. Separate admin and user accounts. Only log in to admin to download the virtual box extension.

Others have commented that doing this is no longer necessary on Windows 10. Could someone please elaborate? Thanks

Windows comes with a disabled admin account that some people would re-activate thinking it would solve their installation issues. Didn't help when some software would display a possible solution of trying again as an administrator user and people miss-interpret this. The fun would start when it's discovered that 'administrator' has restricted or disabled network sharing and they circumvent this too, only to get pwned because their internet was provided by a modem rather than a router which placed every port on their pc on the internet, including file sharing with their admin user with no password.

UAC now helps protect users that have admin rights, amongst many other security features. Certainly not to say it's bullet proof.

You're not on Atlantis anymore, Duncan Idaho.

Rikkitic

Awrrr
18663 posts

Uber Geek

Lifetime subscriber

#1695072 26-Dec-2016 11:55

I have always only had a single admin account, also in the old days. Not claiming I know more than anyone else but this has always worked well for me and I have never had issues because of it. What I do have issues with is bloody Windows telling me I don't have permission to access something on my own computer. That makes me very impatient indeed.

Plesse igmore amd axxept applogies in adbance fir anu typos

nunz

1421 posts

Uber Geek
Inactive user

#1704231 16-Jan-2017 16:11

VOTE: 2. I create an account with where you are the admin

I trust myself not to bollocks things up. The Windows security since Windows vista has been way too intrusive ( flash back - Apple Vs PC -> https://www.youtube.com/watch?v=VuqZ8AqmLPY )

Under linux its a different story - but if you sudo in Linux, it remembers you have done so in the last nnn minutes and doesn't ask to retype passwords EVERY SINGLE TIME aarrgghh!!!

nunz

1421 posts

Uber Geek
Inactive user

#1704236 16-Jan-2017 16:13

Kiwifruta: 1. Separate admin and user accounts. Only log in to admin to download the virtual box extension.

Others have commented that doing this is no longer necessary on Windows 10. Could someone please elaborate? Thanks

I dont use Microsoft cloud security - watched it mess up too often. So only use a local account then pull the pants down on UAC - no worries after that.

nunz

1421 posts

Uber Geek
Inactive user

#1704241 16-Jan-2017 16:20

Lias:

Work in IT, fully cognoscente of the risks, still grant home account admin rights.

That being said I'm trying to pursuade my manager at work we should be working towards MS's 4 tier account model at work.

Problem with that has always been so many programs crap out as the security is wrong - even when not changing anything secure. Printers ditto or just trying to add / change settings for printers.

The reality is that it costs more to secure a workstation on a domain then fix security issues / rebuild a workstation once every 5 years - especially if you have an image. In 20 plus years PC support would back that as a truthful statement everytime - the only exception is a deliberately malicious or absolutely totally incompetent worker fiddling where they shouldn't - and that's an HR / training issue - not IT.

On a workstation:

If your AV is good
Firewall is sorted to stop anything malicious from within the lan (e.g. only open for filesharing / printer sharing if required)
Server / file system is properly secured from incorrect levels of access
Then giving a user full admin rights on a workstation saves time and money and frustration.

The only caveat to that is stopping certain users using certain applications for licensing or security purposes - but not many sites have hot seat work stations with that requirement.

1 | 2