计算机安全指点 – Administrator and Limited Users
Administrator and Limited Users: The first time you ever switched on your computer, it probably asked you what user names and passwords you wanted to create. If, like most people, you only created one user account then now’s the time to change ... - If using Windows 7, Windows 8, or Windows 10 and you’re prepared to have a tiny bit of inconvenience in order to gain a lot of extra Windows security, you should create 2 users (using “Computer Management”) – one Administrator account and one Limited (or Standard) account, then also turn on User Account Control (UAC) using the Control Panel. Make sure that the accounts have different passwords and that they’re strong passwords (see Password Security).
- You then use the Limited/Standard user account to do everything, and whenever you want to install new software, you just install it as the Limited/Standard user, and the computer will prompt you to enter the Administrator password whenever a privileged operation needs to be performed, so you just type it in. (You may need to type it in multiple times though, but this small amount of inconvenience will give you a huge increase in overall security.)
- If you’re not installing software but the computer suddenly prompts you to enter the Administrator password to perform a privileged operation, you should seriously think twice before allowing it. It could be a virus or trojan running on your machine. Investigate all such incidents using the “Task Manager” before making a decision.
- If using Windows XP, and you’re prepared to have a small bit of inconvenience in order to gain a lot of extra Windows security, you should create 2 users (using “Computer Management”) – one Administrator account and one Limited account. Make sure that they have different passwords and that they’re strong passwords (see Password Security), then ...
- Whenever you want to do a normal everyday task, e.g. read email, surf the web, download software, read or write documents, etc., you use the Limited account to do it.
- Whenever you want to install new software, you ...
- If you’re getting the new software from the internet, then download the software using the Limited account.
- Log off the Limited account.
- Log on to the Administrator account, but do not connect to the internet.
- Add Administrator privileges to the Limited account (using “Computer Management”).
- Log off the Administrator account.
- Log on to the Limited account (which now actually has Administrator privileges), but do not connect to the internet.
- Install the new software. If the software asks you to connect to the internet in order to download part of the software then connect. If the software asks you to connect to the internet in order to register the software, then seriously consider waiting until the final step below before doing it.
- Remove Administrator privileges from the Limited account (using “Computer Management”).
- Log off the “Limited” account (since all running processes still have Administrator privileges).
- Log on again to the Limited user and continue with your work.
The inconvenience of running through the above special procedure each time you want to install new software will be greatly outweighed by the huge increase in security you get by performing all you daily tasks as a Limited user.
- If using Mac OS X, and you’re prepared to have a tiny bit of inconvenience in order to gain a lot of extra Mac OS security, you should create 2 users (using “Accounts”) – one Administrator account and one Standard account. Make sure that the accounts have different passwords and that they’re strong passwords (see Password Security).
| |
|
Copyright © 2009 Andrew White | Created: 12 Aug 2009 | Page authored by Andrew White | Updated: 26 Aug 2019 |
Administrator, Limited User, Standard User, 计算机安全指点, Windows security, Mac OS Security, PC security, Windows XP, Windows Vista, Windows 7, Windows 8, Windows 10, Mac OS X, installing software |