Admimistrator account or Standard user account?

I planned to try the frequent advice to do as much work as possible in a "Standard user" account, rather than in the "Administrator" account.

I created a new account, "me_Standard". On opening the account, I found that I could not access any of "my" personal files. That seems fair enough. I should probably have guessed that would happen :)

So, I deleted the new "me_standard" account. I'm now thinking about the possibility of downgrading my "me_Administrator" account to a Standard account.

But is that going to make any difference?

Here is the description of UAC from "Help and Support":

"User Account Control (UAC) is a feature in Windows that can help prevent unauthorized changes to your computer. UAC does this by asking you for permission or an administrator password before performing actions that could potentially affect your computer's operation or that change settings that affect other users."

Currently, as Administrator, I need to click the UAC popups that appear frequently. (I'm not complaining. I know the reason for the UAC.) If I downgrade to a Standard user, I will still need to click the UAC (and probably need to give an Administrator password). Again, I don't mind doing that. But what will I gain in terms of security?

Another frequently-mentioned reason to use a Standard account is that it restricts viruses and malware to the account of the current user.

However, I'm the only user of this laptop, so there are no "other users" to protect.

Any comments?
.
 

My Computer

My best advice is to simply avoid infection and contamination by getting yourself a good Anti-Virus and Firewall. Your common sense should be the first line of defense when it comes to downloading and executing programs on your computer though, Anti-Virus and Firewall protection are to be considered a last line of defense.

I've never heard of using a "Standard" account to improve security coverage, but I can see how it would help. Though I've used administrator accounts forever and never had any problems with viruses or other infections. I personally disabled UAC after a week or two of using it on Vista, it's to obnoxious, intrusive, and completely useless. It's quite a bit better on Windows 7 though, especially since you can set a "drag-bar" to the level of protection you want.
 

My Computer

System One

  • Manufacturer/Model
    Acropolis
    CPU
    Intel Core i7-6800k @ 4.0 GHz
    Motherboard
    ASUS X99-M WS
    Memory
    32GB Corsair Vengeance 2x16GB
    Graphics Card(s)
    ASUS GeForce GTX 1080 STRIX
    Monitor(s) Displays
    ASUS ROG Swift PG278Q
    Screen Resolution
    2560x1440
    Hard Drives
    2x 256GB Samsung 850 Pro (RAID 0)
    1x 500GB Samsung 850 Evo
    2x Western Digital RED 4TB (RAID 1)
    50TB File Server (Multiple RAID 6)
    PSU
    Corsair AX1200i
    Case
    Corsair Air 240
    Keyboard
    Razer Blackwidow X Chroma
    Mouse
    Logitech G502
    Internet Speed
    250Mbps Down | 15 Mbps Up
Hello, Oldgrantonian,

I used to follow this procedure with operating systems before Vista.

That is I had a "Standard" user account which was used for day to day use plus an Administrator account for when I was performing a lot of Admin tasks. This of course related to a large Multi-PC/Multi User system. The Admin account was also set to log off if not used for a very short time, as a further security measure


What this meant for me is that If for any chance I left a session open nobody else could use that account to potentially damage anything. If I needed to perform any task I could Right click and "Run as Administrator"

The other advantage with running as a standard user is that if somehow you are subject to a malware attack the worst It can do is damage files in your "Standard" account.

With the UAC in Vista this process is automated so In my opinion It is not needed to be implemented manually. This is especially true in a single user system such as you use.

What I personally advise is

Use the UAC controlled "Standard/Admin" Account

Create a spare administrator account so to provide a back door in case you are ever "locked" out of your normal account.,

Try to avoid the temptation to Click OK to the UAC without reading why it is prompting you.

Hope this helps
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro x64 Latest Release Preview
    Monitor(s) Displays
    Acer G276HL 27", (DVi) + Samsung 39" HDTV (HDMI)
    Screen Resolution
    2 x 1920x1080 @50Hz
  • Manufacturer/Model
    Real World Computers (Custom by Me)
    CPU
    AMD FX8350 Vishera 8 Core @4GHz
    Motherboard
    Asus M5A78L-M USB3
    Memory
    32GB [4x8GB] DDR3 1600 MHz
    Graphics card(s)
    Asus nVidia GTX750TI-OC-2GD5 (2GB DDR5)
    Sound Card
    ASUS Xoner DG + SPDIF to 5.1 System + HDMI
    Monitor(s) Displays
    Samsung 32" TV
    Screen Resolution
    1920 x 1080
    Hard Drives
    Internal
    Crucial CT256MX100SSD1 256GB SSD,
    Seagate ST2000DM001-1CH1 2TB,

    External (USB3)
    Seagate Backup+ Hub BK SCSI Disk 8TB
    2.5/3.5 Hot Swap Cradle, USB3 + eSata (client HDDs)
    NAS 4TB
    PSU
    Aerocool Templarius Imperator 750W 80+ Silver
    Case
    AeroCool X-Warrior Red Devil Tower
    Cooling
    Hyper103 CPU, Rear 120mm, Front 2x120mm, Side 2x120mm
    Internet Speed
    68 MB Down 18.5 MB Up
    Other Info
    Six Sensor Auto / Manual Digital cooling (Fan) control with Touch control Panel
Back
Top