Windows 10: Is a standard user account necessary for tight security and home user?

Page 2 of 7 FirstFirst 1234 ... LastLast

  1. Posts : 11,951
    W10Prox64
       22 Sep 2016 #11

    Kol12 said: View Post
    Are you sure being logged into both accounts is ok? I noticed that it caused the running processes to double up, or should it have not done that?
    Yes, it will do that with some, and some will be suspended. It's not a problem at all. I have one system with 3 different users, and they switch back and forth all day long.
    Kol12 said: View Post
    Is there ever the possibility that some of the programs you use regularly won't run correctly or at all from a standard user account? Can that be a problem?
    Never had that problem.
    Kol12 said: View Post
    Also we should look at using at a standard user account as an extra layer of security but we should not substitute it for our normal security protections including antivirus and malware monitors...
    It is an extra layer of security, yes, and not a substitute.
      My ComputerSystem Spec


  2. Posts : 1,663
    Windows 10 Home x64 (Laptop), Windows 10 Pro x64 (Desktop)
       23 Sep 2016 #12

    Kol12 said: View Post
    Is a standard user account really necessary for tight security for the home user or will a well secured administrator account be sufficient?
    I would give each user their own standard account for extra security and keep an admin account for system maintenance. I also have a reserve admin account on my PC in case of problems with the main admin account!

    I've also set my admin account to be a local rather than Microsoft account.

    You can run many admin tasks from a standard account but you will get an UAC prompt for the admin password.
      My ComputerSystem Spec


  3. Posts : 344
    Windows 10 64 bit, 1703
    Thread Starter
       23 Sep 2016 #13

    Steve C said: View Post
    I would give each user their own standard account for extra security and keep an admin account for system maintenance. I also have a reserve admin account on my PC in case of problems with the main admin account!

    I've also set my admin account to be a local rather than Microsoft account.

    You can run many admin tasks from a standard account but you will get an UAC prompt for the admin password.
    I've switched my accounts over (both local accounts) and it was very straightforward but what strikes me right away is the amount of things that need to be opened with admin permission and the password! I can see this getting irritating quickly.

    Can I change the UAC settings to allow admin access without a password? I currently have the UAC slider on maximum.
      My ComputerSystem Spec


  4. Posts : 1,663
    Windows 10 Home x64 (Laptop), Windows 10 Pro x64 (Desktop)
       23 Sep 2016 #14

    Kol12 said: View Post
    Can I change the UAC settings to allow admin access without a password? I currently have the UAC slider on maximum.
    Yes, but that defeats the security provided by a local account! I'd leave the UAC setting alone in a user account.
      My ComputerSystem Spec


  5. Posts : 344
    Windows 10 64 bit, 1703
    Thread Starter
       23 Sep 2016 #15

    Steve C said: View Post
    Yes, but that defeats the security provided by a local account! I'd leave the UAC setting alone in a user account.
    Do you mind explaining how that is?

    My initial thinking in that a lot of apps needed admin rights to run may have been a bit hasty as I'm finding I can do most things normally without it...

    So in essence changing to or running a standard user account is purely a permission based thing and doesn't affect system configurations or personal files?

    If I open Event Viewer in my converted admin to standard account should everything still be logged the same?

    Are there administrative tasks that shouldn't been done in the standard user account? Are most of the Windows administrative tools safe to use?

    Is there any good reading around that explains how to work from a standard user account while also being the administrator?
      My ComputerSystem Spec


  6. Posts : 11,951
    W10Prox64
       23 Sep 2016 #16

    Steve C said: View Post
    I would give each user their own standard account for extra security and keep an admin account for system maintenance. I also have a reserve admin account on my PC in case of problems with the main admin account!
    That's a good idea.
    Steve C said: View Post
    I've also set my admin account to be a local rather than Microsoft account.
    Another good idea. I use local accounts as well.

    Kol12 said: View Post
    I've switched my accounts over (both local accounts) and it was very straightforward but what strikes me right away is the amount of things that need to be opened with admin permission and the password! I can see this getting irritating quickly.

    Can I change the UAC settings to allow admin access without a password? I currently have the UAC slider on maximum.
    The normal setting is 1 notch down from maximum. Why don't you try that one? You don't want to turn it off as that would defeat its purpose.
      My ComputerSystem Spec


  7. Posts : 11,951
    W10Prox64
       23 Sep 2016 #17

    Kol12 said: View Post
    Do you mind explaining how that is?

    My initial thinking in that a lot of apps needed admin rights to run may have been a bit hasty as I'm finding I can do most things normally without it...

    So in essence changing to or running a standard user account is purely a permission based thing and doesn't affect system configurations or personal files?

    If I open Event Viewer in my converted admin to standard account should everything still be logged the same?

    Are there administrative tasks that shouldn't been done in the standard user account? Are most of the Windows administrative tools safe to use?

    Is there any good reading around that explains how to work from a standard user account while also being the administrator?
    I think, the only thing you may notice (besides the UAC prompt for changing system settings or installing programs) is that you will not be able to view the files of other users from a standard account. That can only be done in an admin account.

    Switching to a limited user account does not affect any user files.

    Event Viewer may not show everything, and if it doesn't, just right-click it and select run as administrator from a standard user account. I just opened it from a standard account, and it appeared to show everything fine.

    Just use the standard account normally. Everything should be fine. If you find you can't do something, the UAC will prompt for the admin password. It's really easy.
      My ComputerSystem Spec


  8. Posts : 1,663
    Windows 10 Home x64 (Laptop), Windows 10 Pro x64 (Desktop)
       23 Sep 2016 #18

    simrick said: View Post
    I think, the only thing you may notice (besides the UAC prompt for changing system settings or installing programs) is that you will not be able to view the files of other users from a standard account. That can only be done in an admin account.
    If you try to access another user's files from your local account, I you should get a UAC prompt requesting the admin password for access after which the permissions will be changed allowing you permanent access to the other user's folder. See the enclosed prompt when I just tried to access my backup admin account from my user account - I would get permanent access if I followed through and entered the admin password.
    Click image for larger version. 

Name:	2016_09_23_15_18_061.png 
Views:	24 
Size:	12.5 KB 
ID:	102770
      My ComputerSystem Spec


  9. Posts : 344
    Windows 10 64 bit, 1703
    Thread Starter
       24 Sep 2016 #19

    simrick said: View Post
    That's a good idea.

    Another good idea. I use local accounts as well.


    The normal setting is 1 notch down from maximum. Why don't you try that one? You don't want to turn it off as that would defeat its purpose.
    The maximum level of UAC is the safest, what difference will there be 1 notch down with a standard user account?

    simrick said: View Post
    I think, the only thing you may notice (besides the UAC prompt for changing system settings or installing programs) is that you will not be able to view the files of other users from a standard account. That can only be done in an admin account.
    I'm able to view the admins user folder in the standard account. Is that not normal?
      My ComputerSystem Spec


  10. Posts : 344
    Windows 10 64 bit, 1703
    Thread Starter
       24 Sep 2016 #20

    There seems to be some debate as to whether your actually running as a standard user in an admin account with UAC enabled. Any opinions or able to clarify?
      My ComputerSystem Spec


 
Page 2 of 7 FirstFirst 1234 ... LastLast

Related Threads
should I use a standard user account? in User Accounts and Family Safety
Is it still recommended to do your daily tasks in a non-administrator user account, or is that obsolete advice in windows 8-10?
Guys I have done this in the past but cannot recall how and don't want to botch. I had hoped Windows 10 corrected the "rename user account" function but nope. I renamed a User Account due to conflict on the LAN and sure enough, now I have two...
standard user account and drive formatting in User Accounts and Family Safety
In Windows 10 Pro is there a way to prevent a user without administrator privileges using a standard account from being able to format a usb drive? "Perform volume maintenance tasks" is set for Administrators (Group Policy), which must be the...
Solved How to disable a user account in W10 Home? in User Accounts and Family Safety
I know I can't access the local users and groups policy in this version, but I can't figure on how to -temporarily- disable my kid's user account so that it cannot be logged in. Thanks!
Yesterday I've upgraded to Windows 10 Home 64 bit, from my Windows 7 64 bit Home Premium. Then I clean installed it, after the OS was activated. I used a local account and I have never switched to any of my Microsoft's e-mail accounts. The...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 03:47.
Find Us