Windows 10: Is a standard user account necessary for tight security and home user?

Page 4 of 7 FirstFirst ... 23456 ... LastLast

  1. Posts : 11,233
    W10Prox64
       25 Sep 2016 #31

    Kol12 said: View Post
    Yes, Matt's PC is the admin account and I'm able to access Matt's PC user folder from the standard Matt account without any prompt for admin privileges.

    Maybe it has something to do with enabling a homegroup at some stage? The users of the standard account are able to access the files of in - Microsoft Community

    By once does that mean you won't continually be prompted for the admin password?

    Hmm funny, our laptop was definitely running a Microsoft account so I changed it to a local account and now all of the admin permissions are back in place. I can scan it for integrity violations just in case...
    Yes, if you "once" take control of that folder, you have permission from then on, and you will never be prompted for the admin password again. I am not sure about the homegroup/networking, as I don't use it. Changing an account from an MS account to a local account will not change the security level - you still have to do that in Control Panel>Users.
      My ComputerSystem Spec


  2. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       25 Sep 2016 #32

    simrick said: View Post
    Yes, if you "once" take control of that folder, you have permission from then on, and you will never be prompted for the admin password again. I am not sure about the homegroup/networking, as I don't use it. Changing an account from an MS account to a local account will not change the security level - you still have to do that in Control Panel>Users.
    Is it possible I took control of that folder? How would I have done that? I don't recall any prompts. If not where should I head next with this?
      My ComputerSystem Spec


  3. Posts : 11,233
    W10Prox64
       25 Sep 2016 #33

    Kol12 said: View Post
    Is it possible I took control of that folder? How would I have done that? I don't recall any prompts. If not where should I head next with this?
    Quite possible.
    Perhaps @fdegrove can help you get permissions set back to default?
      My ComputerSystem Spec


  4. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       25 Sep 2016 #34

    Can you help me with this @fdegrove?
      My ComputerSystem Spec


  5. Posts : 278
    windows 10 pro x64 stable build
       26 Sep 2016 #35

    simrick said: View Post
    Best practice is to use a standard-level user account for your every-day work, and only the admin-level account for making system changes.
    standard-level user account, and UAC at highest level, this is definitely good for security.
    But people should be aware that some ransomware variants won't be stopped by this. Ransomware only needs low-level permissions to run.
      My ComputerSystem Spec


  6. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       26 Sep 2016 #36

    shmu26 said: View Post
    standard-level user account, and UAC at highest level, this is definitely good for security.
    But people should be aware that some ransomware variants won't be stopped by this. Ransomware only needs low-level permissions to run.
    I've got CryptoPrevent for ransomware's...
      My ComputerSystem Spec


  7. Posts : 278
    windows 10 pro x64 stable build
       26 Sep 2016 #37

    Kol12 said: View Post
    I've got CryptoPrevent for ransomware's...
    the truth is that the best protection, against virtually everything, is to check it on Virus Total before running it.
    Sometimes, official site of a certain app is hacked, and the download is laced with malware. (This usually happens when the site is not HTTPS.) So always check before install...
      My ComputerSystem Spec


  8. Posts : 269
    Windows 10 64 bit, 1607
    Thread Starter
       26 Sep 2016 #38

    shmu26 said: View Post
    the truth is that the best protection, against virtually everything, is to check it on Virus Total before running it.
    Sometimes, official site of a certain app is hacked, and the download is laced with malware. (This usually happens when the site is not HTTPS.) So always check before install...
    So is Virus Total constantly monitoring apps from different websites?
      My ComputerSystem Spec

  9.    26 Sep 2016 #39

    Hi,

    Kol12 said: View Post
    Can you help me with this @fdegrove?
    Sure.

    Download and install subinacl.msi from this site:

    https://www.microsoft.com/en-us/down....aspx?id=23510

    Then copy and paste the following into notepad and save as acl.bat :


    @echo off
    title Resetting ACLs...
    cd /d "%ProgramFiles(x86)%\Windows Resource Kits\Tools"
    echo.
    echo Resetting ACLs...
    echo (this may take several minutes to complete)
    echo.
    echo ==========================================================================
    echo.
    echo System Drive...
    subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
    echo.
    echo.
    echo Windows Directory...
    subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
    echo.
    echo.
    echo ==========================================================================
    echo.
    echo FINISHED.
    echo.
    echo Press any key to exit . . .
    pause >NUL
    Run the batch file as admin and the accounts should be reset to their defaults.

    Cheers,
    Last edited by fdegrove; 26 Sep 2016 at 16:34.
      My ComputerSystem Spec


  10. Posts : 278
    windows 10 pro x64 stable build
       26 Sep 2016 #40

    Kol12 said: View Post
    So is Virus Total constantly monitoring apps from different websites?
    No, I wrote a confusing post.
    1 VT is "the place" where you can check any file that exists, and see if one or more of 54 participating antivirus engines considers it malicious. If only 1 or 2 flags it as bad, then it is probably a FP (false positive), or maybe it is a very, very fresh malware sample. But usually, such a low score means it is clean.

    2 Downloading apps from websites: that is my personal paranoia. Sometimes, the FTP of a known and trusted site gets hacked, and criminals replace the regular download with a malicious one that looks and smells the same as the genuine one.
    So even if you download from a site that you know and trust, it is still a good idea to check out the file on VT before running it.
    VirusTotal - Free Online Virus, Malware and URL Scanner
      My ComputerSystem Spec


 
Page 4 of 7 FirstFirst ... 23456 ... LastLast

Related Threads
should I use a standard user account? in User Accounts and Family Safety
Is it still recommended to do your daily tasks in a non-administrator user account, or is that obsolete advice in windows 8-10?
Guys I have done this in the past but cannot recall how and don't want to botch. I had hoped Windows 10 corrected the "rename user account" function but nope. I renamed a User Account due to conflict on the LAN and sure enough, now I have two...
standard user account and drive formatting in User Accounts and Family Safety
In Windows 10 Pro is there a way to prevent a user without administrator privileges using a standard account from being able to format a usb drive? "Perform volume maintenance tasks" is set for Administrators (Group Policy), which must be the...
Solved How to disable a user account in W10 Home? in User Accounts and Family Safety
I know I can't access the local users and groups policy in this version, but I can't figure on how to -temporarily- disable my kid's user account so that it cannot be logged in. Thanks!
Yesterday I've upgraded to Windows 10 Home 64 bit, from my Windows 7 64 bit Home Premium. Then I clean installed it, after the OS was activated. I used a local account and I have never switched to any of my Microsoft's e-mail accounts. The...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 13:27.
Find Us