Is a standard user account necessary for tight security and home user?

Page 4 of 7 FirstFirst ... 23456 ... LastLast

  1. Posts : 16,325
    W10Prox64
       #31

    Kol12 said:
    Yes, Matt's PC is the admin account and I'm able to access Matt's PC user folder from the standard Matt account without any prompt for admin privileges.

    Maybe it has something to do with enabling a homegroup at some stage? The users of the standard account are able to access the files of in - Microsoft Community

    By once does that mean you won't continually be prompted for the admin password?

    Hmm funny, our laptop was definitely running a Microsoft account so I changed it to a local account and now all of the admin permissions are back in place. I can scan it for integrity violations just in case...
    Yes, if you "once" take control of that folder, you have permission from then on, and you will never be prompted for the admin password again. I am not sure about the homegroup/networking, as I don't use it. Changing an account from an MS account to a local account will not change the security level - you still have to do that in Control Panel>Users.
      My Computer


  2. Posts : 2,979
    Windows 11
    Thread Starter
       #32

    simrick said:
    Yes, if you "once" take control of that folder, you have permission from then on, and you will never be prompted for the admin password again. I am not sure about the homegroup/networking, as I don't use it. Changing an account from an MS account to a local account will not change the security level - you still have to do that in Control Panel>Users.
    Is it possible I took control of that folder? How would I have done that? I don't recall any prompts. If not where should I head next with this?
      My Computer


  3. Posts : 16,325
    W10Prox64
       #33

    Kol12 said:
    Is it possible I took control of that folder? How would I have done that? I don't recall any prompts. If not where should I head next with this?
    Quite possible.
    Perhaps @fdegrove can help you get permissions set back to default? :)
      My Computer


  4. Posts : 2,979
    Windows 11
    Thread Starter
       #34

    Can you help me with this @fdegrove?
      My Computer


  5. Posts : 356
    windows 10 pro x64 21H1
       #35

    simrick said:
    Best practice is to use a standard-level user account for your every-day work, and only the admin-level account for making system changes.
    standard-level user account, and UAC at highest level, this is definitely good for security.
    But people should be aware that some ransomware variants won't be stopped by this. Ransomware only needs low-level permissions to run.
      My Computers


  6. Posts : 2,979
    Windows 11
    Thread Starter
       #36

    shmu26 said:
    standard-level user account, and UAC at highest level, this is definitely good for security.
    But people should be aware that some ransomware variants won't be stopped by this. Ransomware only needs low-level permissions to run.
    I've got CryptoPrevent for ransomware's...
      My Computer


  7. Posts : 356
    windows 10 pro x64 21H1
       #37

    Kol12 said:
    I've got CryptoPrevent for ransomware's...
    the truth is that the best protection, against virtually everything, is to check it on Virus Total before running it.
    Sometimes, official site of a certain app is hacked, and the download is laced with malware. (This usually happens when the site is not HTTPS.) So always check before install...
      My Computers


  8. Posts : 2,979
    Windows 11
    Thread Starter
       #38

    shmu26 said:
    the truth is that the best protection, against virtually everything, is to check it on Virus Total before running it.
    Sometimes, official site of a certain app is hacked, and the download is laced with malware. (This usually happens when the site is not HTTPS.) So always check before install...
    So is Virus Total constantly monitoring apps from different websites?
      My Computer


  9. Posts : 2,832
    Windows 10 Pro X64
       #39

    Hi,

    Kol12 said:
    Can you help me with this @fdegrove?
    Sure.

    Download and install subinacl.msi from this site:

    https://www.microsoft.com/en-us/down....aspx?id=23510

    Then copy and paste the following into notepad and save as acl.bat :


    @echo off
    title Resetting ACLs...
    cd /d "%ProgramFiles(x86)%\Windows Resource Kits\Tools"
    echo.
    echo Resetting ACLs...
    echo (this may take several minutes to complete)
    echo.
    echo ==========================================================================
    echo.
    echo System Drive...
    subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
    echo.
    echo.
    echo Windows Directory...
    subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
    echo.
    echo.
    echo ==========================================================================
    echo.
    echo FINISHED.
    echo.
    echo Press any key to exit . . .
    pause >NUL
    Run the batch file as admin and the accounts should be reset to their defaults.

    Cheers,
    Last edited by fdegrove; 26 Sep 2016 at 16:34.
      My Computers


  10. Posts : 356
    windows 10 pro x64 21H1
       #40

    Kol12 said:
    So is Virus Total constantly monitoring apps from different websites?
    No, I wrote a confusing post.
    1 VT is "the place" where you can check any file that exists, and see if one or more of 54 participating antivirus engines considers it malicious. If only 1 or 2 flags it as bad, then it is probably a FP (false positive), or maybe it is a very, very fresh malware sample. But usually, such a low score means it is clean.

    2 Downloading apps from websites: that is my personal paranoia. Sometimes, the FTP of a known and trusted site gets hacked, and criminals replace the regular download with a malicious one that looks and smells the same as the genuine one.
    So even if you download from a site that you know and trust, it is still a good idea to check out the file on VT before running it.
    VirusTotal - Free Online Virus, Malware and URL Scanner
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:10.
Find Us




Windows 10 Forums