Using Admin Account with UAC Prompting for Credentials?

win10freak · 17 Jul 2019

I just installed Windows 10 and my local user account is a Local Admin Account.

However, under Local Security Policy settings, I set the UAC Prompt to Prompt for Credentials on the Secure Desktop (for Admin accounts). Can I also use this account to browse the web, check email even If the UAC is set to Prompt for Credentials? Or, would it be more secure if I create another local account which would be a Standard User Account?

Can malware still cause damage even if the UAC is set to Prompt for Credentials on the Secure Desktop for the local Admin Account?

I am the only one using the computer.

Samuria · 17 Jul 2019

You can do anything as local admin browse the web etc. The uac generally only kicks in if your doing something that can effect the system like running regedit. Malware can run if your in as admin. On UNIX no one ever logs in as root admin and just runs odd things as admin as required this is safest way but can be a bit of a pain

Try3 · 17 Jul 2019

I do not know how your LSP setting compares to Control panel, User accounts, UAC settings.

If you are going to use an Admin account for general use then put Control panel, User accounts, UAC settings to its highest level.
- The claims of malware breaching security of Admin accounts relate to Control panel, User accounts, UAC settings being one level lower than max i.e. at its default level. Several malwares have apparently been shown to find a way in at this default level.
- Having Control panel, User accounts, UAC settings at its highest setting is not particularly inconvenient once your system is set up. There was a claim a few years ago that a particular malware method could find its way through this setting as well but it was, at the time, countered by Windows updates.
- Both the max & the default levels use the Secure desktop.
- The standard recommendation remains that using a Standard account for day-to-day activities is the best practice.

Denis

win10freak · 17 Jul 2019

What if I set the UAC to prompt to ask for password even when using the Admin account? Would this be secure?

Or should I still create a separate Standard account?

Try3 · 18 Jul 2019

What if I set the UAC to prompt to ask for password even when using the Admin account?

Not possible.
And not relevant - the security concerns are about the ability of malware to bypass the Admin prompt.

Or should I still create a separate Standard account?

That is the recommended course of action.
I use my Admin account routinely and I keep UAC at its max setting. I am taking a risk because new malware might be developed that can bypass the Admin prompt even with UAC at max,

Denis