Local Account Admin

Well, you will get people in both camps - those that say you should use a standard account for security as it makes it harder for somebody who hacks you online to install malware as they would not have admin rights.

If you need to do something that needs admin rights, a screen pops up that asks for you admin username and password, and then you can perform action.

On the other hand, if you do a lot that needs admin access, then using a standard account is a PITA.

In the end, you have to assess the risk versus security.

Personally, I never use a standard account but I do make regular image backups as a precaution.
However, do not take this as advice (backups are always good advice).

In the end, the safest advice is to use a standard account, particularly if you do not use admin access that frequently.

As a side issue, if you have multiple users, avoid having multiple admin users. I would not trust any of my family with an admin account on MY pcs, not because I do not trust them, but simply because they may make errors that screw up pc. Even then, I refuse to allow multiple accounts on my main laptop. Anybody who visits can use a guest account on my older laptop.

MS advice is to use a standard user account for day-to-day computing tasks.
Nevertheless, in a survey about seven years ago, the vast majority of computers were reported to have just a single [Admin] user just like yours.

There is malware that can sneak through and elevate itself behind your back if you are online whilst logged in to an Admin account even if you are not currently doing anything at an elevated level.
When I last looked into the topic, I found that setting UAC to its maximum level stopped this malware.
Change User Account Control level - TenForumsTutorials

User accounts can became corrupt.
You can prepare for this by having another local, Admin, password-protected user account in readiness so you can be confident of getting back into & in control of the computer if your normal account cannot log in or loses its Admin status.
If you choose not to then the situation can normally be resolved using the procedure in
Fix UAC prompt has greyed out or missing Yes button - TenForumsTutorials
or by restoring a system image.


All the best,
Denis

cereberus said:

Well, you will get people in both camps - those that say you should use a standard account for security as it makes it harder for somebody who hacks you online to install malware as they would not have admin rights.

If you need to do something that needs admin rights, a screen pops up that asks for you admin username and password, and then you can perform action.

On the other hand, if you do a lot that needs admin access, then using a standard account is a PITA.

In the end, you have to assess the risk versus security.

Personally, I never use a standard account but I do make regular image backups as a precaution.
However, do not take this as advice (backups are always good advice).

In the end, the safest advice is to use a standard account, particularly if you do not use admin access that frequently.

As a side issue, if you have multiple users, avoid having multiple admin users. I would not trust any of my family with an admin account on MY pcs, not because I do not trust them, but simply because they may make errors that screw up pc. Even then, I refuse to allow multiple accounts on my main laptop. Anybody who visits can use a guest account on my older laptop.

I use a standard (not user) account for routine PC use since it has greater security protection and a separate admin account for PC maintenance. A Microsoft account rather than a local account is useful for synchronisation and other features but optional.

Try3 said:

MS advice is to use a standard user account for day-to-day computing tasks.
Nevertheless, in a survey about seven years ago, the vast majority of computers were reported to have just a single [Admin] user just like yours.

There is malware that can sneak through and elevate itself behind your back if you are online whilst logged in to an Admin account even if you are not currently doing anything at an elevated level.
When I last looked into the topic, I found that setting UAC to its maximum level stopped this malware.
Change User Account Control level - TenForumsTutorials

User accounts can became corrupt.
You can prepare for this by having another local, Admin, password-protected user account in readiness so you can be confident of getting back into & in control of the computer if your normal account cannot log in or loses its Admin status.
If you choose not to then the situation can normally be resolved using the procedure in
Fix UAC prompt has greyed out or missing Yes button - TenForumsTutorials
or by restoring a system image.


All the best,
Denis

As I said, one needs to understand risks. I advised OP that if unsure, use a standard account.

If you do use the admin account as only account, regular image backups are vital.

I am prepared to take the risk as I know what the risk is and if I get screwed up, it is my own fault.

That is why I make regular image backups, and store them offline as will.

I certainly do not advocate that this is "best practice" - it just suits me personally.

cereberus said:

As I said, one needs to understand risks.

I do.

What I do not understand is what part of my post you were addressing and what point you were trying to make.

Denis

The OP asked several things:

BlackVen0m said:

Now im questioning if its the right thing to do regarding security.
Does everyone create another account but that has no admin rights and use that instead?
Is it normal to use local account as admin or is it best practice to create another local account without admin rights
how can i use my local account without admin rights if that's so?

I believe that I addressed those questions.

cereberus said:

You made lots of statements (as usual) but never answered OP's post which he should use.

Your contempt for me is unwarranted.

Denis

Try3 said:

The OP asked several things:

I believe that I addressed those questions.


Your contempt for me is unwarranted.

Denis

1. No point in discussing

2. I apologise

I have deleted my post.