Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

User/Admin account question


  • Please log in to reply
5 replies to this topic

#1 alwaysclueless

alwaysclueless

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:54 PM

Posted 14 June 2013 - 07:28 PM

Hi guys, i have recently begun to use a user account instead of running full Admin and my question is should the two separate accounts be treated separately when it comes to security,  and do most keep one account minimal with just a few programs or to just surf and the elevated one for something else.

 

I am the only user  but am confused about security.  I started with just an admin account and kept everything up to date and ran scans regularly etc... but i am finding i'm doing the exact same thing with the user account.

 

 When i update one and run scans i should automatically do the same for the admin account?  Windows update for example, i need to check for updates with both accounts?

 

Sorry for the confusion and thanks


Edited by alwaysclueless, 14 June 2013 - 07:28 PM.


BC AdBot (Login to Remove)

 


#2 corneto_20

corneto_20

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:54 AM

Posted 14 June 2013 - 08:46 PM

Hi,
 

1. Click the Windows Start button and then click Control Panel. The Control Panel appears.

2. Select Large icons on the right-hand side under the View by menu (if you are not already in Large icons view). This will display the Control Panel features as icons. Locate and click on  User Accounts.
3. The User Accounts panel appears
4. Click the Change User Accounts Control Settings option. The User Accounts Control Settings dialog box appears.
5. Windows 7 UAC settings have a slider to change between different notification levels. You can choose one from the following four options:
Never notify
Notify me only when programs try to make changes to my computer (do not dim my desktop)
Notify me only when programs try to make changes to my computer
Always notify
6. If the need arises to turn off the UAC to troubleshoot ACT! related issues, a general guideline is to change the setting to Never Notify, which essentially disables the UAC feature.

Note: A reboot of the computer will be required after choosing this setting.

You  can also change a user's account type, Follow these steps:

If your computer is in a domain:

1. Open User Accounts by clicking the Start button , clicking Control Panel, clicking User Accounts, clicking User Accounts again, and then clicking Manage User Accounts.  If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
2. On the Users tab, under Users for this computer, click the user account name, and then click Properties.
3. On the Group Membership tab, click the group you want the account to be in, click OK, and then click OK again.
 
 If your computer is in a workgroup:
 
1. Open User Accounts by clicking the Start button , clicking Control Panel, clicking User Accounts and Family Safety, clicking User Accounts, and then clicking Manage another account.  If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
2. Click the account you want to change, and then click Change the account type.
3. Select the account type you want, and then click Change Account Type.
 
For more information on user accounts, please logon to:
 
http://windows.microsoft.com/en-US/Windows7/What-is-an-administrator-account
http://windows.microsoft.com/en-us/windows7/Change-a-users-account-type
http://windows.microsoft.com/en-US/windows7/How-do-I-get-started-with-my-computer



#3 sflatechguy

sflatechguy

  • BC Advisor
  • 2,200 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:54 PM

Posted 14 June 2013 - 09:37 PM

What you're describing is actually good practice. You should only use the local admin account for things like installing software. By using the regular user account for Web surfing and working with files, it makes it harder for malware to run with elevated (that is, admin) privileges. Things like security scans, updates and antivirus signature files are applied to the machine, regardless of who is logged in. You may be prompted to enter your admin credentials for some updates and downloads -- but that's the whole idea.

And to answer your question, you only need to do it once. Kudos on setting it up that way. That's actually how you're supposed to do it, even if you aren't connected to a domain or a workgroup and are just using the computer as a standalone.

And I should add it's not good practice to disable the UAC. Leave it on, and only enter the admin credentials when prompted and if you're sure you want to install whatever is trying to install.


Edited by sflatechguy, 14 June 2013 - 09:40 PM.


#4 alwaysclueless

alwaysclueless
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:54 PM

Posted 14 June 2013 - 10:10 PM

Thanks a lot to both of you guys, very much appreciated.



#5 alwaysclueless

alwaysclueless
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:54 PM

Posted 16 June 2013 - 03:17 AM

Ok,  is there a way for me to be able to run scans and update Malwarebytes in the user account without needing to use the Admin account everytime?  I could understand downloading a new program needing to use Admin but just to run scans and update, seems like a real pain.

 

Thanks guys

 

 

 

 

 

 

Oh, one last question (i hope)  i need to enter a password just to get to the page that gives me a choice to enter another password for my user and Admin accounts ,  i  have always been the one user of this computer and always will be,  how can i get rid of this first one just to get to the selection page to enter another one? is it really necessary.

 

Maybe the first one is a master password , don't know if i need that either" HELP".


Edited by alwaysclueless, 16 June 2013 - 04:38 AM.


#6 sflatechguy

sflatechguy

  • BC Advisor
  • 2,200 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:54 PM

Posted 16 June 2013 - 11:13 AM

Overall, that's not a bad idea -- the more layers of security, the better. Yes it's a pain to remember all those passwords. You may want to write them down in one place and make sure it's secured and locked. But from a malware perspective, again, it makes it harder for viruses to run with escalated privileges.

As for scans, again, those are applied to the machines, not the account. You should be able to run those with the user account. If it's prompting you for the admin password, yeah, that's a bit of a pain but it's no bad thing.

Hope that answers your questions.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users