Apologies if this is the wrong sub-forum. I have a question on what's the best practice for when and how to use Admin privileges in Windows 10 environment:
(Option 1) Admin account does installs and upgrades of software
Admin account installs all software, including security software like Comodo, AntiVirus, anti-exe like VoodooShield, even browser like Firefox?, etc.
Smaller auto-updates should not be an issues but ... when software needs to upgrade to a newly released version, cancel such offer from Standard user, login into Admin account to perform such upgrades.
My concern is that this may result in Standard user may (by accident) try to install an upgrade which would lead to software failing half way through in incomplete state due to lack of privs.
(Option 2) Standard user does installs and upgrades via Run As...
Standard user uses Run As... for admin privs whenever software upgrade is needed.
(Option 3) Standard user does installs and upgrades by temporarily being in Admin group
Setup Admin user with its only purpose to make Standard user into Admin temporarily (by adding it to Admin group). For example, to install new software, login to Admin user, give standard user Admin privs, login back as standard user (which is now temporarily Admin), perform software install and upgrade, remove Admin privs from standard user.
In this case, Admin user is never used (when computer is online), but only for short periods of time to make Standard user into Admin for the duration of install/upgrade.
Other, better options?
Edited by hamluis, 26 February 2018 - 04:29 PM.
Moved from AV/AM to Win 10 Spt - Hamluis.