Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Best Practice: proper use of Admin priviledges for upgrades


  • Please log in to reply
No replies to this topic

#1 Learning123

Learning123

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:10:06 PM

Posted 26 February 2018 - 03:50 PM

Apologies if this is the wrong sub-forum. I have a question on what's the best practice for when and how to use Admin privileges in Windows 10 environment:

 

(Option 1) Admin account does installs and upgrades of software

 

Admin account installs all software, including security software like Comodo, AntiVirus, anti-exe like VoodooShield, even browser like Firefox?, etc.

 

Smaller auto-updates should not be an issues but ... when software needs to upgrade to a newly released version, cancel such offer from Standard user, login into Admin account to perform such upgrades.

 

My concern is that this may result in Standard user may (by accident) try to install an upgrade which would lead to software failing half way through in incomplete state due to lack of privs.

 

(Option 2) Standard user does installs and upgrades via Run As...

 

Standard user uses Run As... for admin privs whenever software upgrade is needed.

 

(Option 3) Standard user does installs and upgrades by temporarily being in Admin group

 

Setup Admin user with its only purpose to make Standard user into Admin temporarily (by adding it to Admin group). For example, to install new software, login to Admin user, give standard user Admin privs, login back as standard user (which is now temporarily Admin), perform software install and upgrade, remove Admin privs from standard user.

 

In this case, Admin user is never used (when computer is online), but only for short periods of time to make Standard user into Admin for the duration of install/upgrade.

 

Other, better options?

 

Thanks!


Edited by hamluis, 26 February 2018 - 04:29 PM.
Moved from AV/AM to Win 10 Spt - Hamluis.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users