| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Users Overlook XP's Non-Admin Security | |
|
||
| Time: 21:41 EST/02:41 GMT | News Source: eWeek | Posted By: Andre Da Costa | ||
|
Microsoft is sparing no expense to spread the Least-privileged User Account security gospel ahead of next year's Longhorn launch, but a little-known fact—especially among IT administrators and end users—is that the technology is already available in the Windows operating system. The LUA principle, also known as non-admin or minimum rights, is accepted within software security circles as a key to reducing damage from malicious hacker attacks, but on Windows systems, although the option is available, experts say end-user adoption remains "frighteningly low." | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 312 Last | Next |
The time now is
3:44:47 PM
ET.
Any comment problems? E-mail us |
| #1 By 20505 (216.102.144.11) at 6/23/2005 12:05:30 AM |
|
I manage a bunch of computers (>30) in my office that I built running XP Pro. I have to tell you that the set-up for each of those computers to have dual users with different security is a total pain in the rear. It probably takes an extra hour or two of set up time per machine.
So tell me what IT department that throws Dell machines pre-configured at the factory on everyone’s desktop has the time for this non-sense. There’s got to be a better way. I’m not a programmer but if MS doesn’t know this then none of them have ever built a PC to run in a place of business. |
| #2 By 7754 (65.27.90.2) at 6/23/2005 1:05:47 AM |
| How are you doing it? If you're authenticating to a domain, the Domain Users group should by default be a member of the local Users group on the machine, which has LUA-level access. Setting up apps that assume administrative rights in this scenario can be a real pain, but that's another matter entirely. XP itself is not that difficult. |
| #3 By 125 (64.69.81.234) at 6/23/2005 1:10:03 AM |
|
In a small company without an IT department that might be the case; but nearly every business I've consulted for has either already deployed a locked down infrastructure, or that was a part of the scope of work.
Allowing regular users to be local administrators usually adds to the number of help desk calls. Although the initial lock down can also cause a number of problems - working through them, not backing out, will result in a much more stable environment. There is no need for multiple accounts on each PC, once you get past a handful of machines an investment in at least a Windows Small Business Server is well worth the cost. Just my ¢ |
| #4 By 61 (65.32.175.192) at 6/23/2005 1:13:10 AM |
| The biggest problem for me are apps that want to have admin access for absolutely no reason at all, like Quickbooks. |
| #5 By 125 (64.69.81.234) at 6/23/2005 1:21:23 AM |
|
CPUGuy, using tools like Filemon and Regmon to determine exactly what permissions the application lacks when running as a LUA can 9/10 help you get it running without granting privledged access.
Those 1/10 apps that are basically unfixable are usually because the developer has coded a "if <current_user> != IsAdministrator { die miserably }" clause. Anyone still doing this deserves to get banished to a fry job at McD's. ;) |
| #6 By 32132 (206.116.136.250) at 6/23/2005 1:29:21 AM |
| When we upgraded administrative desktops to XP, we chose to make all domain users Power Users. It has worked very well. Laptops are a mixed bag at the moment. |
| #7 By 125 (64.69.81.234) at 6/23/2005 2:47:41 AM |
| Power Users is marginally better than local admin rights... its still allows the user to write to critical areas of the system that can introduce instability and allow viruses/exploits to do "real" damage to a system. |
| #8 By 61 (65.32.175.192) at 6/23/2005 10:06:27 AM |
| quux: That's QB2005. Basically, you are telling me I need to plop down a few hundred bucks to get a fix for non-admin access? |
| #9 By 61 (65.32.175.192) at 6/23/2005 3:25:24 PM |
| It is actually QB2002 Pro. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 312 Last | Next |
The time now is
3:44:47 PM
ET.
Any comment problems? E-mail us |
