[vox] Exploits for non-admin accounts in Windows?

[Bob Kehr]

Please don't flame me for quoting MS.   :)

Me thinks the claims about not running as admin are a bit overstated. 
*Never* need to worry about this stuff? Hardly. At the same time, not 
running as admin on a networked 'doze computer is commonly held to 
reduce your exposure. Here's a running blog about [not]running as admin 
from an MS guy.

http://blogs.msdn.com/aaron_margosis/archive/2004/06/17/157962.aspx

He even has a paragraph on why you shouldn't log on as admin if you are 
a developer.

The Windows Help and Support files installed with 2K & XP have an 
article on "Why you should not run your computer as an administrator".

...and if you Google for "don't use Windows admin account" or something 
like that, you'll find plenty more. Here are a couple.

http://www.findarticles.com/p/articles/mi_zdext/is_200310/ai_ziff108477
http://www.pluralsight.com/keith/book/html/howto_runasnonadmin.html

-Bob


Richard Crawford wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Yes, it's a Windoze question, but I'm trying to make a point with
> someone who wants to build me a crippled computer for my development
> workstation.
> 
> I was told today by the IT manager in our office that if you don't run
> your Windows computer as an administrator, you never need to worry about
> adware and spyware and viruses.  This seems like an awfully fishy claim
> to me, but maybe I'm just over-paranoid.  Am I?
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (Cygwin)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> 
> iD8DBQFCQlDa9Of2dLF39qURAiUIAJ9kndIXRV7Xwy4dg06xnV6w0D+0EwCgnYaw
> SSblmAFaySWMxTD8LHP9ooQ=
> =xNSt
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> vox mailing list
> vox at lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox