Advice for setting up a LUA with Vista

[encrypted520]

Hi there,

I am trying to make myself a little more security aware with Windows, after some bad experiences I don't want to have again. I have pretty much always run inside of a administrator account (with a virus scanner though...). And in my preliminary research it seems that most people (even Microsoft) recommend using a LUA. I would like to do this on my laptop.

But I am somewhat confused about how I should do this with the addition of UAC with Vista. It seems that with Vista, you essentially already are a LUA even with an adminstrator account - unless you authorize yourself temporarily. So I guess my question is, would it be beneficial to have both a LUA and administrator account if I leave UAC enabled?

I was also hoping to use RSP, but unfortunately I only have a Vista Home Premium (32-Bit) license.

Thanks

[sukarof]

Yes it is a bit confusing. You are indeed a restricted user in Vista - until you elevate with UAC for a admin specific task. When I tried LUA in Vista I cant remember that there were any UAC prompts, but maybe my memory is decading... In my machine I would find it a bit overkill to use both.
I have my self wondered if I should use LUA instead but I read here somewhere from more knowledgeable members that there are additional features if I stay in UAC mode. Something about registry being virtualized and protected mode in Internet explorer.

If you run as LUA you use another account to install stuff, in some ways maybe that is safer than elevating the current account, I really havent understood it fully yet.
With UAC you elevate your current account to admin, not the true administrator though. There are two levels of admin on Vista but it is very rare that you need to activate the true admin account. I had to do it once because a feature in my imaging app wouldnt load unless it was installed in the highest admin level, but the vendor has fixed that now.

Which way you ever choose, you´re way more protected than in an admin account every time. Personally, alternating between Linux and windows as I am I dont find UAC prompts or using another account to install stuff in windows as nerv wrecking as some do

[Kerodo]

I am thinking LUA is overkill in Vista also, I really don't think you need it, especially if running Vista x64.