Limited vs Administrative

well if anyone knows how to write scripts or batch files they could use
http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

I have not found any programs yet that I can not run under LUA I do have a number where I have to "run as" but as these programs are only run infrequently
I don't find that much of a problem

 

I apologise to those who know a better way to do this but

wanting to run Acronis True Image 10 under LUA I opened the acronis folder in program files and made a short cut. Draged the short cut to the quick launch bar. under properties/advanced I checked "run with different credentials".

so now if I want to run acronis I click on the icon and am prompted to enter
the admin user name and password.

No need to remember which programs run under limited and which "run as" - just make shortcuts to quick launch or the start menu.

 

Sorry, posted in error, ignore please....

 

Not sure what you mean.
Most programs are installed so the program will be usable for all accounts. Some installers have the option "All users" and "Only current user".

 

I am not sure either what you mean, do you mean you have problem with Roboform and LUA?
If so, I can report that my roboform works just fine in limited account, both in XP and Vista, firefox and IE.
In XP it worked after I changed the account to limited, and in Vista I installed it through "run as"
What sort of problem do you have?

 

I have now been logged in as a limited user for 10 days. I have done all the stuff I usually do (when I was admin) except imaging with shadowprotect in vista (but V3 will arrive shortly) I have done the imaging in my XP snapshot.

I really dont understand my previous hesitations using LUA everything work just fine, even though I find Vista LUA more reliable and user friendly than XP LUA. My system is even faster, but that might be because I dont use any sort of HIPS any more, just FW and AV. I see no reason using admin anymore. I am now officially a convert, halleluljah!

Now to the next problem: What will I do with all my spare time now that I dont need to explore new security apps
looks out and see that sun is shining outside..

 

One suggestion: Try Linux - I recommend Kubuntu

 

Wow! hold your horses... baby steps, baby steps

I still like to play the latest games. And for now I cant imagine a computing life without FDISR.
Now and then I install some distro but it always gets boring when trying to install something new. Why cant I just have one .exe file to download and click on when I want to install something, I dont mind the sudo prompt but many times linux requires me to install something else, other than the software I want to install. But I just read about some site that offered just that: a one click install (I cant find the article right now though)

And the file system is so confusing compared to Windows. I know, everything is a matter of getting use to, but for now Windows works exactly as I want it to so I dont feel the need to change.

I just dont understand the concept of linux. But I will keep on trying occasionally and when the privacy intrusions get too many in the windows world (or if windows gets one more cent more expensive!) I will migrate and use Windows as a gaming setup only. My dream is that FDISR would find a way to make linux snapshots, now that would be something.

 

PC-BSD (?)

 

Just took a very brief look at PC-BSD ( Blue Screen of death ?) and think I will stick with windows LUA. I'm sure that one day soon there will be a breakthrough
but for now I'm not going back to Office 97 or run an emulator just to be able to run windows software.

 

You're probably wise to stick with Win. I spent the last 10 months more or less, trying out literally dozens of Linux distros, the BSD variants as well, and although they are great fun to play with and tweak, there is just nothing like Windows for ease of use out of the box and polish. Linux IS great in that you'll never need any AV or other "security" apps again, for me that's a good selling point. But after spending much time with it, I just decided to stick with Win..

 

Although I liked Limited I have gone back to Admin. I have been unable to find a Reg Cleaner or cleaners that seemed able to handle Limited. Running under Admin or run as or limited seem to be 3 different things. The purpose of limited is to limit what the user can do so it seems to me that over time a limited user account will build up a load of junk which can not be removed from within limited and yet is not fully dealt with via admin ?

If anyone knows of a cleaner which is designed to run under limited I would be interested - otherwise I will probably just wait until Vista is finished.

 

CCleaner works in a limited account. But, of course, it can't clean/delete anything in folders or parts of the registry where you don't have write access. But why, for heaven's sake, is it a problem to start it with, e.g., suDown once in a while

 

I had completely forgotten about Sudown -- thanks.

In fact Crap cleaner was the one giving me a problem - showing references under limited that I could not delete wheras "run as" or admin did not pick up the references. Have just tried Crap Cleaner 3 beta and it does not pick up these references under limited.

Part of the problem is the machine I'm using is badly in need of a re-install.

thanks again - when I go back to limited I will give Sudown a go.

 

Hmm, I'm getting tired of suDown. 3 times during a few weeks the "sudo" has vanished from the context menu for installationfiles, I could still start Control Panel as admin. I had to reinstall suDown to get it back for exe-files.

 

Hm, strange. This never happened to me, and I've been using it for quite some time. Don't know what's happening here- sorry.

 

After some tests I found out it's TuneUp 2007 Regcleaner that removes suDown from the context menu.

 

Thanks, cheber, for letting us know. That's really interesting and an example that regcleaners in general are not always reliable.

 

Anyone tried to run as limited with Process Explorer ? Eg. selecting browser
r/click run as limited user ? Does it obviate the need for a logon password ?
I run admin and have not yet tried this option in Process Explorer.

Edit: From the PE help file:

 

I've never tried that (why should I in a limited account? ). But it seems that Process Explorer applies the DropMyRights approach. In XP this is an insecure approach as, e.g., an infected IE running with lower privileges would still be able to communicate with processes running with higher privileges (note: this is no longer possible in Vista). Amother drawdown is that by clicking a link, e.g., in an email or in a DOC or PDF document you would start another instance of IE with admin privileges, and most probably you wouldn't notice. A limited account is clearly the better alternative.