Since I install and uninstall, and play with software, make changes, and images. It would be a real hassle to have a standard account, and have to switch back and forth to an admin account. So if you're a single user, can't you safely just use your admin account, that was created when you did a clean install. Or have I totally misunderstood? If that is the case do I just switch my single admin account, to a standard account, thus having no admin accounts, or create a standard account to go with my admin account. What's best.
I use my computer alone also but still use 2 accounts - admin and SUA. Since I don't do admin stuff all the time it's not such big hassle. Though using one account is more convenient. Yes, IMO you can safely use admin account created during OS install. You can use separate accounts if you want to use OSs' built in restrictions and by this preventing possible system compromise. It's only one layer of security setup which you can employ if you wish. Using separate SUA is more secure than using AUC with UAC because of UAC bypasses. If you decide to do so you will have to create separate SUA. IDK if your OS allows to downgrade the only AUC to SUA, but I know that in previous Windows versions you could get in big trouble trying to do so. If you remove only AUC, how would you perform admin tasks?
You can do exactly so many accounts as you want if you are an administrator. You do not have to create a standad user account(s), but you can, if you think you need them. You also do not have to make any guest accounts unless you need them, but you can do them if you want. You do not need to create an account that has full administrator access rights to the whole host, but you can also make and run an account with partial administrator privileges if you want and need it. You may do also more than one administraor accounts if You need them etc. So, do what You want and what You need if You're the administrator, but remember, if You make at least two administrator acounts and they all have all privileges, then any of them can delete or change Your account at any time. So, think by yourself what You need and what You do. If You are really the only user, then is no needs to make different account, if You don't need it for example for testing something. You can always make new account, if it is needed and there is enough space, even if Your own account is blocked or won't start no more.
If you use the built-in Win default limited admin account, I strongly recommend you set your UAC level to maximum level. This will protect you against most of the malware that tries to run with elevated privileges. This of course is not bullet-proof but offers more protection than running with the Win default UAC setting.
Everything has been covered above, I would just add that there is no need to be sucked down into the vortex of fear on computer security. At a minimum if you have an updated Win 10, a recently backed up version of your C drive and data, and are aware of avoiding infection, you are 99 percent of the way there.
+1 and I will add using a passworded UAC and blocking elevation of unsigned processes will prevent most malware. Personally i use SUA for daily usage, my admin account is used only for admin stuff.
Correct, you can run as admin with or without UAC. I have disabled it because it's pretty much useless to me. If your AV says some app installer is clean you will need to give it admin rights anyway, so no need for some dumb UAC alert. Some apps also require admin access in order to work think of Process Explorer, so every time you launch it you will see a dumb UAC alert.
The point of using UAC is to be alerted in case of unwanted elevation (in a barebone OS), not voluntary ones. Like a movement sensor is supposed to detect intrusion in your house when you are not there.
Don't start with me guest. In order to protect you from unwanted elevation, you will have to endure a whole lot of "expected elevations", and this is not worth it to me.
im so tempted LOL (note the "barebone OS", specifically mentioned for you ) if you are on admin account, yes, if on SUA, a lot less.
Rod- You did not tell us what OS you are using! There is a very big difference between UAC in Win10 and UAC on lesser builds. But even so, most malware laugh at UAC since most will not require elevation to work. As far as Accounts are concerned, normally a Standard User Account is the best way to go. But even this can be bypassed. Point being, whether or not you use SUA and/or UAC, if Ophelia wants to get you you gonna be got...