Other ways to reduce privileges besides LUA

What are other ways to reduce privileges besides LUA?

Thanks for sharing your experience and expertise.

 

Anti Executables would qualify, no?

Also DefenseWall and Geswall, policy restriction HIPS.

Run Safer in OA.

DropMyRights

 

For my browsers,and internet facing apllications I force them in Sandboxie sandboxs with the drop my rights featue enabled.

Before that,I in stalled http://cybercoyote.org/security/drop.shtml

"Drop my rights" It has this kind "hackish" feel about setting it up,but it seemed to work well enough.

rat

 

This one is my favorite
https://www.wilderssecurity.com/showpost.php?p=1603237&postcount=1

not actually reduces privileges but... oh well just try it out.

It's good for Chrome users XD

 

SetSafer

Links from http://www.respawned.co.uk/forums/showthread.php?t=634

Installer: http://msdn2.microsoft.com/en-us/library/ms972802.aspx
Required Update: http://blogs.msdn.com/michael_howard/archive/2006/05/07/592136.aspx

 

Access Control Lists

FajoXPSE ( http://www.fajo.de/portal/index.php?lang=en&option=content&task=view&id=6&Itemid=47 ) adds the security tab to right click properties. You can remove on a per directory/file basis access of Users of for instance startup directory, host file, task manager directory etc.

Vista and Windows home versions have this functionality be default.


Regedit provides simular functionality to remove access on Registry. For instance on startup registry keys in User space. Be sure to only remove add value, add subkey and delete, no other rights.

Regards Kees