When Using LUA, Should Admin Account Have Password?

Discussion in 'other security issues & news' started by Throwawayaccount12, Nov 13, 2013.

Thread Status:
Not open for further replies.
  1. Throwawayaccount12

    Throwawayaccount12 Registered Member

    Joined:
    Nov 13, 2013
    Posts:
    23
    On Windows 7 and Windows 8 when usually using a standard account and being the only person with physical access to the computer, is security increased when the admin account is password protected?
     
  2. Jryder54

    Jryder54 Registered Member

    Joined:
    Sep 3, 2013
    Posts:
    214
    Short answer: yes. Im sure somebody can explain it in more detail. (im on my phone now so I don't want to type it)
     
  3. Jryder54

    Jryder54 Registered Member

    Joined:
    Sep 3, 2013
    Posts:
    214
    The most secure way to elevate would be to sign out (using fast user switch) then sign in to the administrator account. This way you could probably get away with not using a password. If using over the shoulder elevation or UAC prompt for credentials then I would definitely suggest using a password as malware would have an easier time determining the token used for elevation (which isn't very hard AFAIK), which is why I suggest the first option to elevate.
     
  4. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,063
    Location:
    Canada
  5. Jryder54

    Jryder54 Registered Member

    Joined:
    Sep 3, 2013
    Posts:
    214
    Thanks! I was looking for that link in my bookmarks for him/her :thumb:
     
  6. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,063
    Location:
    Canada
    You're welcome :)
     
  7. Throwawayaccount12

    Throwawayaccount12 Registered Member

    Joined:
    Nov 13, 2013
    Posts:
    23
    Thank you for the replies.

    For persons wondering whether computer security is improved when the standard account has a password, here is mechBgon's answer.
     
    Last edited: Nov 14, 2013
  8. Jryder54

    Jryder54 Registered Member

    Joined:
    Sep 3, 2013
    Posts:
    214
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.