Windows 8 and 8.1 Forums


Running without Admin rights to mitigate vulnerabilities

  1. #1


    Posts : 959
    Windows 8.1, 10

    Running without Admin rights to mitigate vulnerabilities


    Summary: By running users under standard, non-admin accounts, IT can prevent a very high percentage of Microsoft vulnerabilities from being exploited.
    Link to ZDNet story:
    Admin rights key to mitigating vulnerabilities, study shows | ZDNet

    I was interested to see this, because I set up 2 accounts on my home laptop in the days of XP, one with Admin rights (but which I only use to install stuff or run Backups) and one non-Admin account that I use day-to-day.

    I still do the same in Windows 8, but I have wondered if it was still worth it. According to this study it is.

    The only catch is that Avecto, who produced the study, do have an interest in persuading people not to run as Admin all the time, using their products, so they're not exactly independent.
    Avecto is a leader in Windows privilege management, helping organizations to deploy secure and compliant desktops and servers.
    But given it's pretty easy to set up a Standard account and run without Admin rights most of the time, I'll keep doing it...

      My System SpecsSystem Spec

  2. #2


    Posts : 87
    Windows 7 Pro 64


    why would you need to buy a software to use a separate account? I've been using Admin and user account on my personal W7 Pcs forever without the need of software.

    I guess there is a commercial software for everything, everyday a sucker is born.....

    Only If I install soemthing while logged in as user, I'm asked to enter the Admin password. No big deal.
      My System SpecsSystem Spec

  3. #3


    Posts : 1,875
    Windows 10 Pro Prieview x64


    I don't think he said you had to buy anything. Sure it would be a good idea - I (almost) never sign on as root on my Mac or CentOS but for some reason I always want admin for windows. Look at all the UAC complaints here - I'm not alone. Why - I'm not sure really. As long as you don't make your Admin password "Admin" it is certainly more secure.
      My System SpecsSystem Spec

  4. #4


    Posts : 959
    Windows 8.1, 10


    Quote Originally Posted by HerrKaLeun View Post
    why would you need to buy a software to use a separate account? I've been using Admin and user account on my personal W7 Pcs forever without the need of software.
    I don't know, to be honest. I imagine the company who did the survey are selling some product for the corporate world; maybe where you occasionally need Admin rights but don't want to give people the password.

    For home use, I do exactly the same as you.

    Quote Originally Posted by adamf View Post
    Sure it would be a good idea - I (almost) never sign on as root on my Mac or CentOS but for some reason I always want admin for windows. Look at all the UAC complaints here - I'm not alone. Why - I'm not sure really. As long as you don't make your Admin password "Admin" it is certainly more secure.
    I find that even when I'm logged in as non-Admin, UAC asks me for Admin login and password whenever I want to do something that needs it anyway, so it's not much extra hassle.

    The advantage is that if my favourite website was hacked with something that sent me an unpatched Windows vulnerability, if I'm not logged in as Admin, the hope is the attack would be less likely to succeed (or at least a UAC would pop up so I'd know something was wrong).
      My System SpecsSystem Spec

  5. #5


    I got as far as the page where I had to give details of my name - surname - occupation - business name and email. There I stopped. I investigated avecto and could see that they do, as David suggests, sell security software. The biggest risk here is contra there own advert. You are exposing yourself to future spam email!
      My System SpecsSystem Spec

  6. #6


    Harrisonburg, Va.
    Posts : 10,488
    Windows 8.1.1 Pro with Media Center


    This way to the Egress>>>>
      My System SpecsSystem Spec

  7. #7


    Posts : 1,875
    Windows 10 Pro Prieview x64


    Quote Originally Posted by David Bailey View Post
    This way to the Egress>>>>
    Isn't that a female swan?
      My System SpecsSystem Spec

  8. #8


    Harrisonburg, Va.
    Posts : 10,488
    Windows 8.1.1 Pro with Media Center


    Quote Originally Posted by adamf View Post
    Quote Originally Posted by David Bailey View Post
    This way to the Egress>>>>
    Isn't that a female swan?
    P. T. Barnum>>>

    At one point, Barnum noticed that people were lingering too long at his exhibits. He posted signs indicating "This Way to the Egress". Not knowing that "Egress" was another word for "Exit", people followed the signs to what they assumed was a fascinating exhibit...and ended up outside.[9]

    Barnum's American Museum - Wikipedia, the free encyclopedia

    AKA>>> Deception
      My System SpecsSystem Spec

  9. #9


    Posts : 1,875
    Windows 10 Pro Prieview x64


    Only joking sir - Terry Pratchett copied it in "A Hat Full of Sky" - it amused me.
      My System SpecsSystem Spec

  10. #10


    Harrisonburg, Va.
    Posts : 10,488
    Windows 8.1.1 Pro with Media Center


    Quote Originally Posted by adamf View Post
    Only joking sir
    I knew that.

    Just thought I would reference the history behind it.
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
Running without Admin rights to mitigate vulnerabilities
Related Threads
Admin rights in 8.1 in General Support
Looking to make changes to my host file. Windows saying I need admin rights to make the chnage. However the account I have has admin rights! I have checked in control pannel manage accounts. Any ideas on how to fix this? Just a new laptop.
Okay, I'm very sure I set my account to be Admin, there's only one account anyway, yet W8 requests admin permission to do everything. All because of this, I can't change the .ini of a game, I can't update Neverwinter Nights using the updater, I can't save .inis or .txts anywhere except...
Solved I needed admin rights using built-in admin account in User Accounts and Family Safety
Using Win 8.1 First off, the account I'am signed on with is listed as admin type account. It's the one I had to enter my windows account email. Since installing the new MalwareBytes 2.0 program (which went in without any problem) it put an shortcut icon on desktop. I tried too move the icon...
Admin rights problem in User Accounts and Family Safety
I have windows 8. I recently restored my laptop to factory settings. I entered my microsoft account to make a user, and this was an admin. I created another user, went to control panel, and made my first account standard, and my new account admin. The account I changed to standard still acts...
No more admin rights in win8 in General Support
Since yesterday it seems that I don't have any control over my windows(8). When I want to open a certain program Windows gives me the following error message: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item". When I...
Solved Need help with admin rights. in User Accounts and Family Safety
I only have 1 account and it doesn't have administrator rights. Is there any way I can give it admin rights?
I have two Windows VMs, one Windows 7 and the other Windows 8. On both machines there is an account with administrative rights. On the Windows 7 VM if I run a DOS cmd window it is run with with administrative rights. However, on the Windows 8 VM the DOS cmd window has NO administrative rights. ...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook