Windows user accounts

There are scenarios when, in order to reduce the chances of inadvertently executing malware, it's a good idea to log in as a regular user with least privilege rights and only to log in as an administrator when you need to play God.

This is impractical, logging in and out of accounts. And let's face it, this author never bothers. Then again, seeing as this is a security book what do you expect me to say?

There are occasions when this advice is cardinal: such as when you share a machine with my wife. Let's just say that limited rights can save a lot of time. (I'll pay for that. X.)

XP user accounts

XP accounts are split between administrators and limited users. With no UAC function, even if you administer your own PC you ought normally to log in with a limited account.

Probably you will want to keep your present account as your regular limited account so, before reducing those rights, you will need to create a new administrative account.

To create a new admin account click...