Gł - Windows > XP + Security: Temporary Administration Rights

By now anyone who's been using Windows XP should have heard that using their computer for regular activities on an account with administrator privileges is a security risk. If you haven't heard that before, well, you have now.

Unfortunately most people don't take advantage of the advice to run in a limited account, but instead continue to use their admin account for daily tasks such as surfing the web, emailing, or any general daily usage tasks — which is not a good practice. While it is true that it's not always easy to use a limited account we end-users should probably consider the fact that running with administrator privileges means that the applications we're using are given complete access to the operating system. Using a limited account will assist in preventing the installation of unwanted applications — such as spyware, adware, browser helper objects, viruses, etc (see Malware Cleaners and Repair). As well, using a limited account will prevent certain actions from making system wide changes like adding items to the registry.

For the most part you can get by with a limited user account. In theory, all users should only have the absolute minimal rights needed in order to ensure safety while achieving functionality. With that being said, honestly, few people manage to get even games working while using limited user accounts. Many other things require such privileges — not to mention that in order to update your PC you need admin rights. To perform at any level of manageability one will require at least occasional use of an account with administration rights.

For those times that you do need to access something that requires administrator privileges, and you do not want to go to the trouble of switching accounts, the following method should work fine for you:

Locate the application that you need to have admin rights to use
Right-click on the application or the shortcut to the application
Select "Run as..." from that menu
Select "The following user:"
Enter in the proper credentials
Click OK

This setting is not permanent — nor will it remember your password, which may make an extra step, but far more secure.

OS: XP > Security
Date: 12/15/05