Cut your privileges and avoid computer trouble

WHEN you tell your computer to do something, nine times out of 10 I’ll bet it does it.

That’s because by default, a Windows user account has god-like capabilities across the entire system.

This is great when you need to make changes, install software or add a new printer. But it can also be a real problem if a virus hijacks your account and finds itself with the keys to your castle.

The “administrator privileges” that most user accounts are set up with can be both a blessing and a curse, so it makes sense to use them only when required. I’ll show you how.

All versions of Microsoft Windows (and most other operating systems) allow you to create two types of local user accounts: a “standard user” account and an “administrator” account. In my opinion every PC should have one account of each type available, even if just one person uses the computer.

Administrator

A user logged in using an account with administrator privileges can do pretty much anything on the computer. An administrator can view any file on the system, change system-wide system settings, run all installed programs, add new programs, install new hardware and change the user accounts and passwords of other users. Basically, an administrator is the big cheese.

Standard user

A standard user account is restricted to running installed programs (except any that an administrator has denied). This type of account can’t change systemwide settings, install updates or new software, and is also unable to add hardware or change the username and passwords of other users.

Convenient

Although it is convenient to be able to do almost anything you wish on your PC, unfortunately an administrator account can do a lot of damage. It’s quite easy for an administrator to accidentally delete an important system file or change a setting that renders a PC unstable or unbootable.

For a malware author, administrator privileges are the holy grail. If they can trick you into clicking something that leads to an installation, or opening an attachment that runs some nefarious commands, being logged on as an administrator means your computer won’t ask for further permission, and the malware payload can do its nasty business unhindered.

A 2015 study by UK security experts Avecto found that over three-quarters of the most dangerous flaws discovered in Microsoft’s monthly update announcements would be completely nullified if the active user was not logged in with administrator privileges.

A standard user is simply prevented by design from changing anything system-related. This is why every computer user ought to have both an administrator account and a limited account on their PC.

Use the administrator account when a task requires it, such as an update or installation, and for normal daily use simply log in with a standard user account.

A standard user can do everything required in daily computer work, such as saving documents, renaming files, opening websites etc.

If you work in a corporate environment, chances are your user account is a standard user already, as that’s considered best practice.

If more than one person uses the same PC, consider giving each user their own standard account – this is a good way to restrict the kids from installing unwanted stuff on family PCs.

It’s now far more convenient to work this way than it used to be: for many tasks, there’s no need to log off and then log on again as an administrator – Windows will simply prompt you to enter an administrator’s username and password to complete a system task such as installing an update, so you can carry on with your work and remain logged in with your standard user account.

Setting up new user accounts or amending the permissions of existing accounts isn’t difficult, but the steps vary depending on the version of Windows you use.

The procedure for Windows 10 is described at www.tinyurl. com/win10useracc with further information at www.tinyurl.com/ win10useraccguide.

For Windows 7, it’s www.tinyurl. com/win7useracc.

Work using a standard user account whenever possible – it may add a little hassle, but it also adds a sensible layer of protection against mistakes and malware problems.

It’s just another way to stay Switched On!