Windows 10: Security practice - standard and admin - UAC

Hi,

It is a good security practice to have standard account as primary account and only use admin account when elevated access needed.

Is this the same as when i just turn on “maximum” notifications through UAC.

This means i get prompt/notification when: - Application tries to change something - I try to change a settings

submitted by /u/paranoia1sh3ll
[link] [comments]

:)

 

Difference between separate admin/standard user and admin with UAC/password prompt?

I just installed Windows 10 on a new PC and was wondering what is more secure.
Assuming UAC is enabled on the highest setting and I'm the only one using the PC.

• a separate admin and standard account who gets prompted for the admin password if he wants to perform actions that require elevation
  
• an admin account with local security policy changed to prompt for a password instead of just confirming
  

So in both cases I'm asked on a secure desktop to provide the admin password if elevated rights are needed. Is there no difference in terms of security?

 

Allow Standard User run application as admin

we have a shortcut that is calling a .exe file that requires admin rights by the UAC. I would like to be able to run the application without any admin rights or give the standard user admin rights only to this .exe. What we have done and failed.

1. Application properties >> security >> Advanced >> Permissions >> Full Control
   
   to local group A (which includes the user) and user by them self.
   
   1. Gave ownership of folder to local Group A.
      
   2. I looked in Regedit and I see the user, and they have full control for that application.
      
   3. have checked run as admin and unchecked too.
      We do not want to use /savecred because of security risk. What other steps can we take to find a solution.
      

Window 10 and on a domain

 

Using Admin Account with UAC Prompting for Credentials?

I do not know how your LSP setting compares to Control panel, User accounts, UAC settings.

If you are going to use an Admin account for general use then put Control panel, User accounts, UAC settings to its highest level.
- The claims of malware breaching security of Admin accounts relate to Control panel, User accounts, UAC settings being one level lower than max i.e. at its default level. Several malwares have apparently been shown to find a way in at this default level.
- Having Control panel, User accounts, UAC settings at its highest setting is not particularly inconvenient once your system is set up. There was a claim a few years ago that a particular malware method could find its way through this setting as well but it was, at the time, countered by Windows updates.
- Both the max & the default levels use the Secure desktop.
- The standard recommendation remains that using a Standard account for day-to-day activities is the best practice.

Denis