> When it comes to Windows, I am in that boat, but that's 
> because people have told me that a lot of software just won't 
> run if you're not an admin.  And unlike Linux, there's no 
> 'sudo' that works all the time in Windows.  I've tried the 
> 'runas' thingy you can get off resource kit CDs, but it 
> didn't work for some things.  

The runas command is part of the operating system since Windows 2000,
actually. And, it actually does work all the time, in that it always lets
you run a process with a specific set of credentials. Unfortunately, some
software doesn't work if you're not an admin. Other software requires that
you set ACLs properly if you want to run it without being an admin (just
like Unix). Sometimes, you have to figure out what those ACLs might be.

Fortunately, though, if you want to run as a non-privileged user on Windows
XP, it is doable and practical for most knowledgeable users. I've been doing
it for quite some time, and the only real problem I've had is that it takes
me two or three steps, sometimes, to do something that I'd have previously
done in a single step.

> However, word is that Windows Vista fixes all this, so when 
> I get into that OS, I'll definitely run as a restricted user.

That's really what I was getting at. The best thing you can do to improve
user security is to run as a non-privileged user. Anything that makes this
easier is more important and more valuable than any other single thing you
can do to secure your computer.
  
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:262268
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

Reply via email to