local admin rights – the myth

2 Apr

from this link:
http://mywebpages.comcast.net/SupportCD/XPMyths.html

http://support.microsoft.com/default.aspx?scid=kb;en-us;307091

http://www.windowsitpro.com/Article/ArticleID/42944/42944.html

Myth – “Limited User Accounts are a Realistic Security Solution.”

Reality – “On a nonmanaged XP machine today, it isn’t realistic to run without Administrator privileges. Unlike UNIX and UNIX-like systems such as Linux and Apple Computer’s Mac OS X, Windows isn’t very useable with a non-Administrator account, largely because so many applications are ignorant of rights and were written to work only with Administrator-level accounts. This is particularly problematic in a home environment, in which XP Home Edition’s crippled Limited Account type, designed for children and less-technical users, is virtually useless. In Windows XP, the lame Run As option, virtually hidden under a right-click menu that typical users will never know about, is a poor substitute.” – Source

“After you log on to a computer by using a Limited User Account, you may observe one or more of the following behaviors when you try to use a program that is not expressly designed for Windows XP.

– The program does not run.
– The program stops responding (hangs).
– You receive notification of run-time error 7 or run-time error 3446.
– The program does not recognize that a CD-ROM is in the CD-ROM drive.
– The program does not allow you to save files.
– The program does not allow you to open files.
– The program does not allow you to edit files.
– The program displays a blank error message.
– You cannot remove the program.
– You cannot open the Help file.

This behavior can occur because the Limited User Account prevents older programs from performing certain functions. Microsoft lists over 189 applications in this article alone that do not work right on a Limited User Account.” – Source