Should I use a standard account for every day and have a separate Admin account?

Most secure is to have normal usage as a "mortal" account tied to an MS account and then a local admin account with really heavy password and not having the Admin or Administrator user name. Also the drive should be encrypted. The admin account is ONLY used for setting up and configuring the device, the other account is for using it.

Once setup properly, you'll pretty much never need the Admin account except during "emergency".

Every more secure, use Linux and run games with Wine or other utility. Oh, oh I said the forbidden L word. I should wash my mouth with soap...

SlicEnDicE said:

Most secure is to have normal usage as a "mortal" account tied to an MS account and then a local admin account with really heavy password and not having the Admin or Administrator user name. Also the drive should be encrypted. The admin account is ONLY used for setting up and configuring the device, the other account is for using it.

Once setup properly, you'll pretty much never need the Admin account except during "emergency".

Click to expand...

I need to elevate every time I run a program like Revo Uninstaller, don't you?

I need admin right to run older applications that save data in their installation folder.

spapakons said:

I need admin right to run older applications that save data in their installation folder.

Click to expand...

Older 32 bit applications will normally run virtualised, which should silently fix that problem. Alternatively, you could ease the permissions. Better would be to use the Application Compatibility Toolkit to fix whatever issues arose. Luabuglight is a really good tool for finding the problems and suggestions to fix them. (Apologies for no links, but web search should find both)

kelper said:

I am certain I know far more than the average 13 year old about computers.

Click to expand...

Yep - 100% agree. Average 13 year olds only know basics taught at school.

It is only adults who have never bothered to learn anything about computers who spout this myth.

These same people used to put around myth that children know how to programme a video recorder better than adults.

cereberus said:

Yep - 100% agree. Average 13 year olds only know basics taught at school.

It is only adults who have never bothered to learn anything about computers who spout this myth.

These same people used to put around myth that children know how to programme a video recorder better than adults.

Click to expand...

That reminds me when we bought our first VCR in the 80's. My father was reading the manual how to operate it and I just said "the buttons are the same as my cassette recorder", so I pressed PLAY and it started playing the tape! I was less than 8 years old! My father was amazed.

kelper said:

I need to elevate every time I run a program like Revo Uninstaller, don't you?

Click to expand...

I don't run RU ever and neither should you have to if everything is setup properly.

SlicEnDicE said:

I don't run RU ever and neither should you have to if everything is setup properly.

Click to expand...

Why? It's popular with members. I have the paid version.

I use it to remove all traces of and application I want to uninstall. Most applications deliberately leave data behind when uninstalled.

spapakons said:

I would like if you could run an application or game with admin rights and after you confirm is safe, you could mark it so you won't be asked again. Unless of course the executable is modified so you must confirm again. I would have no problem using UAC then, but granting access all the time for the same applications I use everyday is not very convenient, so I turn off UAC.

Click to expand...

You could do this with something like BeyondTrust’s Power Broker, but those things are usually not marketed to home users. Maybe something like RunAsRob would be suitable.

Like I said, I am the only one who uses my PC, yet, so I know what I am doing and don't have to be too restricted. In the future I will consider locking it if I still have the same computer.

kelper said:

Why? It's popular with members. I have the paid version.

Click to expand...

Because of the reason I just said. For further clarification...I use my computer to do work, not to tinker with Windows. Never ever have I had to uninstall anything once everything is setup the way I need it.

Not everybody uses their computer the same way. What if you want to test a new application and then you decide it is not suitable for your task? You have to remove it. Also gamers might want to uninstall old games they don't play anymore to make space for installing new games.

Will Revo Uninstaller uninstall itself?

spapakons said:

Not everybody uses their computer the same way. What if you want to test a new application and then you decide it is not suitable for your task? You have to remove it. Also gamers might want to uninstall old games they don't play anymore to make space for installing new games.

Click to expand...

Well this is clear...everybody have their right to use their computers however they want to.

I let Steam handle my games...and if it leaves one bit and bob here and there, is a non-issue for me since it's in the size of bytes, not gigabytes. If I think something is off, I simply push an image of everything I need, over the current instance and it's brand new again and up and running within minutes.

I don't test apps, or if I really need to do that, I fist do it in a VM when possible. But even that happens maybe every 5 years...

The possibility is there for security reasons.
But the possibility is there for 1 and one reason only; Single user or Multiple users.

In a single user condition and multiple accounts; What's the reason for having multiple accounts? Don't you trust yourself? Afraid of doing things that might damage or wreak havoc on your PC? ("I don't know what I am doing scenario")

Standard Windows has some mechanisms onboard in case of multiple user environments in place to make separations; 1 user can not get to the data of an other user. (can be changed by giving the other user permissions to access his data) The Administrator (It's account is disabled together with the Default user and guest) belongs to the administrator group and have elevated rights. The user who install Windows belongs standard to the Administrator group.(One rank below the higher ones; system and trustedinstaller. a little like the root user on Linux but with the exception; It's password remains a secret.) All the other users are a part of the user group. Policy's dictate what each person Admin, User1, User2 can or can't do. I case of multiple users the Administrator role is a heavier one. Can install software and determines which user may us it. If a Admin installs software it can determine you can use this software and even restrict it to a single person. The Admin can start anything. If a user installs software; he is the only one who can start it but not an other user. The admin can alter policy's (a complete unaware phenomena for normal users) to restrict or to grant certain actions. A lot is in basis already there but you must have a bit more knowledge than an average user to secure things.

I think your question is more related to your concern of your data and who might can get acces to your data if your laptop is stolen. A single account is enough here if you are the only user of the laptop. No need to have 2 account which you can use. There are other ways. Make sure that bitlocker is turned on for all your disks. It will encrypt your data with a key AND!! it its wise to export this key and safeguard it on a separate secure place. If you forget this key and it's asking for it... then your data is toast!!! Furthermore it is important to have a good antivirus software who can guard you from outside attacks including zero day and rootkits attacks if up to date. (installing a keylogger and retrieve it to on a later point of time and breaking in without being aware of things) You have access to your laptop by means of a biometrics device. (fingerprint) The most secure way to safeguard your laptop. No more 12345678. If someone steals your laptop; nobody will return and hack your thumb off to get access to your laptop. Some laptops (like HP and other brands) also have a DriveLock mechanism. You can turn this on: but be aware; if forgotten? Nobody can access the disk anymore. The lock is on the disk itself. You can take it out of your laptop and connect it to an other system. Without that password nobody can access the drive anymore. And to prevent many tries one after the other; After 3 time the wrong password; it's stops listening or trying. You have to turn the power off and back on again to give it an other try.

Turn your attention also to external devices. The first thing is to change your password inside your modem. This modem has also many policy's in place to safeguard your network from an outside attacks. Not changing it is like leaving your house with the front door wide open. If your are using WiFi make sure it's using WPA2 and using a very difficult password. You have to enter it once in case of a new device. Mobile phone, printer etc.
Further more there is a ton of software available to beef up your security. It's important to do the things mentioned earlier. And UAC? Leave it on. Even if you have it turned on.. Yes those question each time a piece of software is starting that needs a bit more rights to do it's work. Live with it. It's an annoying message but a beter one than turning it off. Then your system is more vulnerable then you expected. It's like inviting a burglar into your house.

@hader
who are you addressing?

Also hackers usually targeted businesses and other groups. Hardly they care about an average home computer, unless you are not careful and install malware. You increase the chance to be attacked, but that doesn't mean you will. If you realise the security risk and fix it as soon as possible, you have a great chance to avoid damage to your data.

spapakons said:

As Daffy Duck would say "Shoot him! Shoot him now!"

When my son comes at an age he can use the computer alone (he just turned 5, he cannot even read yet), I will put a password to lock my account and make sure I lock the computer when I am away. He should be a hacker to gain access... If he does gain access, I would be proud of his skills but scold him nevertheless...

Click to expand...

Admittedly, I was proud of my daughter's skill at that age but felt a little slighted when she said, "Dad, you have so much memory and well, you weren't really using it..." I bought her the parts to build her own PC that same year and I was quite surprised at how well she did. The kid's a natural.