Acmlm's Board - I2 Archive - Hardware/Software - Do you browse the web using an admin account or a restricted one?
| User | Post |
Banedon
Posts: 658/1408 |
I use a restricted account for just about everything...when I need to be root, I'll just "su" and enter the password. |
Karadur
Posts: 73/1192 |
I would've done something related to copying the music folder quite a while ago, except for one small thing: there's almost 8Gb of music in there (half of that is music from game soundtracks)  I used to let them stay on my account so they could listen to music or whatever, but since said incident that happened over the weekend, I've changed my thinking on that.
I've used the 'Run As...' option for Winamp on my brother's account a couple times, since it would let him listen to music that was stored under my profile. I might just move the music he wants to listen to over to the shared folder or somewhere in his profile. I find I don't listen to half of it anymore anyways, so I might be able to just delete the stuff nobody wants.
Why couldn't they have made some sort of tool that allows you to create custom user levels? It'd save all this hassle. |
Surlent
Posts: 686/1077 |
Originally posted by Karadur
[...]
That's the only problem with everyone else being on limited accounts, is that my brother likes to listen to music, but all the music on the computer is in a folder on my desktop, so only I can access it.
What about copying the music folder to your sister's profile ?
An admin can access all limited accounts anyway, if not, simply copy it into the Shared Documents folder. So you won't need to get her admin powers just for listening music. Only Winamp Playlists and shortcuts needed to be updated only once.
My sister wants to play some game that she downloads, but she can't install it, so I have to install it with my rights, and lo, the game won't run under a limited profile
Try to use the "Run As ..." option when you right-click an executable file in your sister's limited account. The other checkbox prompts you to use another account (don't worry, the password stays invisible and the chars are replaced by stars/dots) - it does not work for every program, but mostly the program simply starts in context of the user set up in Run As ... - it might be worth a shot  |
Karadur
Posts: 70/1192 |
Originally posted by Colin
I don't let anyone use my baby, so the answer's kinda obvious. Me only need one profile.
Heh. If I had a choice, nobody else would use this computer. Of course, that's not possible, since my Dad bought it, but still, I'd sit here and watch what each and everyone did when they go on this computer. I went away for a night last weekend, and I came back to find pr0n URLs in the address list  I installed a keylogger shortly after that, and I didn't say it, but I dare whoever looked at what they did to do it again.
That's the only problem with everyone else being on limited accounts, is that my brother likes to listen to music, but all the music on the computer is in a folder on my desktop, so only I can access it. My sister wants to play some game that she downloads, but she can't install it, so I have to install it with my rights, and lo, the game won't run under a limited profile My Dad's the only one that's good for the computer, since he doesn't use it too often, and even then it's only to check / send email or some other short thing on the internet. |
Colin
Posts: 5170/11302 |
I don't let anyone use my baby, so the answer's kinda obvious. Me only need one profile. |
Rydain
Posts: 308/738 |
I'm yet another Linux person who does virtually everything from a normal user account and just uses su to get root within a terminal when it is necessary to install something, configure something, change file permissions, etc. |
Boom.dk
Posts: 216/392 |
Originally posted by HyperHacker
Quotas are nice because they can warn you when you're using up too much space. It sucks that you can't set it to unlimited space with a warning, but I just set it to a coupla billion GB (6 EB) and it works.
I don't believe the FAT32 file system supports quotas... So there you go.
I'm always admin. Mainly because I change something every time I use my computer. Even back when I used IE as browser, I was always admin. I don't know how but I just have the ability to keep my PC clean nomatter what happens. I haven't had an anti-virus program since I had Windows 98. |
Prier
Posts: 4197/8392 |
My comp, my rules. Simple as that.
Personally, I don't want my sister fscking with my comp with her DLs or something every time I go off to class, so it's a nice addition. |
Cellar Dweller
Posts: 174/269 |
I almost never browse the web as root, and I rarely download random software I encounter. If I need root powers, I just bring up an xterm and use the su command to get a root prompt on said xterm, or I switch to the first virtual console which I tend to leave logged in as root.
If I need to install software, I will first look for it in the Debian package archive. If I need software that is not in the Debian archive, I prefer to download the source code, compile it myself, and then run the compiled program from wherever the compilation script places the binaries. When I do the latter, I do not need to log in as root, because the software was not installed.
Originally posted by HyperHacker
Speaking of which, isn't there a way to create an account as System, like being able to modify any file and such? Supposedly there's an option but I can't find it.  Of course I wouldn't use it all the time, that's rather dangerous.
I know of no cut and dried instructions, but these pages might help:
http://www.kuro5hin.org/story/2004/7/4/7570/05276
http://neworder.box.sk/files/nullak_ntsecurity/index.php
Hacking the end off of the latter URL leads to an interesting site. |
Lord Rahl
Posts: 676/792 |
Seeing as I'm the only person who uses this computer now, my sisters are never here and I'm tossing their accounts, I've forced to have an admin account. Which is fine. |
FreeDOS
Posts: 876/1657 |
There was a tool in Windows 95 to warn you about low disk space, at any set limit you want. Without quotas... odd that XP wouldn't have that.
I read HH's post now. Using root is not dangerous if you know what you're doing. But it's unnecessary to use it. The Windows NT Administrator group is pratically the only one that's allowed to do anything, that's not the case in *nix. Also, root gives more power over the system than the Windows equivalent does. |
HyperLamer
Posts: 2093/8210 |
Originally posted by Karadur
Also, Limited users are subject to quotas if you've got them set up (I'm talking about XP here). I'd hate to have a limited amount of storage space to work with (not that you don't even as an Admin, but there it's the whole hard drive space)
Quotas are nice because they can warn you when you're using up too much space. It sucks that you can't set it to unlimited space with a warning, but I just set it to a coupla billion GB (6 EB) and it works. |
Surlent
Posts: 681/1077 |
I made a restricted account one week ago and simply ported over my profile folders from Thunderbird, Firefox into the restricted one.
I rarely install software and my often-frequented emulators work well with a restricted account (might change when I will have my broadband connection in a few weeks  ) 
As for me, I really don't lose too much in comfort. And for Windows Update it doesn't take too long for simply logging off and signing on for me.
If I'd work in an office and was a adminstrator there, I think I'd use restricted accounts only unless it comes to Windows Update or an hardware upgrade.
But, usually it might not be required - since the frequent updates, using not Outlook (Express) and IE might help a lot already 
Only really dangerous things are security leaks of Phat- or Agobot, which usually are extremely hard to remove fully and normally require a clean format C: and reinstall of Windows. |
FreeDOS
Posts: 875/1657 |
Nope. Using root is 100% unneccessary in *nix |
Sokarhacd
Posts: 648/1757 |
seeing how, only me and my brother use this computer most, there is no limited account made, and I use firefox, and he uses IE, ..and that way, if we get spyware, or a virus, I can blame him lol |
Karadur
Posts: 50/1192 |
Definitely the Admin account. I usually download at least one thing that requires installing in a week, and I'd find it awkward to have to switch to an Admin-type account each time I wanted to use what I'd gotten or install.
Also, Limited users are subject to quotas if you've got them set up (I'm talking about XP here). I'd hate to have a limited amount of storage space to work with (not that you don't even as an Admin, but there it's the whole hard drive space)
Another thing is sometimes you get things popping up about upgrading software such as a virus scanner or something. I'd guess most programs would require you to be logged on as an Admin to be able to upgrade.
I have everyone using Firefox on this computer, but I still sometimes load up IE if I need it for a certain page.
To answer the thread title question, I use an Admin account for surfing, everyone else uses their own Limited accounts |
Tarale
Posts: 818/2720 |
I like limited accounts. I like the idea that if I do something stupid, it won't bork my whole system.
They're not real effective though in Windows (annoying, but not effective) wheras account limits in Mac and Linux are effective and mean you can't kill your system (but you can kill your home directory) |
Sokarhacd
Posts: 614/1757 |
like firefox...although I still say, stay away from limited acounts, especially if its your computer. |
HyperLamer
Posts: 2077/8210 |
Well, if you're still using a crappy Microsoft-issued browser with massive security holes, or are dumb enough to open every file you get from total strangers in email, then it might be good to prevent massive system destruction. (Viruses won't have access to important stuff.) Or you could just get a decent browser and some common sense. |
Sokarhacd
Posts: 612/1757 |
exactly, what if you find something you want to install right away, you would have to switch accounts, and go back into the admin account, and then install... |
| This is a long thread. Click here to view it. |
|
