Yeah, but why reduce the privileges of the admin accout?

I'nt it better to just make a new, restricted user. Then log on as that user? Then if you need admin privileges, (as you may often do.. ) then just use runas to change the user running that application. Though, you need to keep in mind, that everything you do/START using this applicaltion, will run as that user.

This works fine for me:)

You could even make a script to run stuff you need as admin (you'll need a 3 party app to pipe the password to runas though.. like sanur)

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1848/21#21