Windows IT Pro is the authoritative and independent resource for windows nt, windows 2000, windows 2003, windows xp. Features a collection of resources and magazines for windows IT professionals.
  
  
  Advanced Search 


January 19, 2006

Least Privilege User Accounts On Windows XP

RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
After a subtantial amount of beta testing, Microsoft published a document that can help administrators who want to implement Least Privilege User Accounts (LUA) on Windows XP. However, implementing LUA could come with significant costs and challenges.

The new document, "Applying the Principle of Least Privilege to User Accounts on Windows XP," was published January 18. In it, Microsoft points out that companies might need to deploy new tools, re-develop custom applications, and change operational procedures. Presenting ever further challenge is the fact that some software will not run unless the user's account has Administrator rights. Another complicating factors is that people might need to install new hardware or software, which could require Administrator rights.

Nevertheless, having Microsoft's advice on the matter will come as a boon to those who are intent on implementing LUA as soon as possible. The lengthy document includes a wealth of tried and tested advice along with a list of tools you might require. Some of the suggested tools are well-known staples for many administrators. For example, you'll probably need RegMon and FileMon, two widely used tools that are freely available from Sysinternals. You might also need MakeMeAdmin, DropMyRights, Privbar, PolicyMaker, Microsoft Windows Application Compatibility Toolkit, and more. Microsoft also points out two Technet Webcasts that you might not be aware of: Limited User Access: The Good, the Bad and the Ugly and Tips and Tricks to Running Windows with Least Privilege.

The document is the culmination of group effort by eleven contributors and dozens of other people who reviewed and tested the included advice. The document is available at Microsoft Technet in HTML format. Be sure to review the Resources section for a long list of helpful links.

End of Article



Reader Comments

You must log on before posting a comment.

If you don't have a username & password, please register now.




Top Viewed ArticlesView all articles
WinInfo Short Takes: Week of November 24, 2008

An often irreverent look at some of the week's other news, including a Vista Capable dismissal request, Zune price reductions, Morrow musings, Novell and Microsoft sitting in a tree ... two years later, Yahoo!, IE 6 on Windows Mobile, and so much more ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...

The Memory-Optimization Hoax

Don't believe the hype. At best, RAM optimizers have no effect. At worst, they seriously degrade performance. ...


Security Whitepapers The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Protecting (You and) Your Data with Exchange Server 2007

Related Events Top 10 Email Security Challenges and Solutions

Introduction to Identity Lifecycle Manager "2"

SQL Server Security: How to Secure, Monitor & Audit Your Databases

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro Windows Dev Pro IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2008 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing