Using Standard User Account for Security

Because people will enter their credentials in the UAC prompt without knowing what it's actually prompting for; therefore defeating the whole purpose.
If they do not have credentials to enter in the UAC prompt, they can't do that harm.

For example, just today we've received reports from users who "must get their java upgraded for this java applet to work."
Yeah... no. Had they actually read the prompt, they could have simply clicked on "Later" which, as the pop-up explained, would allow them to access the java app and it would remind them later to upgrade.

When a lot of joe blow users see the UAC, they just enter their credentials.
They don't care to find out what's going on, what's requesting permissions, or what the prompt actually says.
 
You can still become infected with malware on a Standard user account. The main difference between Standard user account and Administrator is that if you're only a Standard user it won't effect other people that log into the computer (different profiles).

If you only have one person that uses the computer, being a standard user does very little for you but has many annoyances.

Now if you were managing a computer for someone, I would have them use a standard account (and not tell them the administrator password) just to limit the amount of crap that gets installed.
 
Back
Top