Windows IT Pro is the leading independent community for IT professionals deploying Microsoft Windows server and client applications and technologies.
  
  
  Advanced Search 


January 19, 2006

Least Privilege User Accounts On Windows XP

RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
After a subtantial amount of beta testing, Microsoft published a document that can help administrators who want to implement Least Privilege User Accounts (LUA) on Windows XP. However, implementing LUA could come with significant costs and challenges.

The new document, "Applying the Principle of Least Privilege to User Accounts on Windows XP," was published January 18. In it, Microsoft points out that companies might need to deploy new tools, re-develop custom applications, and change operational procedures. Presenting ever further challenge is the fact that some software will not run unless the user's account has Administrator rights. Another complicating factors is that people might need to install new hardware or software, which could require Administrator rights.

Nevertheless, having Microsoft's advice on the matter will come as a boon to those who are intent on implementing LUA as soon as possible. The lengthy document includes a wealth of tried and tested advice along with a list of tools you might require. Some of the suggested tools are well-known staples for many administrators. For example, you'll probably need RegMon and FileMon, two widely used tools that are freely available from Sysinternals. You might also need MakeMeAdmin, DropMyRights, Privbar, PolicyMaker, Microsoft Windows Application Compatibility Toolkit, and more. Microsoft also points out two Technet Webcasts that you might not be aware of: Limited User Access: The Good, the Bad and the Ugly and Tips and Tricks to Running Windows with Least Privilege.

The document is the culmination of group effort by eleven contributors and dozens of other people who reviewed and tested the included advice. The document is available at Microsoft Technet in HTML format. Be sure to review the Resources section for a long list of helpful links.

End of Article



Reader Comments

You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now




Top Viewed ArticlesView all articles
Anti-Virus Vendors Prepare for War with Microsoft ... Again

When Microsoft announced its Windows Live OneCare security and PC health product over five years (as MSN OneCare), Symantec, McAfee, and the other consumer-oriented security vendors reacted with stunning vigor. ...

What You Need to Know About Microsoft's x64 Server Product Plans

What do Longhorn Server, Windows Compute Cluster Server, and Windows Vista have in common? The x64 platform. ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...


Security Whitepapers Sustainable Compliance: How to reconnect compliance, security and business goals

The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Related Events WinConnections and Microsoft® Exchange Connections

Security Summit

Top 10 Email Security Challenges and Solutions

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Introducing Left-Brain.com, the online IT bookstore
Looking for books, CDs, toolkits, eBooks? Prime your mind at Left-Brain.com

Discover Windows IT Pro eLearning Series!
Clear & detailed technical information and helpful how-to's, all in our trademark no-nonsense format

Test Drive IT Solutions and Get Free Music Downloads
Solve your toughest IT problems with these free downloads and receive 5 free music downloads!


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro DevProConnections IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home asp.netPRO Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc. Terms of Use | Privacy Statement | Reprints and Licensing