TechStuffCanada

jargon-free tech news for non-technical people

One easy step to make Windows 100% secure

November 8, 2006 › Sandy McMurray | comment

keyboard-securekeys.jpgWould you like to know how to protect your Windows-based computer from viruses, worms, spyware, and other threats? There is a way; a simple one-step solution to prevent these common computer problems.

You don't have to read any manuals, or switch to Mac or Linux, or explore the Windows Registry.

Not only does this simple solution protect you from 100% of computer malware; it also guarantees that your computer will never crash again.

Best of all, this fix is completely free. It will cost you nothing. In fact, it will save you money, because you can stop using security software.

You heard me right: you will no longer need to buy anti-virus, anti-spyware, anti-hacker software to protect your PC.

Read on to find out how your PC can be 100% secure and crash-free.

Step 1: Unplug your computer.

That's it. That's the only thing that works.

SERIOUSLY
All joking aside, there really is a way to make Windows XP safer and more secure. One simple change can dramatically improve the security of your PC.

What should you do? Avoid using the Administrator account.

Here's the deal: Windows XP comes with two main types of user accounts: Administrator and Limited. If you stick to Limited accounts 99% of the time, your computer will be much more secure. Admin privileges should be used occasionally, not all the time. Yet most PC users have Administrator accounts.

WHAT'S THE DIFFERENCE?

Administrator accounts
- can create and delete user accounts
- can change user account names, pictures, passwords, and account types

Limited accounts
- cannot change most computer settings
- cannot delete important files
- cannot install most new software (but can use what's already there)
- cannot install new hardware (but can use what's already there)

Every Windows user, including the computer's owner, should have their own Limited account. There should be one Administrator account that is used only occasionally -- for example, when a new printer is added to the system, or new software needs to be installed.

Administrator privileges are powerful, and potentially dangerous if you don't know what you're doing. Using an Admin account all the time is like carrying a loaded gun in your pocket with the safety off.

THE PROBLEM
Very few people understand the different types of accounts. New computers usually start up with a single user account -- an Administrator account with the name "Owner." And many consumers never change this default setting.

Here's what usually happens:
- new PC is turned on for the first time
- Windows XP displays default Administrator account
- first user sets up the PC and adopts the default (Admin) account
- most/all user accounts added later are also set up as Admin users

WHAT DOES THIS HAVE TO DO WITH SECURITY?
Many of the security problems that affect Windows begin when "malware" (bad software) is installed. Malware creators prey on ignorant users who do not understand what they're doing when they click "OK" on a pop-up message box, or agree to add an ActiveX widget or toolbar to Internet Explorer.

In an Administrator account, the malware slips right in, because an Admin user has given permission to proceed. In a Limited account, most malware is stopped dead because it can't install itself in the background without permission from an Admin user.

CONVENIENCE VS. SECURITY
What if you're a Limited user but you really need to add new software to your system, or you really need to install a new printer, or you really want that toolbar added to Internet Explorer? If you don't know the password to access the Administrator account, you can't proceed. That can be inconvenient and annoying.

Well, tough. That's security. If you don't have the key, you can't start the car, even if you're a very safe driver who really, really needs to go for a drive. If the car started up for anyone who sat in the driver's seat, it would have been stolen long ago.

OTHER PROBLEMS
There are some practical problems with this security setup in Windows. The most common problem is Windows software that assumes that everyone uses an Admin account, and will not work at all for Limited account users.

The solution here is not to use the Administrator account to use the stupid software. Instead, switch your account temporarily from Limited privileges to Administrator privileges. When you're done using the software, switch back! This is inconvenient, but more secure.

SUMMARY
Limited accounts can use the computer, but cannot manage the computer. Administrator accounts have extra privileges and abilities, including the power to add and remove hardware and software, and unfettered access to other accounts.

If you care about privacy or security, it makes no sense to give all users access to Admin privileges. Everyone should have their own Limited account, and Administrator privileges should be reserved for occasional, careful use. Your PC is potentially less secure (and therefore, more dangerous) whenever you're using an Administrator account. Be careful!

Note: To change or add a user, go to the Windows XP Control Panel.
Click Start, click Control Panel, then click User Accounts.

Follow this link for more information from Microsoft:
Windows XP - Types of User Accounts

Follow this link for more tips from LabMice.net:
Windows XP Security Checklist

November 8, 2006 › Sandy McMurray | comment on this item

Tech news (and other fun links)

Writing perfect e-mail Subject lines

Vista: the OS nobody wants

Sony software opens door to hackers

More Google Phone rumours

Useful free Windows software

Play Solitaire in your web browser

Problems with Wal-Mart music service

Mac Office 2008 delayed until January

Google bids to control U.S. wireless

Windows Vista: log in automatically