Tuesday, July 14, 2009 - Almanac Vol. 56, No. 1
Don’t Use Excessive Privileges on Your Computer
Computer privileges are like scissors; it’s not safe to "run" with them.
Windows and Macintosh computers assign users specific capabilities. On a Mac, they are called "privileges." Windows calls them "rights." The most privileged account, "Administrator," has privileges to create new accounts, read or delete any file, modify the operating system and much more.
Few such privileges are needed for most day-to-day computer activities like reading e-mail, using a web browser, or creating documents or spreadsheets. All that is needed for most activities is the limited set of privileges that come with what Mac and Windows both call a "standard" account. Typically, Administrator privileges are only needed occasionally, to apply software updates, for example.
If, as a result of visiting a malicious website or opening an infected e-mail attachment, you were to unknowingly activate a computer virus on your computer, it would have all of the same privileges as the account you are running. If you are running as a standard user, without Administrator privileges, over 90 percent of malicious software will be unable to compromise your computer.
Of course, it is necessary from time to time, to use Administrator privileges. But by using those privileges only when needed, you dramatically increase your security.
Please check with your Local Support Provider if you're not sure which account you are using.