Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have a very straightforward question. Is there any downside to logging in as an administrator all the time in windows 7?

I mean, it asks you whenever a program asks for permission to do something as an admin so how is this any less secure than logging in as a regular user.

One shortfall I see is that as an admin it does not ask for your password each time this occurs so in theory malicious programs could click the "allow" but for you. But supposedly the dimming of the screen prevents other programs from running. Whereas if you are required to input a password at least the malicious program would have to have this.

Anyway the question comes down to, name vulnerabilities of logging in to windows 7 as an administrator vs as a standard user. Especially with the UAC features that have been added.

share|improve this question

1 Answer 1

The dangers are the same with logging in as root in any system.

Suppose a malware has found a way to bypass UAC, what can it do? If you're logged in as administrator/root pretty much everything it could ever want to do can be done.

On the other hand if you're logged in with a normal user all it can do is corrupt/infect the users files in the users home and everything else will get denied unless it provides the administrator password.

share|improve this answer
    
I assume all that you said still applies and is a bad thing even if I am the only user of my system. –  John Mar 23 at 15:05
    
Yes it does the first user is always the administrator(at least on windows linux is another story), I recommend creating a new regular user and transferring all your files from the admin. –  Nick Mar 23 at 17:33

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.