Limit programs from getting admin access!

Well, the title must be giving you the doubts that why one would limit programs from getting admin access ? Right ? Well, the answer to this question is that limiting programs from getting admin access increases the security of your computer. Lemma explain it to you in details :

When you are logged in the computer as an administrator then all the programs have the admin rights too and thus when you visit any website which can install a malware can successfully install it because Internet Explorer has got the admin rights and thus those pests get installed without any issues.

However it’s a pain to run a limited user account too as there are various places where you frequently need admin access, so in this case it’s best if we can log in as administrator and if we can run Internet Explorer or Outlook express or any other application which can connect to the internet in limited rights mode.

Alright, it’s making sense how can I do it ?

The best way of doing is to make use of an excellent utility from Sysinternals (now part of Microsoft) called PsExec. Although this is what PsExec is all about :

PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software.

However we’ll use it to ensure that it’ll help us run the applications with no admin rights, even though we’ll be logged in as administrator :

1. Download PsExec from here.
2. Extract the file to c:\ drive.
3. Right click on desktop and select new->shortcut.
4. Paste the following text : "c:\psexec.exe" -l -d "c:\Program Files\Internet Explorer\iexplore.exe"
5. Go next and name the shortcut as Internet Explorer.

Now whenever you’ll launch IE from that shortcut, it’ll have less privilege and your computer will be safe.