Hamby wrote:Not disputing, but I'm trying to figure out why it's pure folly to use an admin account 24/7 on a Windows system, if you're the only user of the system?
Because any code you run, intentionally or not, also 'uses' the system. If you have unrestricted rights to the machine, so does whatever program you just ran.
On my home machine I have a standard account, an admin account with a different password, and UAC set to the next-from-lowest option (one above the "never notify"), so if whatever I run needs to elevate I'll be prompted to enter the other account's password. At work, my domain account is a standard user, and I have a local admin account with a strong password. Same settings on that, so if I must elevate I use an account that is unknown to the domain so if something steals it it won't be able to do anything with it but stuff on my machine.
"The Big Bang. The ultimate hero of low frequency. The divine intergalactical bass drum connecting the tribes of our solar system."
Yello
"Solar Driftwood"