Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: unfuture on September 27, 2004, 11:21:00 PM
-
Hi all,
i'm using avast home edition for a short time now, it's a great programm.
Now i'm thinking about making Windows XP Professional more secure and
so i'm planning to create special user accounts for surfing: only restricted
users are allowed to access the internet, adminitrators have no possibility
to access the internet.
My question: Is it possible for avast to make a programm-update with a
restricted useraccount(=no installation rights)?
Unfortunately i could not test it on my own, because my version
of avast is not old enough for a programm-update and so the
only thing i know is, that virus definition updates are working
fine with restricted user accounts.
Thanks in advance,
Unfuture.
-
Welcome to this board.
only restricted users are allowed to access the internet, adminitrators have no possibility to access the internet.
So a "simple" user can access, but a admin not. That doesn't make sense. How could a admin do his job then?
I already imagin a problem.
- User: "Admin can you help me?"
- Admin: "only if you login for me, cause I don't have enough user rights to do it." ;D
For good suggestions on how to secure XP have a look HERE (http://www.markusjansson.net/erecent.html)
-
hmmm...sorry, the link doesn't help me...i dismiss someone who tells me that
installing zone alarm makes my machine secure. But i don't want to start a
debate on principles because we can talk weeks about the sense of personal
firewalls instead of closing the service ports and so on...i have my opinion and
you have yours. If you can help me with my simple question i would be greatful
for your information. 8)
Greetings,
Unfuture.
-
unfuture, do mean something like Sun Microsystems "thin client" idea where the pc has no global settings? I mean you want no user or programme to have admin rights to change or alter the pc's settings.
That solution (by Sun) died a death some time ago.
I think you'll find that Eddy's reply is quite correct under a windo$e system at least 1 user has to have admin rights, that's what makes it such a viable platform for malware as most home users run their machine as admin instead of restricted user. I'm referring to nt based here as 95/98/M.E. force the machine into "admin" mode without a choice
-
No, i don't think that Eddy is quite right. I think that it is quite
irresponsible to surf with full admin rights on a machine, wich
components have so many exploits. I diddn't wrote that no one
should have admin rights, of course i know that an admin
is necessary to configure the machine in some cases. But in
95 % of the time you use the computer an admin account
is not mandatory. Please tell me a simple reason why i should
surf into the internet with admin rights? Windows update
can act without admin rights automatically and if i need to
install a programm from the internet i can log on with a
restricted user account, download the file, change to the
admin account and install the file. The only reason for this
behavior is comfort, of course i can also download the file
from the admin account, but in all likelihood i would surf
uncareful with the admin account after some time.
Of course an admin can "build" it's own way into the internet
every time because he has all rights on the machine, so the
example from eddi is unreproducible. I would answer the user
"just a moment, dude, please tell me first what exactly you
want to do in the internet and if it's no security risc, i will
go online and help you..."
But please belive me at least this: It serves no purpose to
discuss this theme, i allready mentioned it in my post to
eddi. It's a debate on principles and in my judgement it
does not help me or you. Neither i would surf with admin
rights nor you would use restricted user accounts for
surfing from today. ;D
Greetings,
Unfuture.
-
Account with administrator rights is less secure on the internet ?
Simply - nonsense !!! I've never heard such a thing in my whole life...
Eddy just tried to help you, and jumping all over him just because of that...
Downloading file from the internet logged as user with limited account, and then log out and log back in as user with administrator rights... I don't know about that. Who would do that every single time when he browse internet ?!!
Btw, this is not flaming, it's just my point of view. If you are looking for a flame, please can we leave it for some other forum... 'cause these forums are wrong place for that... you'll see after your reply.
I guess you're just being a little paranoid, that's all.
Have a nice day !
-
unfuture, avast program update works even with non-admin rights. That's what the "avast iAVS4 Control Service" is for, in fact.
Craftec, actually I wouldn't totally agree on this. Unfuture certainly has a point. Working under a non-admin account is a very good security practice in any case. If the system is set up carefully, the possibility of a screw-up (or even a virus attack) is mitigated when using non-admin accounts.
Cheers
Vlk
-
C'mon Vlk... all those software firewalls, hardware ones, properly configured and you still are affraid someone will bother to break into your computer and "steal" or messup some data ? I wouldn't go that far... if anyone wants to break into some computer, they would choose big companies with some important data for them, not a single user home station with nothing inside...
OK, even if someone is that paranoid, you think that logging in and out 50 times a day is a good idea ? I don't think so... well, that's just my opinion...
-
Hi Vlk,
thank you very much, thats exactly the information i needed.
@Craftec, my apreciated psychiatrist :D
If you really have to install 50 Programms a day, then you should consider
about first making a "download session" and after downloading the whole
software you should install the soft also in one session.
Greetings,
Unfuture.
-
Yeah, I don't like to be psychiatrist... don't even like that word... too difficult to pronounce ;D
50 programs a day - that was just an expression, but still. It would be great idea to have download session if someone do that. I don't download much stuff, but sometimes when I have to download something, that goes directly through my avast!... everything is checked as soon as it's downloaded. Anyway, sometimes, it's a good idea to check all files and folders with some freeware online checker like Housecall... there shouldn't be any problems, and no one would have to worry so much about security. The problem is, people like to download everything from all kind of sources, and they don't even bother to scan files after downloading... I mean it takes only few seconds. What can you loose ? But, you can get a lot... I'm not telling that you are one of those people, but many of them are doing like that. And that could be a problem...
Cheers !
-
No, i don't think that Eddy is quite right. I think that it is quite
irresponsible to surf with full admin rights on a machine,
I never said that a normal user should use admin rights to surf the net, only that a admin should have access in case of trouble.
And the site I gave you earlier does have a lot of usefull information on what/how you can restrict users. Perhaps you should read it again.
You also misinterpreted a few things others said here. Seems reading is not what you do best. (no offense) It could be english is not your natural language, better read twice and take your time. Helps preventing misunderstandings like happened here.
Besides the two companies I run, I also am the admin of a cybercafé in my spare time, so I know what you are talking about.
Just some things you may want to consider when setting up the system:
- Password on the (router)/firewall
- Password on Avast
- Seperate folder and diskquota on it for the (restricted)user
- No installation rights
- No downlod rights for certain filetypes
- Only allow the restricted user to use webmail
- Disable access to control panel and other things
- Leave only those things in the start menu that they are allowed to use.
-
it appears I missed all the fun :(
Have to agree with Eddy on this one. But, to each his own. As IT people we can make it as simple or as hard as we want to make it. Shame, though most people want to make it easier.
Kezz
-
I have actually read alot, that using a limeted user account for risky surfing is much safer. The reason for that is, by being a limited user you prevent some virus programs from installing themselves because, by definition, limited users do not have full rights. Also, if you encounter a stubborn virus, you can delete the entire user and all of their files without losing your crucial data. With that said, I never use a limeted user account for surfing!
Tipton
-
*
I have to say I agree with Eddy's last post. If an Admin doesn't have access to the internet, how can he/she do the job properly? ???
Of course, I do understand why the Admin account should not generally be used to surf the net. That's what user accounts are for. The Admin can also have a user account for general surfing use ... right? :)
I also agree with what KezzerDrix added above.
*
-
C'mon Vlk... all those software firewalls, hardware ones, properly configured and you still are affraid someone will bother to break into your computer and "steal" or messup some data ? I wouldn't go that far... if anyone wants to break into some computer, they would choose big companies with some important data for them, not a single user home station with nothing inside...
OK, even if someone is that paranoid, you think that logging in and out 50 times a day is a good idea ? I don't think so... well, that's just my opinion...
This is a joke I missed, right? ???
Running under non-admin account for casual work is one of the best practises one may choose.
Talking about 'who-would-like-the-access-to-my-machine' with the point that the previous speaker is a paranoid is plain dumb nowadays.
Most of the spam and viral attacks are coming from hacked private machines with installed backdoors. The bad guys don't give a **** who you are and what are your data. They want your processing time and internet access. And both of these are offered by unknowing users, even those who believe that with firewall there is no risk.
For more info check The Ultimately Secure Firewall setup here:
http://www.ranum.com/security/computer_security/papers/a1-firewall/
-
Talking about 'who-would-like-the-access-to-my-machine' with the point that the previous speaker is a paranoid is plain dumb nowadays.
Yeah, most likely I'm the one who is paraniod right now... I'm running my configurations for the last 17 years (counting my old computers, and days when internet wasn't even existing as an idea, BBSes as stuff), and I never had any problems... people like to click on every single stupid button on those pages, no matter are they full of stupid advertisements like those that promises you a million dollars... of course you already won that money if you believe them ::)
People are really a way out of line sometimes... who cares ? No one, if they are so stupid to click on every single pop-up that comes with some stupid questions, that's their problem. Of course, they are not safe anymore... everyone should be more careful what he/she does on the internet and what pages he/she visits. I, myself, never visited any of those casino or porn pages... that's why I don't have problems with pop-ups (naturally, there will always be some of those in here, but if you're careful enough, no one can assure me to believe in something else... I have a proof and it's right here) or with some nasty browser hijackers...
What I'm telling is, start to worry about your security with yourself first... human factor is huge, then search for reasons elsewhere...
Plus, I never said that using some of those routers/firewalls there will be no risk. That's nonsence and I didn't say anything like that. What I said, is, with all those hardware routers/firewalls, you can drasticaly improve your security, and that's true. Now you're gonna tell me, that routers/firewalls are myth, and we actually don't need them... well, as I stated up there, everyone has rights to has his opinion.
-
Plus, I never said that using some of those routers/firewalls there will be no risk. That's nonsence and I didn't say anything like that. What I said, is, with all those hardware routers/firewalls, you can drasticaly improve your security, and that's true. Now you're gonna tell me, that routers/firewalls are myth, and we actually don't need them... well, as I stated up there, everyone has rights to has his opinion.
Running under non-admin account can drastically improve your security too. But you've simply dismissed that idea as an paranoid overkill, that's why I jumped into this thread.
-
OK, I admit... that was maybe dumb of me to jump like that, but still I don't think calling someone is being "paranoid" is as bad as calling someone "dumb", especially when it comes directly from administrator ???. In people's nature is to be affraid of anything... if there is nothing to be affraid, they will always find something.
I know what's most secure thing they can do...
Why sholdn't we just unplug our modems, dixconnect from the internet and everyone would be 90% more safer... of course, those 10% would be files on your floppies and CDs ::)
-
OK, I admit... that was maybe dumb of me to jump like that, but still I don't think calling someone is being "paranoid" is as bad as calling someone "dumb", especially when it comes directly from administrator ???.
You take it too personally. I've said it's dumb to say something, not that you're dumb. Even intelligent people may say dumb things when they don't take all information into account. Majority of the hack attempts nowadays are here just to take over your machine and backdoor-ize it.
-
No problem Kubecj, I am not stubborn... ( well... sometimes ::), hehe ;D ). I always admit if I make a mistake, so I admited I shouldn't jump just like that. It's just I never had any bad experiences nor problems surfing under account with administrator rights, that's all...
Your knowledge is most likely much more extended than mine in this particular area... I'm focused on some other computer related things, but I still think that sometimes people are really more worried than they should be.
Take care !
-
kubecj
I have one of those in the tool drawer of the computer desk! ;D
Think I'll stick around a while longer before I install it. :)