Use restricted user for daily operation

Computer operating systems use the concept of users and groups to assign rights to computer users. Group rights are automatically granted to all users that are members of the group. This is the procedure followed by most businesses since it is easier to assign rights to one group that it is to assign rights to many employees. When a group's rights are modified, the rights of the members of the group are also modified.

Each computer needs at least one administrator account. This account has complete access over everything on the computer. The administrator can install or delete program, update the operating system, add or delete users, assign rights, etc. What most people do not realize is that the first account created when an operating system is installed (or a new computer is turned on for the first time) becomes the administrator.

If you continue to use the computer while you are logged in under this account, your computer is exposed to malicious websites and other types of malware that tries to install itself onto the computer. One way to try and prevent this from happening is to create a ‘restricted’ user account that you use on a daily basis. This restricted account is called limited in Windows XP and standard in Windows Vista and Windows 7. According to Windows 7 help

“A standard user account lets you use most of the capabilities of the computer. You can use most programs that are installed on the computer and change settings that affect your user account. However, you can't install or uninstall some software and hardware, you can't delete files that are required for the computer to work, and you can't change settings that affect other users or the security of the computer. If you're using a standard account, you might be prompted for an administrator password before you can perform certain tasks. ”

To create a new user, go to Start==>Control Panel. Once in Control Panel click on User Accounts (XP/Vista) or User Accounts and Family Safety.(7). Create the new user name and password and select the appropriate restricted user type. Although it is not required, we also recommend that the password not be the same as the administrator's password.

You should now use this new account for daily use of the computer, logging in as the administrator only when required.

NOTE: While you are in the Control Panel's user account area, either delete or turn off the guest account. You do not want to grant computer access to any anonymous users!