Welcome to MSDN Blogs Sign in | Join | Help

LUA / Non-admin (RSS)

Posts relating to how to run day-to-day and develop software using a low-privilege user account (LUA).

LUA Buglight

I've been somewhat remiss of late in my focus on what I consider to be a very important aspect of the discipline of software development, namely least privilege. I was fortunate to have one of the great folks in my local developer community, Randy Hayes, Read More...
Posted Monday, November 13, 2006 3:59 PM by gduthie | 1 Comments

Reducing UAC prompts

I've been somewhat lax in my postings on least privilege of late, in part because I've been pretty pleased with what I've been seeing in Windows Vista for low privilege, which we call the User Access Control (UAC) feature. UAC allows you to run as either Read More...
Posted Wednesday, July 26, 2006 3:05 PM by gduthie | 0 Comments

The benefits of Least Privileged User accounts

A somewhat long, but very interesting, article on experimental evidence of the benefits of using LUA (least privileged user accounts). An important point they found...Power User isn't the answer. The findings indicated that removing a user account from Read More...
Posted Friday, December 02, 2005 1:06 PM by gduthie | 0 Comments
Filed under:

Another Least Privilege Site

Entitled, appropriately enough, http://www.leastprivilege.com/ . Some good posts: A link to some good info on ASP.NET 2.0 configuration from local guru K. Scott Allen (who, I should note, will likely be speaking again at our upcoming Security Code Camp Read More...
Posted Thursday, September 01, 2005 10:07 PM by gduthie | 2 Comments

Good least privilege blog entry

Nigel Watling, one of my fellow evangelists who works out of Redmond, and who got the nod to present my session on least privilege for developers at Tech-Ed EMEA, has posted a good entry on least privilege on his blog . My favorite bit is the following: Read More...
Posted Friday, August 26, 2005 6:23 PM by gduthie | 1 Comments

Shame on me, and kudos to Robert Hurlbut

Shame on me that I forgot last week to mention Robert Hurlbut's excellent Birds of a Feather session on Developing with Least Privilege. It was a nice opportunity to have an informal discussion about some of the challenges involved, and Robert showed Read More...
Posted Monday, June 13, 2005 5:34 AM by gduthie | 0 Comments

Tech-Ed in the books (pretty much)

Only another hour or so left in Tech-Ed officially. I did my session on Developing with Least Privilege this morning at 9am. Good group, and remarkably wide awake, given that the attendee party at Universal Studios Orlando was last night. Thanks to all Read More...
Posted Friday, June 10, 2005 1:59 PM by gduthie | 1 Comments

Leavin' on a jet plane...

Heading to Orlando in the morning...getting up at 4:30, which is less than 4 hours from now. Woohoo! I'm very excited about the coming week at Tech-Ed 2005. I can tell that most of Microsoft is already there or on the way because my email inbox has become Read More...
Posted Saturday, June 04, 2005 11:49 PM by gduthie | 0 Comments

CMAP Meeting next week

From my friends at Central Maryland ASP.NET Professionals User Group : Meeting Date: Tuesday, June 7, 2005 Time: 6:30 PM - 9:00 PM Central Maryland ASP.NET Professionals (cmap-online.org) Location: UMBC Technology Center 1450 South Rolling Road Halethorpe, Read More...
Posted Friday, June 03, 2005 7:53 AM by gduthie | 0 Comments

Non-Admin: Live!

From my colleague Aaron Margosis : Tech*Ed 2005 in Orlando, FL (USA) will include significant coverage of "non-admin" topics: · SEC350 - "Tips and Tricks to Running Windows with Least Privilege" , presented by Aaron Margosis, and · SEC351 - "Developing Read More...
Posted Friday, June 03, 2005 7:30 AM by gduthie | 0 Comments

Can't make it to Tech-Ed next week?

You can still get some of the great content via the simulcast Webcasts : Microsoft Tech·Ed 2005 is sold out but you can still explore Microsoft technologies and solutions in this series of webcasts. Join us through the end of May for pre-Tech·Ed webcasts, Read More...
Posted Friday, June 03, 2005 7:09 AM by gduthie | 0 Comments

Want to know where spyware might be hooking into your system?

SysInternals' free Autoruns utility can help you track down what's auto-starting, so you can get rid of stuff you don't want. If you use it from a low-privilege account, and then from an admin account, you'll probably notice that there are a lot more Read More...
Posted Thursday, April 28, 2005 10:06 AM by gduthie | 0 Comments

More non-admin tips from Aaron

How to allow users to manage file and print shares without granting other advanced privileges http://blogs.msdn.com/aaron_margosis/archive/2005/04/18/409105.aspx Read More...
Posted Thursday, April 28, 2005 10:04 AM by gduthie | 0 Comments

Least Privilege Development BoF at Tech-Ed

Robert Hurlbut just announced that his suggestion for a Least-Privileged Development Birds of a Feather session was accepted for Tech-Ed 2005 . I'll definitely be there: The TechEd BOF (Birds of a Feather) voting is over and mine was accepted. Here is Read More...
Posted Wednesday, April 27, 2005 3:13 PM by gduthie | 3 Comments

Least Privilege and Explorer

As I prepare for an upcoming talk at Tech-Ed 2005 on Least Privilege for Developers, it's worth reviewing a post from my colleague Aaron Margosis on Least Privilege and Explorer , in which he discusses some workarounds for challenges in making Windows Read More...
Posted Wednesday, April 27, 2005 2:32 PM by gduthie | 0 Comments
Filed under:
More Posts Next page »
 
Page view tracker