Least user access
From Wikipedia, the free encyclopedia
Also known as least-privileged user account, least user access is a security feature based on the principle that all users at all times should run with as few privileges as possible, and also launch applications with as few privileges as possible.
For instance, if a user has administrative privileges, the user should run as a standard user as default. When needed, and only then, applications can run with elevated privileges.
The idea is that this will prevent malicious code from gaining system-wide access, or at least make it harder. This again may reduce the impact/consequences, and thereby cost, of malicious code run on a machine.
[edit] External links
- Proof: LUA Makes You Safer - Broken link
- Applying the Principle of Least Privilege to User Accounts on Windows XP
- Microsoft's implementation in Windows Vista
 |
This computer-related article is a stub. You can help Wikipedia by expanding it. |
