Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Mac OS X > Running as Admin

Running as Admin
Thread Tools
Grizzled Veteran
Join Date: Oct 2001
Location: Australia
Status: Offline
Reply With Quote
Feb 19, 2006, 01:05 AM
 
Am i screwing up and leaving myself open by running my machine as admin.On the home imac we have the admin account and my brothers account.Should i be having 3 accounts.The admin,One for my brother and one for myself.It seems theres a wealth of information saying theres no problem running as admin whilst others say there is.

Enlighten me please.
Apple an innovator in a world of Immitators.
And thats the bottom line!!!!!!!!!
     
Senior User
Join Date: Nov 2000
Location: Fremont, CA, USA
Status: Offline
Reply With Quote
Feb 19, 2006, 01:42 AM
 
Not really. Being admin means you get to control what happens on your computer. Logging in as root would be really stupid, but dmin doesn't have the same power as root.
If I had a signature, it would look something like this
     
JKT
Professional Poster
Join Date: Jan 2002
Location: London, UK
Status: Offline
Reply With Quote
Feb 19, 2006, 04:22 AM
 
Put it this way, in relative terms, running as root - very insecure but full control.
Running as Admin - less insecure but slightly reduced control.
Running as Standard account - more secure but much reduced control (though if you know the admin password this returns to being only slightly reduced control)
Running as Standard account with parental controls enforced - even more secure but very limited control.

FWIW, you don't have to create a brand new Standard account for yourself, you can convert your current admin account into a standard one:

Simply create a new admin account (don't forget the username/password - you might want to make a secure note in Keychain of them with controlled access). Logout of your current account (which is still an admin account at the moment) and log into the new admin account. Once in that account, open System Preferences>Accounts and select your user account. Deselect the "Allow user to administer this computer" button to make it into a standard account.

As a Standard account holder, you can still install things into the /Applications and /Library folder still but you will always be prompted for an admin name and password, even for drag and drop installs. This also means that you will never be the owner of the applications - admin will be. Hence more security.
(Last edited by JKT; Feb 19, 2006 at 05:10 AM. )
     
Moderator
Join Date: May 2001
Location: Hilbert space
Status: Offline
Reply With Quote
Feb 19, 2006, 05:37 AM
 
It is definitely more secure if you have non-privileged users for every-day work. You still can do pretty much everything (change settings in the Sys Prefs, copying files) after authenticating. It will protect you against all known trojans (which need authentication!).
I don't suffer from insanity, I enjoy every minute of it.
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 08:20 PM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2