Juan Ignacio 的个人资料devnotebook日志列表网络 工具 帮助

日志


1月18日

MakeMeAdmin

You know, as a developer or even a regular computer user, you should not develop or even use your computer as an admin.

  • Final users (especially in the corporate environment) will use your software as unpriviledged users, so your software should run with restricted permissions, which you'd only be able to debug against if you develop as a non-admin.
  • Any hostile code that finds its way into your Windows session and runs will most likely *NOT* be able to install and infect your computer if you're running as a regular user with restricted permissions.

For months now, I've been using Aaron Margosis' tool, [MakeMeAdmin], that allows you to run some program as a member of the Administrators group.

It essentially makes your user a member of the local Administrators group in your machine, runs a program with your identity, and inmediatelly removes your user from the Administrators group. This makes the program run with your identity as an Administrator (instead of running as e.g. YOURMACHINE\Administrator, which has its own user profile and would make the program use and save its settings into that profile).