Hi Guys,

The article talks about a program for reducing rights. Most XP users run there computers in "Administrator" mode when not required. Running as administrator, can allow malware free reign to create havoc on your machine. Michael Howard a M$ employee wrote "DropMyRights" quite some time ago, I encourage XP users, to drop the rights of programs not requiring admin rights. It's very easy:

download Free "DropMyRights" Here

Install "DropMyRights' <can be found at 'program files>

Copy "DropMyRights.exe" to the root directory C:\

Now go to Control Panel > add/remove programs > remove "DropMyRights" 

Note the only required file is "DropMyRights.exe" which was copied to C:\ and Add/Remove will only delete the program from c:\program files.

Candidates for reduced rights, anything that connects to the internet.

On my machine the following run 'just fine' with restricted rights.

FireFox
IE7 <used rarely>
Thunderbird
iTunes
Quicken
1-Click Answers

You reduce the rights by slightly modifying the programs shortcut. Make a copy of the shortcut (I made a folder for all the "full rights" shortcuts) my desktop has only reduced rights shortcuts <that can connect to the internet>

Right click the shortcut, where it says "Target" place your cursor in that field, left click one time, use the left ARROW key to place the cursor to the extreme left.

Type "C:\DropMyRights.exe

It should look like this for FireFox:

C:\DropMyRights.exe "C:\Program Files\Mozilla Firefox\firefox.exe" /prefetch:1

Note the space between the e and "

Hit 'Apply' or 'Ok' - Next time FireFox it will have reduced rights, which will help keep you safe from malware. And your systme will still have full Admin rights.

Note 'Apple Computer' has long used this concept, to keep malware there machines. Vista's protected mode works similar. Also any program that was started via "DropMyRights" it's child <program> will have reduced rights also.

Example: Starting IE using DMR any program IE starts will have reduced rights as well.

Take Care
Rico

Quoting ya_shin:

Quote:
For quite some time now I run all my computers as Users and only use "Run As..." [Administrator] to install programs and a few other tasks. Only annoyance I ever found was not being able to adjust the system time, otherwise "using" a computer as User is no problem at all (and it shouldn't be).

That is what I would do as well.  It is how I run and install programs at work (I do desktop support). 

For those that may not know, one way to get to the run as is to hold shift and right click on the shortcut. 

You can do the same thing with Vista (which has run as administrator).  As if you do it on an excel or word file and not a shortcut, it has the option to open as read only (not sure what other file types have this option).

Quoting graymadder:

Quote:
You can edit your pc's local security policy and add a user or group the rights to change the system time among other things. It is always best practice to lock down a user and only grant the rights needed through policy.

Good thing to point that out! Obviously I entirely agree.

As it was getting ridiculous at some point, I did just that, granted myself the right to change the time. I no longer need to do that, as I no longer run a Windows PC (I still run windows, but within a virtual environment), so I have no more need for that now

Quoting kahless:

Quote:

Quote:
Quoting ya_shin:
As it was getting ridiculous at some point, I did just that, granted myself the right to change the time. I no longer need to do that, as I no longer run a Windows PC (I still run windows, but within a virtual environment), so I have no more need for that now

Maybe it has been asked before, but I'm just curious if the profiler works proper in a virtual environment?  If so, the profiler could be used with Mac OS, Linux, Ubuntu etc?

In theory, everything should work in a virtual environment. The idea is that a virtual machine is indistinguishable from a real machine (as far as the OS is concerned), even to the extent that the virtual machine and the host machine can both exist on a network (that's how they would usually talk to each other).

As to the Mac/Linux question, I run DVD Profiler 'natively' in OpenSuse Linux. You have to use Wine (Wine Is Not an Emulator), and it's not flawless, but for the vast majority of use it runs fine. See this thread in the technical forum.

Stuart

Hi All,

Herr Kahless - I use virtual mode with no problems, for DVDp. I'm using 'Shadow Defender' very very good program. Also virtual 'Returnil' which is free version 2.0 will be out soon, public beta for 2.0. Previous Returnil is very good.

DropMyRights "DMR" is a way the average user can improve safety, & still maintain 'admin rights.' Note 'admin rights' is the default in XP so many users, are not-aware of the vulnerabilities running in this manner. Apple & Vista have corrected this problem.

Take Care
Rico

Quoting Rico:

Quote:
Hi All,

Herr Kahless - I use virtual mode with no problems, for DVDp. I'm using 'Shadow Defender' very very good program. Also virtual 'Returnil' which is free version 2.0 will be out soon, public beta for 2.0. Previous Returnil is very good.

DropMyRights "DMR" is a way the average user can improve safety, & still maintain 'admin rights.' Note 'admin rights' is the default in XP so many users, are not-aware of the vulnerabilities running in this manner. Apple & Vista have corrected this problem.

Take Care
Rico

Don't know what Apple did, but I sure wouldn't call what Vista does any improvement.  Virtually everyone I know who went to Vista turned off that stupid "feature" first thing.

Annoying as it is, Vista did what it set out to do

Hi Guys,

Rifter - Good for you, not experiencing malware firsthand! Starting a program using DMR , is the same as starting the program without DMR. Just dbl click the shortcut. Nothing to think about. Think of DMR as free insurance for your three machines.

As for not understanding a key approach to what helps keep Apple machines malware free is understandable, but the concept is important to thwart malware & has been used for quite sometime. Vista may have inconvenient or troublesome approach to security, but reduced rights has nothing to do with the problem.

DMR is a one time modification to a shortcut (after installed) uses no memory, tiny in size, causes no problems, & for some reason you don't want it delete one file. Plus your machine will still have "admin rights" ONLY THE PROGRAMS <YOU CHOOSE> TO MODIFY  IT'S SHORTCUT, WILL HAVE LIMITED RIGHTS.

The two programs that are most likely to get you infected are your Browser & Email - running just these with DMR greatly limits damage malware can cause.

The reference to Apple & Vista is/was meant to show a relationship. Like Apple inspired/invented the concept of limited rights, followed by Mr. Howards writing of DMR circa de 2004, & the concept of limited rights was carried forward to the next OS Vista.

Take Care
Rico