Oh look. Another fluff study done almost entirely by statisticians so that they could suck up grant money and waste my tax dollars. Really important research you're doing there, guys. Children entering puberty at an early age MIGHT get into fights or have sex more early? So what? When did our society define the age at which these acts should first occur? I must have missed that.
But the registry entries are in HKLM\Software\Microsoft\CurrentVersion\Run, right? If so, you can point these entries to the appropriate shortcuts. If not then maybe you are out of luck:)
Make a shortcut for McAffee that starts all of its required processes as an alternate user. You can do this by either A) putting "runas [command]/savecred" in the shortcut, or B) click the Advanced button in the shortcut properties, and check "Run with alternate credentials." The disadvantage to option B is that you can not save the password. Option A with "/savecred" will save it so that the user doesn't have to enter a password.
Yeah, let's use an operating system that's deader than OS/2. Surely it will work out just fine, and we'll never encounter any issues that will require support - which, of course, doesn't exist. But that's fine, since it's "secure."
Note that IE being removed from Windows does break some very important things. The first one that comes to mind is the Add/Remove Programs control panel applet, which uses MSHTML to render all UI elements.
"The American consumer benefits greatly from trade with China"
Read: The American consumer benefits greatly from the complete destruction of America's manufacturing industry. But at least this Chinest crap is cheap, right?!
"Don't you realize how oppressive America is? You can't even show a naked ass in late-night network television or say 'fuck'!"
I guess you've never watched most public access channels in Anywheretown, USA. Such is common on late night public access. Network television doesn't show this sort of crap because a) advertisers don't like being associated with it, and b) they're too busy showing infomercials at late night, anyway.
"You can vote but you're not allowed to buy beer, etc, etc, etc."
Funny.. I don't see how you're being oppressed by that particular law. The majority of the population doesn't care. Don't like it? Support and propose an amendment, and if it turns out that I'm wrong, and most people DO care, well then - law is changed!
You sound just like every other crazy broad I've ever met in Seattle. No wonder it's the worst city for dating in America. What is it about this town that drives people to insanity?
I can't disagree with anything you said. I grew up in the Seattle area (Bremerton), and spent a lot of time on what used to be the family farm in St. John, near Pullman. What was a profitable farm for the family fifty years ago just could not be maintained by my grandparents by the time the '80s rolled around. Equipment was becoming so advanced and expensive that the majority of harvest profits were just going towards paying off your loan on the new combine. So in the end, the land was leased out to a local farmer who covered a few million acres on multiple plots of land leased out to him.
It was certainly fun riding in the combines at harvest when I was young. For a long time I wanted to be a farmer, until I grew up a bit and realized how much back breaking work it is for little return. So now I do office tech support, which is almost the same thing:>
Oh and that comment about Seattle being unfriendly and uppity? So true. Seattle likes to bill itself as one of the friendliest cities on Earth. If that's not a horrendous case of false advertising, I don't know what is!
And I'm on the opposite end of the spectrum, wher I've found that many malware packages don't know what do when they are denied systemwide file and registry access, and as a result they just crash or bail out. I manage a couple of small offices, and with all users running XP with LUAs, nothing ever gets infected. Plus, if there is a piece of malware or virus that does infect their account, it makes things a lot easier for me to clean up. I don't have to start picking through system files, so I keep my hair a bit longer.
Also there is the added benefit that when they visit a site with IE, the newest exploit of the month isn't running as Administrator. I'd love to use Firefox, but a) I doubt Firefox will end up being that much more secure in the long run b) most state law online databases they use need IE, so kinda no choice there.
Of course rural America understands technology. Let's see you operate or repair some of the newer combines, tractors, or farm implements. Rural America has always pushed the bill on farm and industrial technology. There is no reason why computers couldn't be next. Hell, Gateway sprouted up in South Dakota, of all places. If a tech company can come into fruition in South Dakota, it can happen pretty much anywhere.
Good god I can't agree with this enough. I'm ashamed to admit it, but I can't view some music videos on MTV because their site detects that I'm using something other than Internet Explorer. Oh no, the world is ending. Of course if I fake the User Agent string, it works fine.
I'm curious as to why you said "Wait," and then proceeded to correct yourself within your own paragraph. I mean, they call it an "edit form" for a reason. You can edit what you've typed.
Yes, but it stops the overwhelming majority of exploits, malware, viruses from infecting the entire system as you describe. In fact, few of them will successfully infect the user's account, as they are all designed to the premise that the user will be Administrator.
"So far on Windows I have yet to find anything like su or sudo."
Hi. You can run most programs, shortcuts, control pannel applets, and the like, by holding down the shift key, right-clicking on the item, and clicking "Run As." There is also a "runas" CLI-mode tool for use in automating shortcuts to run with alternate user credentials.
These tools allow you to start programs as another user without logging out.
My cousin got XM for Christmas. I was riding with him last week, and on a number of music stations, there were commercials for "Xantrax 3 Diet Pill" or whatever the hell it's called. The commercial title even showed up on the player screen.
It won't be long until satellite radio is equally infested with commercials. They don't care that you're already paying for it. The more money they can rake in, the better. Cable and satellite TV subcribers have already forgotten that the biggest selling point of cable and sat were, you guessed it, no commercials. Now look how things are.
Slashdot Mirror
Oh look. Another fluff study done almost entirely by statisticians so that they could suck up grant money and waste my tax dollars. Really important research you're doing there, guys. Children entering puberty at an early age MIGHT get into fights or have sex more early? So what? When did our society define the age at which these acts should first occur? I must have missed that.
OP was talking about locking down an office machine. I wouldn't expect an average user to ever have to do this kind of thing.
But the registry entries are in HKLM\Software\Microsoft\CurrentVersion\Run, right? If so, you can point these entries to the appropriate shortcuts. If not then maybe you are out of luck :)
Make a shortcut for McAffee that starts all of its required processes as an alternate user. You can do this by either A) putting "runas [command] /savecred" in the shortcut, or B) click the Advanced button in the shortcut properties, and check "Run with alternate credentials." The disadvantage to option B is that you can not save the password. Option A with "/savecred" will save it so that the user doesn't have to enter a password.
They are fully present. Limited privelege users, runas, the whole works as far as Windows is concerned. You can keep telling yourself that, though.
Which tools? Vista with SUA provides the majority of standard Unix networking tools.
Yeah, let's use an operating system that's deader than OS/2. Surely it will work out just fine, and we'll never encounter any issues that will require support - which, of course, doesn't exist. But that's fine, since it's "secure."
Visit vorck.com and find out.
Note that IE being removed from Windows does break some very important things. The first one that comes to mind is the Add/Remove Programs control panel applet, which uses MSHTML to render all UI elements.
"The American consumer benefits greatly from trade with China"
Read: The American consumer benefits greatly from the complete destruction of America's manufacturing industry. But at least this Chinest crap is cheap, right?!
"Don't you realize how oppressive America is? You can't even show a naked ass in late-night network television or say 'fuck'!"
I guess you've never watched most public access channels in Anywheretown, USA. Such is common on late night public access. Network television doesn't show this sort of crap because a) advertisers don't like being associated with it, and b) they're too busy showing infomercials at late night, anyway.
"You can vote but you're not allowed to buy beer, etc, etc, etc."
Funny.. I don't see how you're being oppressed by that particular law. The majority of the population doesn't care. Don't like it? Support and propose an amendment, and if it turns out that I'm wrong, and most people DO care, well then - law is changed!
Hmm.. Imagine if AMD's Athlon had turned out like Intel's Itanium. I wonder if someone like Cyrix would have stepped up to the plate against Intel?
You sound just like every other crazy broad I've ever met in Seattle. No wonder it's the worst city for dating in America. What is it about this town that drives people to insanity?
http://seattle.shmeng.com/
Okay. I know they're bad and all, but maybe you should tone it down a little? You're more than paranoid.
I can't disagree with anything you said. I grew up in the Seattle area (Bremerton), and spent a lot of time on what used to be the family farm in St. John, near Pullman. What was a profitable farm for the family fifty years ago just could not be maintained by my grandparents by the time the '80s rolled around. Equipment was becoming so advanced and expensive that the majority of harvest profits were just going towards paying off your loan on the new combine. So in the end, the land was leased out to a local farmer who covered a few million acres on multiple plots of land leased out to him.
:>
It was certainly fun riding in the combines at harvest when I was young. For a long time I wanted to be a farmer, until I grew up a bit and realized how much back breaking work it is for little return. So now I do office tech support, which is almost the same thing
Oh and that comment about Seattle being unfriendly and uppity? So true. Seattle likes to bill itself as one of the friendliest cities on Earth. If that's not a horrendous case of false advertising, I don't know what is!
And I'm on the opposite end of the spectrum, wher I've found that many malware packages don't know what do when they are denied systemwide file and registry access, and as a result they just crash or bail out. I manage a couple of small offices, and with all users running XP with LUAs, nothing ever gets infected. Plus, if there is a piece of malware or virus that does infect their account, it makes things a lot easier for me to clean up. I don't have to start picking through system files, so I keep my hair a bit longer.
Also there is the added benefit that when they visit a site with IE, the newest exploit of the month isn't running as Administrator. I'd love to use Firefox, but a) I doubt Firefox will end up being that much more secure in the long run b) most state law online databases they use need IE, so kinda no choice there.
Of course rural America understands technology. Let's see you operate or repair some of the newer combines, tractors, or farm implements. Rural America has always pushed the bill on farm and industrial technology. There is no reason why computers couldn't be next. Hell, Gateway sprouted up in South Dakota, of all places. If a tech company can come into fruition in South Dakota, it can happen pretty much anywhere.
Good god I can't agree with this enough. I'm ashamed to admit it, but I can't view some music videos on MTV because their site detects that I'm using something other than Internet Explorer. Oh no, the world is ending. Of course if I fake the User Agent string, it works fine.
Have you read anything about Intel chips since, oh... 1998?
http://en.wikipedia.org/wiki/SSE3
I'm curious as to why you said "Wait," and then proceeded to correct yourself within your own paragraph. I mean, they call it an "edit form" for a reason. You can edit what you've typed.
Or you can use NetBSD, from which OpenBSD is taking all of its SPARC SMP code. 'Cause it actually works.
Yes, but it stops the overwhelming majority of exploits, malware, viruses from infecting the entire system as you describe. In fact, few of them will successfully infect the user's account, as they are all designed to the premise that the user will be Administrator.
Can it cheer me up when I get shot down repeatedly at the bar?
"So far on Windows I have yet to find anything like su or sudo."
Hi. You can run most programs, shortcuts, control pannel applets, and the like, by holding down the shift key, right-clicking on the item, and clicking "Run As." There is also a "runas" CLI-mode tool for use in automating shortcuts to run with alternate user credentials.
These tools allow you to start programs as another user without logging out.
I guess I must have been imagining this commercial that had it's own description line on the display on multiple stations?
My cousin got XM for Christmas. I was riding with him last week, and on a number of music stations, there were commercials for "Xantrax 3 Diet Pill" or whatever the hell it's called. The commercial title even showed up on the player screen.
It won't be long until satellite radio is equally infested with commercials. They don't care that you're already paying for it. The more money they can rake in, the better. Cable and satellite TV subcribers have already forgotten that the biggest selling point of cable and sat were, you guessed it, no commercials. Now look how things are.