0
1
In order to increase security while browsing, I would like to launch the browser as a separate user. Several people suggested the runas command, but it lacks the ability on purpose to pass the password in the command line. savecred provides the option to save it for business editions, but not everyone in my family has one. Entering the password every time is not an option - people won't use it then.
Can I achieve running the browser as another, password protected user without entering the password each time with a stock Windows 7 Home?
If not, which open source or freeware program does provide this functionality?
Stefan K.
Posted 2013-01-28T13:06:27.257
Reputation: 171
How exactly does this increase security? – Ramhound – 2013-01-28T14:01:29.040
@Ramhound I presume Stephan intends to run the browser as a lower-permissioned user, e.g., as a guest rather than as a member of the administrators group. – Nicole Hamilton – 2013-01-28T16:55:31.237
exactly. BSI (German department of security in information system) 'suggests' it http://www.heise.de/security/meldung/BSI-Test-Verwundbarkeit-von-Windows-Rechnern-im-Netz-1748721.html
– Stefan K. – 2013-01-28T16:57:24.387@NicoleHamilton - IE can be run by a normal user level account. I don't see how running say IE as another user achieves anything. Any user level exploit would still result in an infection. – Ramhound – 2013-01-28T16:58:33.900
@Ramhound The whole objective of any hacker is to get his code to run on your system by way of an exploit. Assuming he's successful, it still matters whether his code runs as guest versus admin. – Nicole Hamilton – 2013-01-28T17:46:39.813
@NicoleHamilton - I am saying that your user's account should already have the lowest privilage required to function. So unless there is a specific reason another user's profile should be used what the author is trying to solve the wrong problem. – Ramhound – 2013-01-28T18:36:25.640
@Ramhound And what I'm saying is most of us don't run as guest all day. We're probably members of the admin group, just not running elevated. We do that because that is the privilege level we need to get our jobs done. But that's more privilege than is typically needed for browsing, which is what Stefan is concerned about. – Nicole Hamilton – 2013-01-28T18:43:08.837
I should note the http://www.heise.de/security/meldung/BSI-Test-Verwundbarkeit-von-Windows-Rechnern-im-Netz-1748721.html actually said something else entirely. It basically said don't use an administrator account it did NOT say to run a browser as another user while logged into a administrator account.
– Ramhound – 2013-01-28T18:45:18.320He is asking about a HOME PC. Using a regular non-administrator account should be enough for your typical non-expert. – Ramhound – 2013-01-28T19:52:43.993