Safer web browsing and e-mail

[GomJabbar]

I saw the following tip posted on the Opera forums. There is a program you can download from the Microsoft Developer Network Library called DropMyRights. This program allows you to run programs from an Administrator Account, but as a Restricted User. A couple of uses would be web browsing and e-mail. The information below is from 2004 and the program will run on Windows XP, Windows 2003 Server, and supposedly later versions of Windows.

DropMyRights is a very simple application to help users who must run as an administrator run applications in a much-safer context—that of a non-administrator. It does this by taking the current user's token, removing various privileges and SIDs from the token, and then using that token to start another process, such as Internet Explorer or Outlook. This tool works just as well with Mozilla's Firefox, Eudora, or Lotus Notes e-mail.

http://msdn.microsoft.com/en-us/library/ms972827.aspx

[yak]

So basically it's a UAC for XP?

[GomJabbar]

No, I don't think so. You start a specific program (such as your web browser or e-mail client) you want this to apply to from a shortcut in different directory. The idea is that malware won't be able to install itself if you click on a malicious link while you are web browsing, or if you open an infected e-mail. You can still use the same programs, i.e. web browsers and e-mail clients normally from a different desktop shortcut or Start menu choice.

[qviri]

.