From  CertCities.com
Column

Safe Browsing with Non-Administrative Privileges
I am running Windows XP SP2 with Internet Explorer 7 on my desktop. How can I safely browse the Internet with non-administrative privileges?

by Zubair Alexander

1/23/2008 -- Unlike Windows Vista -- which offers better protection for your computer in several ways, including the ability to run Internet Explorer in Protected Mode -- Windows XP doesn't have the same types of options.

There are several ways to deal with this issue. On Windows XP, my preferred method is to take advantage of the psexec.exe utility from Microsoft. You can download psexec.exe at no charge from Windows Sysinternals and then configure the shortcut that launches Internet Explorer as described below:

1. Make sure that psexec.exe is in a folder that's available on the path, or copy it to a folder that's on the path (e.g., C:\Windows).

2. Right-click the Internet Explorer icon and select Properties.

3. Click on the shortcut tab.

4. In the Target box, add the following command at the beginning of the path:

C:\Windows\psexec.exe -L -D

For example, if you copied the psexec.exe to C:\Windows path, add that line at the beginning and click Apply. Your entire path should look something like this:

C:\Windows\psexec.exe -L -D "C:\Program Files\Internet Explorer\iexplore.exe"

5. After you make this change, you may want to reset your icon. Click Change Icon on the shortcut tab and select the Internet Explorer icon from the shell32.dll file.

Now, whenever you start Internet Explorer, it'll run as a limited-user account. The -L switch in psexec.exe runs the process with non-administrative, limited-user credentials. On a Windows Vista computer, the process runs with low integrity. The -D switch ensures that the process won't wait to be terminated and it makes the command window disappear soon after the application is launched. On a slower computer, you may notice the command prompt window flash for a second and then disappear. On faster computers you may never notice the window.

If you need to occasionally run Internet Explorer as an Administrator, then you may want to make two shortcut icons for Internet Explorer on your desktop -- one to launch it as an Administrator and the other to launch it is a limited user. Rename the shortcuts accordingly, something like "IE Admin" and "IE Limited." Use the "IE Limited" icon for daily use and only use the "IE Admin" icon when necessary.


Zubair Alexander, MCSE, MCT, MCSA and Microsoft MVP is the founder of SeattlePro Enterprises, an IT training and consulting business. His experience covers a wide range of spectrum: trainer, consultant, systems administrator, security architect, network engineer, author, technical editor, college instructor and public speaker. Zubair holds more than 25 technical certifications and Bachelor of Science degrees in Aeronautics & Astronautics Engineering, Mathematics and Computer Information Systems. His Web site, www.techgalaxy.net, is dedicated to technical resources for IT professionals. Zubair may be reached at .

 

 

top

Copyright 2000-2009, 101communications LLC. See our Privacy Policy.
For more information, e-mail .