Log in to Windows with least privilege

Usually, when you install Windows(tm), after installation you’re granted with Admin rights – very convenient to install programs initially, and configure your system.

What people don’t do afterwards, is create a user with Guest priviledge and use it for their daily tasks!

So what you should do?

Once all your applications are installed and your system is fully configured with drivers etc, click on Start – > Run – > type lusrmgr.msc, press Enter, right-click on Users, create a new user, choose a nice password for it, Clear the check-box “User must change password at next log on” . OK. Next, right-click on the user you created, choose Properties, click on the Member of tab, remove Users group, click Add, type Guests in the box, click Ok.
Right-click on the Admistrative user you used until now – be it Administrator and/or other user you selected during installation – and set a long, nice, hard to guess password for it using “Reset Password”. Make up something like “thisisalongandeasytorememberpassword” – some sentence only you know and will never forget, but is impossible for others to guess.

Next time you log in to Windows, choose the Low-priv account you created, and use it for your daily tasks – browsing, working, etc – when you need to perform any administrative tasks, just right-click on an installation file or other executable, choose “Run As”, and type in your Administrative credentials.

Done!