Safer internet access

[junja]

Good day
I'm wondering if it's possible to achieve the security gains of accessing the net from a user, not admin, account while running as admin but without logging in as a user?

The 2k in question doesn't have any user accounts active because it has to start up unattended. There is though a user folder dating from the time there was one.

I can run the browser via a shortcut placed in the startup menu of this extinct user account. And said browser allows me to download stuff into folders outside the user a/c.

So running the browser this way achieve any extra security? If not, is there some other approach?

There used to be a page on all this on the old sysinternals site, but that's been swallowed into the Macro$oft maw.
Junja

 

[DelJo63]

BINGO! Good for you. I'm on Win/XP Pro and the concept is

create a shortcut to your browser on the desktop (btw: use Firefox!)
when needed, right-click and select RUN AS ...
enter the Limited User ID and the password​

This will run the browser under the credentials of the USER rather than the Admin.

Make sure the ADMIN has a password that is complex and unique from USER

Never installed win/2k so there may be alternatives to be discovered, sorry.

Personally, I login as USER and when needed, use RUN AS to get to ADMIN