How to properly set up accounts in Windows 10?

Question

Windows

Hello. I heard that using an administrator account is a bad idea for PC security. Is it worth it for a home computer to bother with creating multiple accounts if I live alone and only I use the computer? If so, what is the best way to set them up: create an additional account with reduced rights and sit under it, invoking the power of the Administrator to install programs, or what?

Answer 1

standard script - standard solution. during installation, it is proposed to create an account, by default it is a member of the "admins", but unlike the blocked built-in "admin", it works under UAC control. this is usually the best balance of control and comfort.
(whether to consider the built-in admin as a "super admin" or an analogue of root is already a holivar. UAC is disabled by default, this is enough for the "sudo su" analogy in linux, which is actually a sharp decrease in security)

Answer 2

Usually there is no point in such a situation.
UAC still works there.

Answer 3

Yes, this is the correct approach. Create a local administrator account during the installation process, then go under it and create a local user, and under it already do all other actions (including software installation). When you are logged in as a regular user, if you need to use admin rights, UAC will ask you for privilege escalation and an admin password. I have been doing this for a very long time, and in everyday life (when everything is already installed / configured), I need admin rights on my computer, God forbid, once a month. So I work as a local user, and if anything - UAC will ask for the administrator's password.
Working under the admin account, even with UAC control, is still fraught. There are ways to bypass UAC, and if you are logged in as an admin, bypassing UAC will give an attacker full admin rights. If you work as a user, then even by disabling UAC, the attacker will still get only the rights of a regular user.

Answer 4

Yes, this is the correct approach. But if you often install programs from Net \ Torrents (like Youtube downloader), download PDFs, click on links in the mail - then it's better to install Virtual Box, raise Windows there - create an Admin, disable UAC and work quietly. On the main Windows install only programs from 100% Trusted sources such as MS Office, Adobe Photoshop, etc. Yandex Disk.