"JamesJ" <firstname.lastname@example.org> wrote in message
> Since lurking in this ng I've learned that creating a
> non-administrative user account will enhance security.
Creating *and using* a LUA (Limited User Account) for your day-to-day
> How does this work?
....by offering the programs that you run less privileges than they would
have, had you executed them in any of the more privileged accounts.
Sort of 'minimalist' in the sense that programs are only given enough
power to do what they must - and any malware leveraging a flaw in one of
those programs would be as limited in scope.
> I'm the only user and the Administrator. If I create another
> account will I need to create a password for both accounts?
No, but you can if you want to.
> When my system starts will I be prompted as to which user is to log in
> or can I select a user to automatically log in?
I haven't done it, but I believe you can auto logon to the LUA.
My Vista machine has each family member as a separate passworded logon -
plus the Protected Administrator account (which I seldom use).
> Can I delete the user account using Vista Basic?
What user account are you planning to delete - and when?
Deleting or demoting the last available administrator level account is
*not* a good idea - does that help?
As Malke suggests, create at least one *other* admin level account
before attempting to demote or delete any of your previous ones. It is a
good idea to have a spare, so that you don't have to activate the hidden
"Built in Administrator" account to get out of a jam.
Vista hid that "Real Administrator" account as a way of enforcing the
use of LUA upon the user (as the "Protected Administrator" account can
somewhat mitigate the 'malware runs as admin' scenario).
Still, to avoid those annoying elevation prompts (security can be such a
pesky thing), people will still migrate toward 'admin' - but on Vista
you will still have "Consent Prompts" so Protected Admin loses some of
it's sex appeal (no substitute for the real thing). This prods users
even further into userland where they belong or makes them defeat the
whole thing they call UAC because it is such a PITA.