Limiting the ability of Win8.1 user to 'hurt' themselves?

[theonedub]

I bought my sister a new laptop and I am a little concerned about her getting duped into installing unnecessary software, search toolbars, virus 'removal' and other crap more educated users, like us, would never be tricked into installing.

What I want to know is what is the best way to limit her account so that she doesn't have the rights to allow such software installations, etc? I'd appreciate Windows Account level settings I should look at and ways to secure the browser, too. She has to use Flash and Java so I don't think I can even run NoScript without creating a huge roadblock for her.

 

[newtekie1]

Create two user accounts. One for you that is full admin, and her account that is just a standard user.

 

[theonedub]

Is it really that simple? I know there is legitimate software she will have to install down the line- will she have to call me every time for my admin pass?

 

[newtekie1]

Yep, she won't be able to install anything without the admin credentials.

 

[blobster21]

will she have to call me every time for my admin pass?

yes indeed

 

[Pill Monster]

Yeah user or guest account is easiest way unless u feel like diving into Group Policy. Your patience might be tested tho if she starts calling every 2 days wanting software installed. I know mine was after trying the same thing with my parents..

 

[Nosada]

Not wishing to advertise any software, but this might be what you are looking for if you do not wish to simple lock her down into a user account with limited rights:

http://www1.k9webprotection.com/

I know the site looks cheesy, but I can vouch for the software. Using it for 3 kids, one clueless grandma and one older man with "special" browsing habits, and it has kept all 5 computers clean for close to half a year now (combined with chrome/adblock+ and MSE).

EDIT: If you are not on-site and you know she'll run into trouble, TeamViewer is a lifesaver. Make sure to create an account and make the software run at boot, and you are golden.

 

[Mindweaver]

Word to the wise if you give her the password then she'll just use it every time something stops her. Most users won't even read the message.. they will just type the password with out thinking.

 

[brandonwh64]

honestly just image the stock laptop before she gets started with it and let her go. Once its so bad you cannot get rid of the malware just format and reimage.

 

[xvi]

Can confirm that setting up separate administrator (you) and user (other person) accounts will help keep the computer clean, but malware, ahh, finds a way. Granted the malware that gets on there is MUCH easier to clean out and is GREATLY reduced.

As you mentioned, yes, if you need to install anything legitimate, you'll need to enter the password. For this, I honestly recommend TeamViewer (or something similar) to allow you to just hop on the machine wherever it is and do whatever work needs to be done. Yes, she'll have to ask you do to anything, but you could make it a habit of checking the PC every week or so and doing updates and whatnot.

Edit: Lots of good suggestions in here though.

 

[theonedub]

Teamviewer! Excellent idea, I completely spaced on that. I will install that and make her a standard user. Plus I can do everything from my phone if needed

I was basically reimaging her last laptop whenever it would get trashed but now I'm more concerned about software stealing her passwords, banking details, etc. So now my focus is on prevention.

Thanks for all the suggestions

 

[xvi]

As a bonus, to make software updates easier, I reeeeallllly like ninite.com. Close everything, run ninite.exe as admin, and just let it run.

I've been thinking about setting up something in Windows' task scheduler to launch Ninite with admin privileges in the background weekly. Ninite would prefer you instead get their "Ninite Updater" version ($10 a year) which does it all automagically. (Worth it since it supports the creator, imho)

(..and Ninite Pro is IT department maintenance pr0n, honestly.)

 

[Pill Monster]

Teamviewer rocks, and it's so easy to use.

Specially handy if you're a Nigerian Microsoft rep who must do virus removal for some computer-literate housewife in the UK

 

[Nosada]

I reeeeallllly like ninite.com

Seconded, thirded, fourthed, ..., googolplexianed

How can I forget ninite.

If you are frequently called in to install, reinstall or update PC's, ninite is pretty much a life-saver. Yet, it's easy enough that even a first-time user can cut down his time-to-install by several tens of minutes. On average, I install about 19 programs/runtimes on a "fresh" computer. Doing this manually would take the better part of an afternoon, and I would have to pay attention not to accidentally install any browser-bars or the like. Using ninite it takes about 5 minutes of setup (tops!) + ninite's unattended run, which depends on download speeds mostly.

 

[rtwjunkie]

Not wishing to advertise any software, but this might be what you are looking for if you do not wish to simple lock her down into a user account with limited rights:

http://www1.k9webprotection.com/

I know the site looks cheesy, but I can vouch for the software. Using it for 3 kids, one clueless grandma and one older man with "special" browsing habits, and it has kept all 5 computers clean for close to half a year now (combined with chrome/adblock+ and MSE).

EDIT: If you are not on-site and you know she'll run into trouble, TeamViewer is a lifesaver. Make sure to create an account and make the software run at boot, and you are golden.

I can double-confirm what awesome software it is! I used it for my kids, my ex father-in-law with "special" browsing habits, and a good friend has it on my recommendation for his kids. It is probably the best Parental Control type software out there, as well as being useful to limit what sites get visted and what software can be installed!

 

[theonedub]

Teamviewer is working great, and setting her as a standard user locks down installs, too. It does not prevent her from installing Apps from the Windows Store though- are those screened like Apple or is it a free for all with nasty programs like Google Play? Should I be concerned?

I installed ABP, but is there anything I can do to get NoScript like functionality, just not as severe? I mean without knowing how to grant temp or permanent permissions, NoScript can 'kill' your browsing experience.

 

[xvi]

Teamviewer is working great, and setting her as a standard user locks down installs, too. It does not prevent her from installing Apps from the Windows Store though- are those screened like Apple or is it a free for all with nasty programs like Google Play? Should I be concerned?

Hmm. Yeah. Window App store isn't monitored all that well. I don't know of any solutions other than to disable it somehow (figure out which server it's trying to point to and block it in the hosts file?).

I installed ABP, but is there anything I can do to get NoScript like functionality, just not as severe? I mean without knowing how to grant temp or permanent permissions, NoScript can 'kill' your browsing experience.

One of the AdBlock lists would probably be the best bet, but if you want a little more privacy on top of that, perhaps check out Ghostery. It'll allow everything by default, but it'll kill a lot of the privacy/advertising stuff if you turn it off.

 

[Nosada]

It does not prevent her from installing Apps from the Windows Store though

I don't know how comfortable you are with regedit, but this will disable the store:

The .reg files below are for the registry key and value below.

HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsStore

RemoveWindowsStore DWORD

0 = Enable Store
1 = Disable Store

 

[Frick]

ninite.com

Ohmegod where have you been all my life? I CANNOT STRESS HOW AWESOME THIS IS!

 

[RejZoR]

Yep, she won't be able to install anything without the admin credentials.

You can install her Portable Apps launcher. It works under restricted accounts, she'll be able to install wide selection of useful apps and use them, but without the ability to mess up anything (since it'll be a limited account).

 

[Atomic77]

There is the little thing called remote assistance where someone can go into your PC. I don't really know if that really has anything to do with the topic though.

 

[Blue-Knight]

There is the little thing called remote assistance where someone can go into your PC. I don't really know if that really has anything to do with the topic though.

I got an intruder on my PC controlling my mouse when I installed that on Windows... I powered off immediately! LOL!