Drop My Rights

DropMyRights is a tool written by Michael Howard that allows administrators to run internet-facing applications (such as email clients and web browsers) as a non-administrator. You can read about it and download it from his MSDN article "Browsing the Web and Reading E-mail Safely as an Administrator".

Since DropMyRights is a simple command-line tool, it can also be used to create "safe shortcuts" that always bring up an application as non-administrator:

There's a known limitation with using DropMyRights to run Internet Explorer in "C" or "U" mode when accessing web sites that require SSL or SSPI-based user authentication (e.g. NTLM). See this blog post from Mike Smith-Lonergan for details.

There are several useful comments in Michael's blog post about the article. In a follow-up blog post, readers contributed Shell Extensions so that DropMyRights can be invoked directly.

See other Useful Tools

http://nonadmin.editme.com/DropMyRights