Other Resources

Microsoft Bloggers

Aaron Margosis - the Non-Admin blog!
Eric Jarvi - see his security category
Eugene Siu
G Andrew Duthie - see his LUA category (and security category)
Jenni Merrifield - see her LUA category (and security category)
Michael Howard - see his security category
User Account Control Team - from the product group

Microsoft Support

lua-qa@microsoft.com - for any LUA questions or if you encounter a serious problem while running as LUA

Microsoft Webcasts

Defense in Depth Against Malicious Software (Level 200)
Phishers, Spammers and Scammers: Criminals of the Internet (Level 200)
Tools and Techniques for Securing the Desktop (Level 200)
Limited User Access: The Good, the Bad, and the Ugly (Level 300)
Tips and Tricks for Running Windows with Least-Privilege (Level 300)

Microsoft White Papers

Applying the Principle of Least Privilege to User Accounts on Windows XP - online TechNet article published January 2006, also available as a 25-page download. This is the single most authoritative source of LUA information published by Microsoft. If you're only going to read one document or download one tool, read this.
The Administrator Accounts Security Planning Guide - online TechNet article, also available as a 25-page download. For more details, see these blog posts from Kevin Remde and Steve Lamb.
How the right user account can help your computer security - from Microsoft's Security At Home pages

Other Bloggers

Brad Wilson - see his article on "Developing as Non Admin"
Don Kiely - see his security category
Josh Philips - see his UAC category
Keith Brown
Robert Hurlbut - see his security category
Valery Pryamikov
Rutkowska - see her UAC flaw analysis at http://theinvisiblethings.blogspot.com/2007/02/running-vista-every-day.html MS reply discussed at http://blogs.zdnet.com/security/?p=29&tag=nl.e589
Dominick Baier - leastprivilege.com

Other Sites

http://www.techproblemsolver.com/limited.html
http://del.icio.us/ - see what other people are bookmarking as "lua" and "nonadmin"
http://windowsconnected.com - Lots of useful UAC related content from actual admins.

Comments

From Matt Clapham [131.107.0.102] - 1/23/06 11:46 AM

Microsoft just published a new whitepaper, Applying the Principle of Least Privilege to User Accounts on Windows XP. Check it out at: http://go.microsoft.com/fwlink/?LinkId=58446

From jonathanh - 1/23/06 2:13 PM

Thanks Matt - it was already on my list of queued-up stuff to post. Good reminder to actually plough through that list :)

From Matt Fries [208.42.90.188] - 6/5/06 2:15 PM

I have created a little utility that essentially gives MakeMeAdmin a graphical user interface. It's called Adwin, and you can find it at my homepage. I administrate about 100 machines that are not members of a domain, so it's useful to just put it on a shared drive, and I can run it whenever I'm at a user's desk and need to elevate the user's privileges temporarily.

I also wrote it to be expandable, so other administrators can add commands to it, and the program will grow based on the needs of the people who use it.

�

Last Modified 4/22/07 7:37 PM