Standard user able to install software?

[Vincenzo]

I use a standard user account for my day to day computing. Today I installed the Google Chrome beta and it fully installed without ever asking for the elevation to administrator. I thought standard users could not install software. Any ideas what happened here?

Thanks

 

[TonyTiger2004]

Check this out, May be able to help you.

http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

 

[logicearth]

Google Chrome installs itself in the User directory. There is nothing stopping a user from installing or running applications as long it doesn't require administrative power. These applications, however, will only function and be restricted to this single user. Sandboxed if you will.

 

[Vincenzo]

Thanks, logicearth. You are correct, it did indeed install in User folder.

 

[Vincenzo]

I have to admit I have doubts about the security benefits of running as a standard user.

Since malware can install itself into a user folder without the elevation prompt appearing, it seems like the hoped for security benefit is lessened. The fact that the malware would be limited to just the one account still gives it access to usernames, passwords, credit card info, that is entered into that account.

I am aware that the malware cannot make system wide changes, but it could also just wait until the next rights elevation occurs, and then do it's dirty work at that time.

 

[logicearth]

So Microsoft should make it so as a Standard User a user should not be able to run applications at all?
Yeah...that is going to end well.

Malware that did not get system privileges is far more easy to remove then malware that has been installed with system privileges. The trick is not getting it in the first place. Also a keylogger is impossible to create with only standard user privileges. Without the ability to hook into the kernel it cannot capture key strokes.