As someone who runs a limited privileges account in Windows XP I was somewhat dismayed to discover that with Internet Explorer 7 Microsoft have broken one of the major tricks for running an efficient locked down system.
As the primary computer user, I do a lot of ‘Administrative’ type tasks: Installing/Removing applications, adjusting web server and database settings, tweaking file system permissions, and so forth. Remedial tasks.
Ordinarily, with a limited account, you would do this by switching user to Administrator and then switching back, but, with a bit of agility, you can also open an Explorer window with Administrator rights from within the current session. This uses the “runas” command line app and Steve told me how to do it a long time ago.
Create a new shortcut with the following as a command line:
%windir%\system32\runas.exe /U:Administrator /savecred /noprofile "c:\program files\Internet Explorer\iexplore.exe \"c:/\""
On first-run it will prompt for the ‘Administrator’ user’s password and remember it for future use (the /savecred switch). It opens an Internet Explorer window, pointed at ‘C:\’. You can use it to manipulate the computer as Administrator without leaving your Restricted User desktop. Any application you launch from within it will also be launched as Administrator.
Thorough background aside, I’ve stumbled upon the knowledge that Internet Explorer 7 breaks this behaviour (I’ve lost the source, sadly). Assuming this is the case and after getting over the amusement of Microsoft making it even harder to run a secure Windows set-up, I need an alternative.
There are a number of standalone file managers in existence but some of them look rather OTT for my purposes. I’m be quite happy with something with similar features to Explorer. So if you, dear reader, know of a reliable and well made Explorer replacement I would love to hear suggestions.
I’ll be sure to follow up with reviews in a few weeks.
Thank you.