Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

User accounts

Sep 4, 2017 5:34PM PDT

I am confused with the directions in W7 for setting up safe user accounts - I need help!

Discussion is locked

- Collapse -
Clarification Request
Non admin account
Sep 5, 2017 8:21AM PDT

A limited, non admin account is sometimes referred to as a "safe user", and it's better than running in an admin account on windows, or any OS for that matter, other than when needing to install new software or run any restricted programs. There is another type of account other than admin and limited user, and that's a guest account. So, you can setup one of each and try each one out and see if you can be satisfied with a limited account or a guest account for your personal account.

- Collapse -
Users accounts
Sep 5, 2017 2:13PM PDT

When I bought my W7 (6 yrs ago) I set up an Administrator and a Standard account. I also have a new laptop w/Windows 10. (I hate W10) I use my old standby W7 because I am so comfortable with it and it zips along much faster. I was preparing for MS to no longer support OS7. Surely by then I will have learned to work w/W10. What ever account I have been using I am able to download programs, etc. I have never used "Guest" as I am the only user in this house.

I presume "safe user" is referring to my "Standard" - right?

- Collapse -
Answer
No confusion at all.
Sep 4, 2017 5:41PM PDT

There is no such thing as a safe user account. Can you share who wrote there is such in Windows?

Post was last edited on September 4, 2017 9:18 PM PDT

- Collapse -
user accounts
Sep 4, 2017 9:03PM PDT

I feel nothing is safe on this demon machine. However - if I can make it a little more difficult for hackers to find a place to roost - I will. I have had this article for quite sometime so it is difficult to recall - but I do remember that I did not want to write all the instructions down - I do this whenever there are instructions on how make safety changes on my PC. I always think I will need to have info handy if I have a problem-solving issue. I am not real literate when it comes to computer shenanigans. And that is why I did not understand "current account" terminology.

- Collapse -
Hackers? I've yet to see that happen without help
Sep 4, 2017 9:22PM PDT

The user usually has to install something or fall for some social engineered advice.

https://en.wikipedia.org/wiki/Virus_hoax is the tip of the iceberg of information but as long as the user (even on a limited account) falls for the hoax, it's still possible to leak information or wipe out a Windows PC.

This is why backups on today's smart phones and PCs is not optional.

Anyone that tells you that "Norton" or any other title will fix this, is not well informed.

- Collapse -
Hackers
Sep 5, 2017 3:01AM PDT

Turn on the windows firewall.
Install an AV product
Keep the machine patched.

After that it all goes back to the user.
Most users won't spend any time learning how the machine functions.
They install all kinds of stuff and click YES or ALLOW for every message.
Open every email and attachment.
The result is a self induced problem.

- Collapse -
Hackers
Sep 5, 2017 7:21AM PDT

I really try to be very careful. I do not open attachments or emails unless I know the source. I use various AV products i.e Malware - Avast Premier - Spy-Bot - SuperAnti Spyware - etc. I keep updated for each product and most are in Start-up and set to run daily. I try to be alert of "phishing schemes" etc.. However - I am a "very old" senior citizen who is fast becoming paranoid of using the internet - and that is why I seek out "safe" forums to ask questions about instructions I do not understand. I read all the discussions on my topic to see if anybody has the same problem.

For example - I use PSI to make sure all my programs are up-to-date. I have one - HSXML 4.x - that I cannot update. I am told it is vulnerable - so here I go again ...

I appreciate your advice - Probably oldies, similar to me, have no business in this high tech stuff
(I compare it to getting to the age where somebody wants to take my car keys)Happy

- Collapse -
Bugs
Sep 5, 2017 7:49AM PDT

There's only so much you can do.
New bugs come out daily.
The anti products may take hours or days to send out an update.
If you get hit during that time delay then you have a problem.
That's why it's so important to make backups on a regular basis.
Spend a few minutes a day reading the forums and you'll pick up on tricks.
I've been using the internet for many years and I've never had a problem that I did not cause.

- Collapse -
Re: HSXML
Sep 5, 2017 8:05AM PDT
- Collapse -
HSXML
Sep 5, 2017 2:56PM PDT

I just reviewed an explanation of the program - muddy waters - has something to do w/documents. I googled the company's web site - thinking I would get the straight scoop.
I really did not find one word that made sense to me. (but that is nothing new)

Recently I downloaded HSXML 6 - which, according to alien reports, is supposed to be the update. I saved it then downloaded - never came up in my downloads. When I work up my courage - I am going to try to install again.

Thanks for your comments -

- Collapse -
Out of my league, but
Sep 5, 2017 4:40PM PDT

Are you talking about msxml?

Can you provide a link to this prog muddy waters?

- Collapse -
Out of my league
Sep 5, 2017 6:00PM PDT

I did know how to send the link - copy and paste? Anyway I wrote it down for you:

http://www.perfect XML.com/articles/XML4XSLTinMSX Author: Stuart Celarier

If this address did not work - I will try another way.

"muddy waters" was just my way of saying I could not understand what the author was saying. Happy

- Collapse -
Hsxml
Sep 5, 2017 6:49PM PDT

This appears to be some feature that programmers use to create stuff.
How did you get this?
What prog needs this?
The stock msxml should work fine for users.

- Collapse -
MSXML
Sep 5, 2017 8:18PM PDT

Do you mean where the MSXML came from? It showed up in my Secunia program that scans and tells me what programs need updated. It appeared as MSXML 4.x.
I do not know what programs it affects. I do not see just the letters MSXML (standing alone) anywhere in my downloads.

Here was the actual description: "Microsoft core services XML (MSXML)4.x".

- Collapse -
No
Sep 5, 2017 8:40PM PDT

You started talking about hsxml and now your talking about msxml.
So what is secunia saying?
Msxml updates should come with normal windows updates.
Are you updating your w7 OS?

- Collapse -
FWIW
Sep 5, 2017 9:29PM PDT

I just ran that pci on this w7 machine and it comes back as clean.
You have something else wrong.

- Collapse -
NO
Sep 6, 2017 5:34AM PDT

My error - it is ""MSXML". My updates are all set for automatic unless otherwise indicated.

- Collapse -
Updates
Sep 6, 2017 6:11AM PDT

I'm talking about Windows update not secunia.

Look in the control panel>windows update.

- Collapse -
Updates
Sep 6, 2017 7:33AM PDT

My Windows updates are set for automatic.

- Collapse -
MSXML is not going to get an update.
Sep 6, 2017 7:38AM PDT

So automatic updates or not, you have to either deal with the removal or let it be. YOUR CHOICE.

- Collapse -
user accounts
Sep 6, 2017 7:49AM PDT

I need to get back to user accounts - I have some questions: what happens when I change password for Administrator account? or for that matter "Standard account"? How does react to my programs? Is the Administrator password used to login to my laptop?

- Collapse -
Accounts
Sep 6, 2017 8:26AM PDT

If your the only user of this machine keep it simple.
Create an admin account and use it.
Now you won't need to jockey back and forth between user and admin to do things.

Keep good backups not because of the admin account but because stuff happens.

- Collapse -
Re: MSXML
Sep 6, 2017 1:42AM PDT

In my Windows 7 PC, maintained by our company IT-support, in Config Panel>Programs and Features, I find:
MSXML 4.0 SP3 Parser (KB2758694), current version 4.30.2117.0

No more MSXML in Config Panel. But in Windows\System32 folder, I find msxml3(r).dll, msxml4(r).dll and msxml6(r).dll all present, as they should be.

For the whole long history of XML in Windows, see https://support.microsoft.com/en-us/help/269238/list-of-microsoft-xml-parser-msxml-versions

But even as a programmer, I never worried about it. I trust Windows update for Microsoft stuff. My advice to you: do the same, whatever Secunia says about it.

- Collapse -
RE: MSXML
Sep 6, 2017 6:35AM PDT

I checked Windows system 32 and I found MSXML3.dll dtd 1/11/2017 and
MSXML6(r).dll dtd 8/27/2015.

- Collapse -
msxml
Sep 6, 2017 7:50AM PDT

That's exactly what I see on this w7 machine.
Which leads me to I never had msxml4 or some update removed it.

- Collapse -
Answer
To blow a hole in this idea. How about this article.
Sep 5, 2017 8:30AM PDT
https://answers.microsoft.com/en-us/windows/wiki/windows_7-security/there-is-no-greater-risk-of-malware-infection-for/00282c2c-a222-44ef-8c83-cf9e34731c06

"There is no greater risk of malware infection for an Admin user account than there is for a Standard user account."

There are some caveats like Windows 7 and how this may reduce the impact but the user files are still at risk rather than system wide.

Think about the recent Ransomware plagues and how that played out. That was partly due to an unpatched Windows exploit and from what we learned a limited account may not have stopped it.
- Collapse -
User accounts
Sep 5, 2017 1:50PM PDT

Thanks for the link. I have been using Administrator when a program asks for it - so your quote "There is no ...... user account" and the above link puts me somewhat more at ease. I admit I am lazy about backing up my files. I guess it it might be due to the fact I have never needed to use them.

Again - thanks for your comments.

- Collapse -
Answer
Time to remove MSXML 4.0?
Sep 5, 2017 8:57PM PDT
https://www.google.com/search?q=Secunia+program+that+scans+and+tells+me+what+programs+need+updated.+It+appeared+as+MSXML+4.x&ie=utf-8&oe=utf-8 finds what's going on. It's been abandoned and Secunia is telling you about it but not what to do.

Read https://forums.techguy.org/threads/secunia-reports-end-of-life-xml-core-services-msxml-4-x.1154534/ and there's a link on how to remove. The link was https://altonblom.com/s34e10/


THIS IS PRETTY TECHNICAL SO IF YOU FEEL OVERWHELMED TALK TO THOSE THAT SUPPORT YOU AND YOUR PC.
- Collapse -
Time to remove MSXML 4.0?
Sep 6, 2017 7:10AM PDT

Read the links and, yes, the steps for removal of MSXML 4 are overwhelming. But, then again, it just joins the "overwhelmed" state that I live with daily.Happy However - I prefer calling it "TS" which is short for "this sucks".

For the present - I think I will ignore Secunia update warning. Quoting Scarlett: "I will worry about that tomorrow".

- Collapse -
Answer
Getting back to User Accounts.
Sep 6, 2017 8:06AM PDT

" get back to user accounts - I have some questions: what happens when I change password for Administrator account? or for that matter "Standard account"? How does react to my programs? Is the Administrator password used to login to my laptop?"

If you change an account password nothing new going on here. It's changed for that account only. Other account passwords remain as they were.

The Administrator password is only needed to log in as the Administrator.

As to Applications, these don't care how you login most of the time. But there is one area to know about which is many games don't run on less than an admin account.

However it's poor security. I can use a NTPASSWD boot USB or CD and bypass this in about a minute.
Also the ransonware outbreak used an exploit that appears to not honor the limited user login. It did deep damage and reinforced what moderators have said for years.

"We only lose what we don't backup."

And more to the point, we can't go without backups on our smart phones, PCs and devices.

Post was last edited on September 6, 2017 8:17 AM PDT