Security, multiple user accounts?

Discussion in 'OS X Mountain Lion (10.8)' started by InfiniteLoopy, Jul 17, 2012.

  1. macrumors 6502

    Joined:
    Dec 14, 2010
    #1
    With Mountain Lion imminent, I've been rethinking security.
    Up until now, I've never had a separate admin account. Is it still recommended to not have admin privileges for your everyday account?

    How does this work in practice? Currently, in my unique admin-level account I am sometimes asked for my admin password to install things. If my everyday account was not admin, would I have to enter an admin's username and password in order to install stuff?
    Is this done without leaving the everyday account or must I log into the admin account in order to install applications?

    I also wonder whether it would be worthwhile having another account, for non-Appstore, non-signed applications. This would effectively sandbox them from my everyday account, right?

    Also, what are your thoughts on apps like Little Snitch. Are they worth it?

    Thanks,
     
  2. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #2
    There is no disadvantage to using an admin account as your everyday account.

    Yes, for the most part. There are some apps that don't require a password to install.

    You can install apps from a standard user account by entering the admin password.

    No, as any apps are available to all users unless installed in the user's Application folder instead of the /Applications folder.

    Some like it. I tried it and found it to be more annoying than anything.
     
  3. thread starter macrumors 6502

    Joined:
    Dec 14, 2010
    #3
    Thanks.
    Are you sure that there is no disadvantage in using an admin account as my everyday account? I mean, I've been doing it for years, but I thought it wasn't recommended by Apple.
     
  4. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #4
    No, there is no advantage. The default account you set up when you first get a Mac is an admin account. Most users never set up another account.
     
  5. thread starter macrumors 6502

    Joined:
    Dec 14, 2010
    #5
    Thanks for your reply.
    I'm surprised though as I thought that running a non-admin account would prevent malware and other bad things self-installing...
     
  6. Mal
    macrumors 603

    Mal

    Joined:
    Jan 6, 2002
    Location:
    Orlando
    #6
    Nope. Mac OS X's authentication and permissions system don't allow any system-wide app installs without an admin password, even if you're already logged in as an admin. If you were running as root (an incredibly bad idea), then a password isn't required for that, but you have to really try to enable root and run it as default.

    jW
     

Share This Page