This is OT for this forum, I know, but if I ask in an XP, etc forum, I am less apt to get answers from network admins, and that's what I am looking for. I've always limited users local rights to Power User, with the logic being this would prevent them from inadvertently having a virus installed on their computer. Turns out that is wrong. Someone got one of those "you need to buy this anti-virus scanner software now, your computer is infected" viruses. How is that even possible? A "virus" is software. How can it get installed without Admin rights? Frustrating.

Hi John, I'd like to inform you that running as a non-admin account mainly helps you control what the user can install and configure on the system, not what an attacker or malicious software can do. Most of the things that malicious software wants to do, it can do as a non-admin. Most viruses don't try or need to use any administrator privileges. For any virus related issue, I suggest you try a free online virus scan on the following site: http://safety.live.com/ Meanwhile, if you need more help with virus-related issues, please contact Microsoft Product Support Services. For support within the United States and Canada, call toll-free (866) PCSAFETY (727-2338). For support outside the United States and Canada, visit the Product Support Services Web page (<http://support.microsoft.com/?pr=SecurityHome> ). Thank you.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi John, I'd like to inform you that running as a non-admin account mainly helps you control what the user can install "Install", as in software. I agree. And a computer virus is "software". It's a computer program. "Most of the things that malicious software wants to do..." On that point we agree. That a virus is "software". Doesn't make sense to me. I guess this isn't the place to get an up-front answer to this question.