Windows Operating Systems have significantly less vunerability to security threats & most 'holes' are mitigated by the user not running w/ Admin Priviledges but, rather as a "Standard User". Certainly there is a wee trade-off due to the limitations of "Standard User" but, status can always be changed when needed.The following article is explanatory & interesting in regard to the above concept - http://news.zdnet.com/2100-9595_22-408772.htmlDrew - MS Partner / MS Beta Tester / Pres. Computer Issues

WARNING: One man's opinion follows. I'll agree that using a computer as a non-priviledged user seems a Good Thing at first blush, but... Windows UAC and protection schemes are not explained to the general public NEARLY well enough! Most folks (especially those coming from XP) have NO IDEA what "running with elevated privileges" means. Even system gurus barely understand UAC; I'm not sure ANYONE understands the installer... And file and folder permissions? Taking ownership? ACLs? Give me a break. Look at the number of people reporting problems in these forums who simply can't access their own files. I'd like to counter with this: FAR more vulnerabilities would be blocked if Internet Explorer simply did not allow the installation and running of Active content (e.g., ActiveX) by default. Instead, take the time to make Javascript better and require a full installation of anything fancier. Funny thing: Safari (for example) can put up a heckuva lot of "gee whiz" content (e.g., via Javascript) and yet it doesn't facilitate NEARLY the infection potential that IE does. Of course, much of the REALLY fun stuff comes in executable packages (or is facilitated by executable plugins like Flash), and we know there is a demand for all that glitz. So set high standards for such things. ActiveX was a wonderful, noble idea. Unfortunately, programmers on the wild Internet as a rule are neither wonderful nor noble - especially those who create advertisements. Thanks for trying it. But it failed. Antivirus / anti-malware software is not a solution for this either. At best it is a backup safety net. And a completely un-integrated one at that! In simple terms, Windows "security" is an afterthought at virtually every level. At best penny wise and pound foolish. I find it good that UAC can easily be disabled, insofar as that "wee trade-off" mentioned above becomes a huge disadvantage for a knowledgeable, sysadmin-level person trying to use Windows 7 to get Real Work done, and who just expects files to be files, folders to be folders, and tools to just run properly. We need LESS magic to protect us from ourselves, more TO WORK. And basic, common-sense security that is well-integrated. I'm sorry to be a nay-sayer, Drew, but IMO making Windows harder and harder to use by popping up prompts that people don't understand the need for (and thus will ultimately just answer mindlessly or work around entirely) isn't a good strategy in the real world! -Noel

I use Windows 7 with the UAC disabled. I use the Microsoft Security Essentials, and Windows defender is now included by default with Vista and higher. Its a start. I am also very grateful that Microsoft makes MSE available at no cost to licensees. There are other free programs, but the Microsoft tool makes any attempt to up-sell a user compared with the alternatives. I am amazed at the number of people who have no security software installed. Vote if answered or helpful, I am running for Office (joke)! IT/Developer, Windows/Linux/Mainframe RaidMax Smilodon, 680W, Asus M2NBP-VM CSM, AMD X2 4200+, 2GB DDR2-800, HD2400 Pro, more details on my site, need a new boot disk, existing one is 5 years old

As I am always equally & additionally amazed @ those who do not keep verions & definitions up to date for many things. OR neglect keeping 'junk' cleaned out & regular scans done.Drew - MS Partner / MS Beta Tester / Pres. Computer Issues

Drew, clearly Windows works best when one puts some effort into maintaining it properly. Clearly those of us who actively maintain our systems have proven Windows CAN be stable and be KEPT stable. But we are not the norm. Most non-techie folks with computers don't want to have to do that kind of maintenance, nor are they knowledgeable enough to do so - any more than they want to have to do (or are qualified to do) ongoing work to their television to keep it working. Imagine if just changing channels and watching your television caused it to slow down, become less reliable, and ultimately stop working altogether. -Noel

I know & that is certainly why folks like me are in business... to help such end users.Drew - MS Partner / MS Beta Tester / Pres. Computer Issues

. . . Windows works best when one puts some effort into maintaining it properly. Agreed - but it just seems to me there is a staggering amount of maintenance. That's time that I, for one, would like to spend doing other things... It shouldn't be impossible to have Mac/Unix-grade security just by clever partitioning (C: getting OS-install-size + x Gb to allow for servicepacks, protected, and use other partitions for temporary things) and access-rights to paths, and having software install to the user-space and never touching the registry (I suppose that's the 3rd party developer's task, though). I mean, the current setup with protected Program Files\ and open ProgramData\ and games saving in Documents/Saved Games is half-way there already.

I don't mean to be argumentative, but based on my own experience t's not staggering at all! What it DOES require is quite a lot of knowledge and experience to know just what to do (and what not to do) to keep that maintenance level down - to where all you really ever have to do is just USE Windows. I'm currently working on a guide to list that all in one place. It's a few (okay, a few tens of) steps taken during setup, a very few minutes every week or two checking under the hood to look things over, and a whole lot of just following good practices and safe computing. Here's an analogy: If you were to go wander around the seedy side of town naked, you would likely expose yourself to disease and danger. If you generally avoid those places, keep your windows rolled up and don't look anyone in the eye when you have to drive through them, and carry a weapon for use in last resort, you will be much safer. The point is YOU have to accept responsibility for what's running on - and thus the software health of - your computer. Virtually all of that responsibility is in learning to use it adeptly. -Noel

Aside from some 'Best Practices' in terms of 'safe surfing' / common sense, not going to iffy websites, opening certain E-mail, clicking caually on any & alll links offered...True, there is onus on End User BUT, it really isn't a daunting task. W/ certain settings the important things are automated... shut-down (sleep), MS Updates, A-V & A-M protection & scans (say w/ MSE, for example). The other important part is cleaning 'junk' out & w/ Disc Clean-up, Internet Options (Delete-Delete) & CCleaner used this becomes a quick, easy aspect, as well. Just this can be quite fine. W7 treated thusly will be & stay very happy. Small bit of attention & responsibility w/ BIG results. I, also, feel there should be a more widespread use of Parental Controls. I find too few parents aware of them or using them.IF, End Users have not picked up on the need for the above, it is up to IT Pros (& other sources) to try to educate, inform, advise, promote & guide.Drew - MS Partner / MS Beta Tester / Pres. Computer Issues

I agree with almost all of that, Drew, but I do not advocate the use of CCleaner nor any "magic registry maintainer". You simply do NOT have to "sweep through" your registry to keep Windows running well; it's a case where the software companies peddling such apps are trying to make their own market by making you think you do. Not only that, but it is virtually impossible for the author of any "magic registry maintenance application" to know in advance all the combinations of things that your system needs to be set in the registry, and such software can cause more problems than it clears. I RECOMMEND AVOIDING THESE APPS. Again I must reiterate, not installing every piece of trashware on the web, inadvertently or on purpose, is a MUCH better strategy than trying to "clean up" afterward. -Noel

I scan my system every day with an automatic scan at 2AM when I am out. It may be excessive but better is to catch it early if any malware finds its way into the system. Malware comes in so many ways today, its hard to figure out what is safe and what is not. So I strongly suggest using a security package, I like MSE, others like their choices. Like I said many times before, I am amazed at how many have no security software of any kind. Vote if answered or helpful, I am running for Office (joke)! IT/Developer, Windows/Linux/Mainframe RaidMax Smilodon, 680W, Asus M2NBP-VM CSM, AMD X2 4200+, 2GB DDR2-800, HD2400 Pro, more details on my site, need a new boot disk, existing one is 5 years old

Good for you! Should never be less than daily. I always get a chuckle from clients who ask or think, "Once a month or week?"Drew - MS Partner / MS Beta Tester / Pres. Computer Issues

Me too, I take security very seriously. I make a living cleaning up after idiots. Vote if answered or helpful, I am running for Office (joke)! IT/Developer, Windows/Linux/Mainframe RaidMax Smilodon, 680W, Asus M2NBP-VM CSM, AMD X2 4200+, 2GB DDR2-800, HD2400 Pro, more details on my site, need a new boot disk, existing one is 5 years old

Congratulations on your 4th medal, Vegan Fanatic. I heard from a friend I work with that his brother called and asked him to help clean up his computer, which wasn't working right. This brother is a completely non-technical person (he runs a nursing home in France), and has a Vista system that has been completely unprotected. Worse yet, besides using it for his own business he has two daughters who use it for fun and games. Apparently, when the Norton security software the machine came with a few years ago expired, rather than renew the subscription he disabled the software (or it disabled itself; not sure). In any case, as of late yesterday they had removed well over 200 viruses, adware packages, trojans, and 1.5 million files of malware, and they were working through reboot / clean / reboot cycles as the malware was fighting back. My friend has already advised his brother to take steps to change his financial account numbers, and they're very concerned that the nursing home data has been compromised. Yet another example that downloading and running everything in sight - and not keeping state of the art antivirus / antimalware running and up to date - is a bad scene. -Noel

Thanks Noel, I appreciate it. I have given a lot here, at least now my work is rewarded. Only one question, where is the check? There are so many like your friend's brother. There are so many like him all over. Its sad. Now you know why I post a link to MSE on my site. Its free, works on XP up. Vote if answered or helpful, I am running for Office (joke)! IT/Developer, Windows/Linux/Mainframe RaidMax Smilodon, 680W, Asus M2NBP-VM CSM, AMD X2 4200+, 2GB DDR2-800, HD2400 Pro, more details on my site, need a new boot disk, existing one is 5 years old