2 Managing User Accounts and Privileges
User account must be carefully managed, especially those accounts that have unlimited (administrative) right on that computer. Users who need administrative powers on a particular computer should be assigned two account: one with administrative rights and another that has only limited privileges. Users should log in under their limited account to perform routine daily duties. It is especially important that they be logged into their limited regular user account when browsing the machine. Whenever authorized employees need to exercise their administrative rights, such as to install new software, they can do so by running only that specific command as an administrator. In the Windows system, this involves right-clicking on the desired command and selecting the RunAs option, then entering their administrative credentials at the prompt. The su (supper user) command does the same thing in Unix/Linux systems.