Question

You are told that you should not log on to your local computer running Windows 7 as a domain administrator. However, some tools run only as a domain administrator. What should you do?

Answer 1

To run tools that require domain administrator privileges on a local Windows 7 computer create a standard user account and use the 'Run as Administrator' option or the 'Runas' command for those specific tools following the principle of least privilege.

Step-by-step explanation:

You are told that you should not log on to your local computer running Windows 7 as a domain administrator. However some tools run only with domain administrator rights. In this scenario, you should create a standard user account on your local computer for everyday use and employ the principle of least privilege. When you need to run tools that require domain administrator privileges you can use the "Run as Administrator" option by right-clicking the application or utilize the Windows 7 built-in feature called User Account Control (UAC) to elevate your permissions temporarily.

Another approach is to use the 'Runas' command which allows you to execute a program under a different user account. By adopting these practices you enhance security and reduce the risks associated with always operating as a domain administrator.