News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Jonathan Handler

    Forum Replies Created

    Viewing 15 posts - 1 through 15 (of 61 total)
    • Author
      Posts
    • Jonathan Handler
      AskWoody Plus

      I am also aware of a feature in Windows 10, called Quick Access, which is based on Microsoft’s Remote Desktop Protocol (RDP). Among people focusing on cybersecurity in Windows/Office365/Microsoft365, RDP is considered a protocol to NOT implement.

      I am hoping that someone reading this thread knows whether or not Quick Access is sufficiently limited in its functionality and well enough tested that it could safely be used as a more limited, more secure version of RDP.

      Anyone?

      Very truly yours,

      Jonathan Handler

      Jonathan Handler
      AskWoody Plus

      I do not know off the top of my head at this time. I remember that I liked having Windows 10 Pro in the beginning because I wanted the experience with Pro and wanted to take advantage of the Windows Update management opportunities with Pro when I started dealing with Windows 10 feature updates and quality updates.

      1 user thanked author for this post.
      Jonathan Handler
      AskWoody Plus

      PK,

      I understand you better now.  I am sure that I mentioned that before but I have not referred back to it until today.

      Doing this makes the Microsoft Account, an account which has other powerful properties, into a much more secure account.

      Do you agree?

      Jonathan Handler

      Jonathan Handler
      AskWoody Plus

      You are correct.  I am the founder of a one, soon two, person cloud services provider (CSP).  If I were not a CSP, I could use TeamViewer for non-commercial purposes.

      Very truly yours,

      Jonathan Handler

      Jonathan Handler
      AskWoody Plus

      Paul,  I continued to use Office 365 Business Premium after the story that I just wrote to PK.  One Day, a few months later, I spilled coffee on my earlier, original, Windows 2in1 and it couldn’t be repaired.  I used a local public library computer to access Office 365 Business Premium in the cloud for a few months and then bought the two identical computers.  The first computer I continued to use with Office 365 Business Premium in the cloud for a few months.  Then I upgraded the account to Microsoft 365 Business Premium in order to include Intune for systems management and additional security.  I find this to be an excellent bundle for functionality and a baseline for security, including Azure Multi-factor Authentication (MFA).

      Is that enough of an explanation?

      Very truly yours,

      Jonathan Handler

      Jonathan Handler
      AskWoody Plus

      PK: What I mean by least privilege is that I want to use a standard account and not an administrator account at all times, with the opportunity to move to an administrator account only when I need to be in an administrative account.  The first time that I saw the benefit of this was about a year ago, a few weeks after I had created a local administrator account on my previous system that was running Office 365 Business Premium (desktop applications and cloud services) for my solo entrepreneur business.  Once I had the local administrator account, I converted my Microsoft Account — which was set up by default when I first connected that system to the Internet — from its administrator account status to a standard.

      I received an email from a colleague on a weekend afternoon several weeks later in the Microsoft Account.  The email kicked off a message asking me to upgrade to my administrator account.  This struck me as odd.  I chose not to open the email. Instead, I sent a separate email back to the sender asking whether or not he had intentionally sent that message to me, telling him that I was surprised to see that email. He replied quickly that he had been hacked and that malware had sent the previous email to me.  I quickly marked the previous email as spam for Yahoo! email, which is what I use for my personal emails.

      Because of that experience, I consider always using standard accounts as a default to be a necessary part of cybersecurity.

      You can use BBCodes to format your content.

      Jonathan Handler
      AskWoody Plus

      Paul, PK,  I am the same person who started thread #2268761.  Please look at my messages there.  This is the “second identical HP Envy x360” that I mentioned in that thread.  This system will be sent to a co-worker in central Ohio once I have configured it the way that I want it to be for this person.

      I am going to give my co-worker the same flexibility that I have, even though my co-worker might not take advantage of it ever.

      From what I see in both threads, I want to first set up this computer under Windows 10 Home with a Microsoft Account. with 1) a userid and password and 2) a PIN.  While doing this I will make sure that Windows Hello and all other forms of lock screen authorization are turned off.

      Next, I want to set up a non-expiring local administrator account with a different unique password.  Once I have done all of this, I will restart the computer and test to make sure that everything works the way that I expect it to under Windows 10 Home.  This will ensure that this computer is set up with least privilege under Windows 10 Home.

      Now I can shutdown the PC, connect it via ethernet to the Internet and use the license from PC World to enable it as a Windows 10 Pro PC with least privilege.

      After doing all of this, the computer will be ready to have Microsoft 365 Business Premium installed on it.

      Am I correct?

      Very truly yours,

      Jonathan Handler

      in reply to: Windows 10 Local Admin Account Password Expired? #2277727
      Jonathan Handler
      AskWoody Plus

      PK, Paul, KP and Cijan:

      Thank you all for contributing to this discussion around my original question.

      I have no interest in this discussion continuing at this time, but I cannot tell whether or not I will have to look at it again in the future.

      I have come up with a very different question, for which I will next start another thread, tomorrow, after the Fourth of July ends.

       

      in reply to: Windows 10 Local Admin Account Password Expired? #2269398
      Jonathan Handler
      AskWoody Plus

      PK,

      I like your new idea of

      1,  First setting up the computer offline using Windows 10 Home to create a Local Administrator Account.  Then diverge from your idea.

      2.  Then staying with Windows 10 Home to create a Local Standard Account from the Local Administrator Account.

      3.  Upgrade to Microsoft 365 Business Premium with these two accounts established and download and configure its desktop applications.  Use the computer under this scenario until my relative comes up with a reason to need to have a Microsoft Account (I have no idea what it would be as I write this)?

      4.  Add the Microsoft Account when needed.

      This way there would be less chance for a hacker to get into the Microsoft Account.

      Very truly yours,

      Jonathan Handler

      in reply to: Windows 10 Local Admin Account Password Expired? #2268988
      Jonathan Handler
      AskWoody Plus

      Paul,

      Thank you for your reply.  Is there any way to get back to the point where I can reset the account to never expire?

      Since this system was upgraded from Home to Pro, when I first log in, I believe that I default to being outside of the protection of Microsoft 365 Business Premium, and, in fact, in my Microsoft Account.

      Even if I bought a system with a Pro license pre-installed, wouldn’t I default to logging in with a Microsoft Account?

      Very truly yours,

      Jonathan Handler

      Jonathan Handler
      AskWoody Plus

      PK,

       

      The two anonymous guest messages just now are from me, Jonathan Handler.  I forgot to check and see if I was stilled logged in here.  I wasn’t and I just fixed that.

      I am running Windows 10 Business v1909 Build 18363.720.  This is on an AMD system that has Microsoft 365 Business Premium installed.  Do you know any reason that I should be back on the .720 version?

      Jonathan Handler
      AskWoody Plus

      Woody, I have been using a new HP Envy x360 that has an AMD Ryzen 5 2500U processor and an AMD Radeon Vega Mobile graphics chip since shortly after Christmas.  It is running glitch free now.  There was a problem with the display going black infrequently but that problem hopefully is going away today because I downloaded my “April Update” this afternoon.  The only updates were a driver update:

      Advanced Micro Devices, Inc. – Display – 26.20.11008.6001

      Successfully installed on 5/10/2020

      and two (security) Definition Updates also dated today.

      The last Microsoft Quality Update received was

      2020-02 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4537572)

      Successfully installed on 4/5/2020

       

      If this is a new normal, I really like it.  Is Intel doing this well?

      If not, it may be a long time before I buy another PC with an Intel CPU chip.

      This is not something that I ever expected to be able to write.

      in reply to: MS-DEFCON 3: Get the February patches installed #2190900
      Jonathan Handler
      AskWoody Plus

      b,

      Thank you.  That is exactly what happened.

      Now that I know that, I can go to 1909 to keep up with Woody.

      Jonathan

      2 users thanked author for this post.
      Elly, b
      in reply to: MS-DEFCON 3: Get the February patches installed #2190892
      Jonathan Handler
      AskWoody Plus

      Woody/All,

      I never thought that I would be writing about one month’s cumulative update (2020-02) being “successfully installed” after the following month’s cumulative update (2020-03) had been released.  But I seem to be.

      The “2020-02 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4532693) was successfully installed 2020-03-12” message appeared 2020-03-12 on my system two days after the March 2020 Patch Update on 2020-03-10,

      This system is an HP ENVY x360 Windows 2-in-1 PC with AMD Ryzen 5 CPU, AMD graphics, 256 GB SSD and 8GB RAM.

      Has anyone else seen this recently, or earlier?

      I have been using Windows 10 since Version 1511 and this is a first for me, which is why I am asking about it.  My earlier Windows 10 PC was based on an Intel-i5 U4200 processor with Intel graphics.

      Jonathan Handler

       

       

      in reply to: MS-DEFCON 2: Get Windows automatic update locked down #1947617
      Jonathan Handler
      AskWoody Plus

      Woody,

      I am running Windows 1809 with the August Quality Update.  This morning, I looked at Windows Update and saw that I was being teased with the names of one or two updates moving quickly across part of the screen.  I could not read them fast enough.

      Around lunchtime today, having read what you learned from Ed Bott and associated messages, I took the risk and clicked on “Updates are available.”  When I did so, the screen changed and I now could read the titles of the two updates which are available, which are the September Quality Update and a .NET update.  I cancelled out of Windows Update after I saw this.

      When I came back to Windows Update later today, the top of the Windows Update screen said “Restart required,”  which made me feel as though I had made a mistake by clicking on “Updates are available.”  I did not want to “Restart now” so I clicked on “Schedule the restart.”  Below, “Schedule the restart” on the new page it says “Schedule the time” with an off-on toggle set to off. I relaxed quickly.”  I am hoping that this will now stay this way until 20 days – which was my Quality Update Delay period that I had selected and has now disappeared.

      This is not exactly what I expected to see.  Maybe it will change again with Windows 1903.

      Hope this helps.

    Viewing 15 posts - 1 through 15 (of 61 total)