A systems administrator is setting up a Windows computer for a new user Corporate policy requires a least privilege environment. The user will need…

The principle of least privilege, a core security concept, dictates that users should only have the permissions essential to perform their job functions. A Standard account is the embodiment of this principle in a Windows environment. It allows a user to run applications, manage their own files, and change settings that affect only their user profile. For tasks requiring elevated permissions, such as installing software or changing system-wide configurations, User Account Control (UAC) will prompt for an administrator's credentials. This allows necessary tasks to be performed without granting the user permanent, excessive administrative rights, thus adhering strictly to the corporate policy.

A. Power user account: This is a deprecated user group from older Windows versions that grants more privileges than a standard user, violating the principle of least privilege.

C. Guest account: This account is severely restricted, intended for temporary, one-time users, and cannot be used for regular work or application configuration.

D. Administrator account: This account provides complete control over the system, which is an unnecessary security risk and a direct violation of the least privilege policy.

---

1. Microsoft Documentation

"Local Accounts": "Standard users have pre-assigned privileges and permissions that allow them to be productive. They can create and manage their own profile

run applications

and use peripherals like printers... By default

standard users can install applications that only install for their user account." This document outlines the capabilities of a standard account

which align with the user's needs without violating least privilege.

Source: Microsoft Learn

"Local Accounts

" updated September 15

2023.

2. NIST Special Publication 800-53 Rev. 5

"Security and Privacy Controls for Information Systems and Organizations": Control AC-6 Least Privilege states

"The principle of least privilege is applied to user accounts... The information system enforces the most restrictive set of rights

permissions

or privileges needed for users... to perform their authorized tasks." This publication from a major standards body directly defines the policy mentioned in the question.

Source: Page 101

Control AC-6

National Institute of Standards and Technology

September 2020. DOI: https://doi.org/10.6028/NIST.SP.800-53r5

3. MIT OpenCourseWare

"6.858 Computer Systems Security

Fall 2014": Lecture 1

"Introduction and Threat Models

" introduces fundamental security design principles. It states

"Principle of least privilege: give each component the minimum privilege required to perform its task." This academic source establishes least privilege as a foundational concept in system security design

which is being implemented by the systems administrator.

Source: Section 2

"Security design principles

" MIT OpenCourseWare

6.858 Computer Systems Security

Fall 2014.