Skip to main content

suDown brings Unix like sudo to Windows XP

Windows XP by default assigns administrator privilege to the first user account you create after a fresh Windows install, and as most personal computers are single user based they end up running all applications with elevated privileges including viruses and worms. Microsoft decided to solve this by introducing the UAC (User Account Control) to Windows Vista but it turned out to be so aggressive that most users kept it turned off, which brought everything back to square one.

Unix based systems has a better approach. The rule with Unix is that you never use the root (administrator) account for everyday work. A Unix user uses a limited rights user account for everyday tasks, but when the need to make system level changes arise they can quickly change the privilege level of their account to another user or mostly to the root account by using a command called “sudo” - short for superuser do.

sudown-auth

suDown is an open source tool for Windows XP that brings the benefits of sudo to the OS. sudown creates a trusted users group called the Sudoers group that has lower privilege but can be temporarily given administrative status. By including your administrator account to the Sudoers group you effectively transforms your original administrator account to a Sudoer account which is still an administrative account but runs in a low privileged environment. Your current account will be automatically added to the group the first time you use the sudo command. Alternatively, you can add or delete user accounts from the sudeoers group through the Computer Management panel in Control Panel.

sudown-sudoers  

sudown-context

When the user needs to run a program with administrator privileges, they have to right click on the executable file and choose sudo from the context menu. Once the account password is entered, the sudown client calls the sudown service, which temporarily escalates the user's group permissions to the Administrators' Group, but only for the specific program being run. The password is also cached for 5 minutes making easier to run multiple applications with higher privileges.

This makes using the limited user account in Windows XP much easier. The best part is, you can continue to use your administrator account for everyday work as long as it is a part of the Sudoers group.

And like Unix, sudo can be executed from the command line too. Just precede the file name with “sudo”. Example, C:\>sudo winamp.exe

The difference between suDown and the inbuilt function “Run as” is that with suDown you can run applications under the context of your user account and not
with another one's. This means that the launched application sees your user account's environment, your Desktop, Start menu and Documents. When you install a software through sudo, you remain the owner of the installed files and registry keys and the icons will be placed on your desktop. suDown is a much better application than “Run as”, and is a great way to bring UAC level security to Windows XP.

There another application similar to suDown called sudowin, but I haven’t tried it.

Related: Run applications as non admin in Windows XP to avoid malwares

Comments

Popular posts from this blog

How to Record CPU and Memory Usage Over Time in Windows?

Whenever the computer is lagging or some application is taking too long to respond, we usually fire up task manager and look under the Performance tab or under Processes to check on processor utilization or the amount of free memory available. The task manager is ideal for real-time analysis of CPU and memory utilization. It even displays a short history of CPU utilization in the form of a graph. You get a small time-window, about 30 seconds or so, depending on how large the viewing area is.

How to Schedule Changes to Your Facebook Page Cover Photo

Facebook’s current layout, the so called Timeline, features a prominent, large cover photo that some people are using in a lot of different creative ways. Timeline is also available for Facebook Pages that people can use to promote their website or business or event. Although you can change the cover photo as often as you like, it’s meant to be static – something which you design and leave it for at least a few weeks or months like a redesigned website. However, there are times when you may want to change the cover photo frequently and periodically to match event dates or some special promotion that you are running or plan to run. So, here is how you can do that.

69 alternatives to the default Facebook profile picture

If you have changed the default Facebook profile picture and uploaded your own, it’s fine. But if not, then why not replace that boring picture of the guy with a wisp of hair sticking out of his head with something different and funny?