I am currently using OS X with a Standard user that has no admin privileges in the OS GUI.
Note: My Standard user does however have
sudo permissions in
/etc/private/sudoers. This enables password protection when doing critical tasks in Terminal, while retaining flexibility.
For everyday use in the OS GUI, I keep a separate admin account. When necessary, I am asked to enter its username and password, e.g. for unlocking System Preferences or modifying
- Is this good practice? Why/Why not?
- What are the risks associated with this setup?