Hello,

I have a quick question. If I'm logged in with a limited user account on XP when I click on an email attachment that has something like iSpyNOW, then there's no way XP will install it unless I give XP an admin password. Correct?

I don't use XP, but I would say it depends on how Admin configured the limited account. Check it hasn't been given attachment save/file installation permissions.

Also check the settings in your email client. It should have extra settings allowing you to stop it saving malicious attachments such as EXE and ZIP, and it should be running in the Restricted Zone, with all scripts and controls disabled, even safe ones.

XP doesn't allow an admin to give a limited user account the ability to install a program. (Or they did a good job of hiding that option because I can't find it.) If I want to install a program while logged in with a limited account, a message comes up asking me for an admin password.

Outlook Express is by default running in the Restricted Zone and is set not to allow attachments to be saved or opened that could be a virus.

But I also use Yahoo, and I did receive that email about the "Windows Update" twice. (I didn't click on it because I heard about it on the news). So I worry. If a limited account can prevent things from being installed without my explicit permission, all my internet surfing will from now on be done with a limited account.