Secure launching of browser from privileged process

A computer program product stored on a non-transitory computer readable medium of a computing device, comprising:

• a first component configured to enable the creation of a limited-functionality user account on the computing device on-the-fly or earlier upon installation by a system administrator;
• and
• a second component having a dynamic linked library configured to query a user as to whether the user forgot a password or other credential for logging-on to the computing device and, upon the user affirmatively indicating forgetting the password or other credential, to log onto the limited-functionality user account to launch a restricted-capability web browser toward a web server;
• and
• a third component having an executable file configured to wrap about the web browser to impose the restrictions on capabilities of the web browser.

In a computing system environment having pluralities of computing devices arranged for an enterprise, a method of securely launching a web browser from a privileged process of a computing workstation of a user to minimize vulnerabilities to the enterprise, comprising:

• creating a limited-functionality user account for use via the computing workstation;
• querying the user as to whether the user forgot a password or other credential for logging on to the workstation;
• and
• upon receipt of the user affirmatively indicating the forgetting, logging onto the created limited-functionality user account to launch a restricted-capability web browser toward a web server whereby, upon authentication of an identity of the user via the restricted-capability web browser, the user can change the password or other credential for later logging-on to the workstation in a capacity without the limited function of the created user account and the imposed restrictions on capabilities of the web browser
• wherein the logging onto the limited-functionality user account invokes an executable file wrapped about the web browser to impose the restrictions on capabilities of the web browser.

A system comprising:

• a web server;
• a computing workstation for accessing a web browser;
• memory storing instructions, which, when executed by one or more processors in the computing workstation, causes the one or more processors to perform operations comprising:
• configuring a limited-functionality user account on the computing workstation to impose restrictions on capabilities of the web browser, where the restrictions on capabilities of the web browser are imposed by an executable file wrapped about the web browser;
• configuring a dynamic linked library to, upon a user affirmatively indicating forgetting a password or other credential, log onto the limited-functionality user account to launch the restricted-capability web browser toward the web server;
• and
• whereby the user can change the password or other credential for later logging-on to the workstation in a capacity without the limited-functionality user account and the restricted-capability web browser.