Online Armor also has a "run safer" mode which is added protection for programs such as web browsers and P2P.
When Windows is first installed, the first account it creates is an Administrator account, which is what most people use. The name of this account is usually the name of the person that owns the computer, and a person would need to know where to look to know if the account is an Administrator account or not.
Administrators are allowed by Windows to make nearly any change to the system that they want to, including changes that could affect the whole system. Administrators can install drivers, make configuration changes to Windows, and much more.
Limited users can not make changes that would affect the whole system. They cannot install software that could affect the system as a whole, cannot install drivers, and cannot configure Windows in any way that would affect other users on the system. For example, a Limited user can change the wallpaper and screensaver of their account, but cannot change the system time. The wallpaper and screensaver would only be seen when logging into that account, but a change to the system time would affect Windows as a whole (including other accounts on the system).
When you run a program, it will run with the permissions of the account. When you run your web browser in an administrative account, the web browser can do anything that the Administrator can do. Likewise, when you run your web browser in a Limited user account it can only do what Limited users are allowed to do. Limited user accounts offer strong protection, but are rarely used by the majority of computer users.
How does Run Safer work?
Run Safer makes using an Administrator account safer by running user-selected programs as a Limited user when you are in an Administrator account. Run Safer does not restrict programs directly, but rather tells Windows to impose the extra security measures of a Limited user on the target program.
When a program is running using Run Safer, any other program that is launched by this program will also “inherit” the Limited user account restrictions. This means that if your web browser is set to Run Safer and you browse to a website that uses some trick to infect your computer with malware through the web browser, then the malware will be heavily restricted in the ways that it could infect your system. This also means that when your browser is run using Run Safer and a document viewer or media player is automatically launched to view content from the internet, then that program also inherits the same protection; if the document viewer or media player ends up being used to infect your computer then the same security restrictions will be applied.
Some malware cannot infect a computer with the restrictions of a Limited user account at all.