Patent ID: 8112791

Claim:
In a computing system environment having pluralities of computing devices arranged for an enterprise, a method of securely launching a web browser from a privileged process of a computing workstation of a user to minimize vulnerabilities to the enterprise, comprising: wrapping an executable file about the web browser to impose restrictions on capabilities of the web browser; pointing the restricted-capability web browser toward a web server; creating a user account with limited function for use via the computing workstation; querying the user as to whether the user forgot a password or other credential for logging-on to the workstation; and upon receipt of the user affirmatively indicating the forgetting, logging onto the created user account thereby invoking the executable file to launch the restricted-capability web browser toward the web server including forcing the restricted-capability web browser to use an https protocol, upon authentication of an identity of the user via the restricted-capability web browser the user can change the password or other credential for later logging-on to the workstation in a capacity without the limited function of the created user account and the imposed restrictions on capabilities of the web browser.