Hello,
A standard user account cannot make system-wide changes, regardless of
UAC.
An administrator account can always make system-wide changes,
regardless of UAC.
With UAC turned on, the system additionally makes administrator
accounts more secure by only allowing admin programs that you start to
actually use your admin power.
It does this via the prompt (Windows needs your permission to
continue) which is shown whenever an admin program is started. This
allows you to keep admin programs that you did not start from running.
UAC also makes it easier for administrators to authorize standard
users to perform admin tasks on-demand, or if you so choose, to run as
a standard user and easily use your seperate administrator account
when needed, instead of having to switch between the two.
UAC also makes advanced security features, such as Internet Explorer
Protected Mode, possible, and these features are not available without
UAC.
- JB
On Wed, 30 May 2007 12:03:03 -0700, Angelique
<> wrote:
>"Ronnie Vernon MVP" wrote:
>
>> Open Control Panel / User Accounts. Your user account will be displayed and
>> you will see an option to "Turn User Account Control Off", click that link
>> and then remove the check mark from "Use user account control" and click OK.
>> Reboot to see the change.
>>
>> After you make this change, make sure that you maintain at least one account
>> in the Administrators Group.
>
>Let me make sure I understand this correctly: An administrator needs to have
>User Account Control. However, a regular user can make most kinds of changes
>without Account Control. Therefore, I should create another user account, one
>that is an administrator, so that I have that authority if I need it. In the
>meantime, I will be able to change most things without needing to give
>permission.
>
>Do I have that right?
>
>Angelique
|