Understanding User Account Control

User Account Control (UAC) provides a very basic level of protection to systems by separating privileges needed for standard tasks and privileges needed for administrative tasks. An administrative account includes the built-in Administrator account and any other accounts that are in the Administrators group. When a user logs on with an administrative account, the user is assigned two access tokens. One token is used for the regular user account activities and is also used to launch the Desktop. The second token is utilized for administrative purposes. The goal is to prevent unauthorized changes to a computer by restricting the instances when administrative credentials are available.

An administrative account ...

Get Microsoft® Windows® Security: Essentials now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.