When I first use Windows Vista, whenever I install software, change settings, or even just want to turn on computer management, Windows Vista will pop up a dialog box to warn me. I can only do the following if I agree. I think it's very troublesome, and I think others will find it very troublesome. Because when we use Windows XP, we can do anything as long as we log in as an administrator. So UAC in Windows Vista only brings us trouble? I thought so at first. Actually, it is not. Here is a brief introduction to the original design intention and purpose of UAC.
When users use Windows Vista, UAC is enabled by default. No matter what identity a user logs on to a Windows Vista computer, even if he logs on to the computer as an administrator, he only has the rights of an ordinary user. When users do some installation or setup operations, Vista system will pop up a dialog box to remind users what to do. During this process, if you log in to Windows Vista with an administrator account, just click "Continue" or "Allow" to continue. After clicking, UAC upgrades its authority, and then the administrator really has the authority of the administrator. If you log in to the computer as an ordinary user, when they perform such an operation, Windows Vista will pop up a dialog box for this ordinary user to enter the administrator account and password. In the previous Xp system, if we were ordinary users, we couldn't do this operation, but in Vista, it also provided this operation, but you must know the administrator's account and password.
So where is the value of UAC? When we use computers, we all have the authority of ordinary users, and the power of ordinary users is limited. If a virus or malicious software code is to be installed and cracked in my system, it will only call the permission of my ordinary user to install it, because the permission of ordinary users cannot install software. In this way, the system will upgrade the permissions, and a dialog box will pop up to tell the user whether to install the software or change the settings. Agree to continue, the system background will be closed, so you can only choose to agree or refuse, which means that the virus will not bypass your permission to destroy other applications at this time. And this dialog box will display detailed information for your reference. In Windows XP system, if you log in with administrator rights, viruses or malware will use this administrator right of your login account to destroy it. In this way, UAC in Windows Vista really protects the security of the system.
In addition, UAC has another function. If you log in to Windows Vista as an ordinary user, UAC will not refuse you to operate during system setup or software installation, but you must enter an administrator account and password to upgrade your permissions. So ordinary users can also install software. You don't have to log off, you can install it by logging in to the system with an administrator account.
In fact, users can set UAC. Set in group policy. Click "Start", enter secpol.msc in the search, and then press enter to open the local security policy. Expand Local Policies, Security Options. There will be six UAC options at the bottom of the right page.
User account control: the administrator approval mode of the built-in administrator account. In Windows Vista, there is a user named Administrator, who is an administrator. The user does not need to upgrade his permissions when using the computer to operate. In other words, a dialog box will not pop up to warn the user. If you want to be protected by UAC like other administrators when logging in with this account, please set this option to enabled. Management approval mode is a management approval mode, that is, a dialog box pops up for permission promotion.
User account control: the promotion prompt behavior of the administrator in the administrator approval mode. When an administrator user performs an operation that requires privilege elevation, UAC will perform the following operations:
No hint. No prompt dialog box will appear. In this way, the administrator user can do anything.
Ask for permission. Raise authority. A dialog box pops up, and the user selects Allow or Continue to continue execution.
Prompt for credentials. Enter credentials. Even if you log in as an administrator, you need to enter the administrator account and password.
User account control: the promotion prompt behavior of standard users. If you log in as an ordinary user, when you perform some operations that require certain permissions, what UAC does is:
No prompt: Without prompt, the permission cannot be promoted.
Prompt for Credentials: Prompt the user to enter an account and password with administrator privileges to upgrade the privileges.
User account control: detect application installation and prompt for upgrade. This option means that UAC will detect the software during installation and then upgrade the permissions.
Enable: Detect the software, and then pop up a dialog box to enhance the permissions.
Disable: Install the software directly without testing.
User account control: only signed and verified executable files are promoted. I'm not sure what this means. It makes no difference to do experiments.
User account control: Run all administrators in administrator approval mode. This means using UAC management approval mode for all administrators.
Enabled: turns on UAC function.
Disabled: turns off UAC function.
User account control: switch to secure desktop when upgrading. When upgrading permissions, close the background and lock the desktop.
Enable: Open.
Disabled: Off.
User account control: virtualize file and registry write failures to each user's location. To talk about the function of this option, we must first talk about the development of Vista. Many softwares on the market are not compatible with Windows Vista, and some cannot even be installed under Windows Vista. Why? Most of these softwares are developed under Windows XP, and they are not compatible with UAC of Windows Vista (incompatibility with Windows Vista means incompatibility with Windows Vista to a great extent). When ISV develops these softwares, the installation and use of the softwares are carried out under the authority of the administrator, while under Windows Vista, the default is the authority of ordinary users, so many dialogs will pop up when installing and using them, asking users to upgrade their authority. When users use these software, Windows Vista will use redirection technology if the software wants to modify the registry or system files and other important system resources. In other words, the software does not really modify the registry or system files, but modifies them in the temporary area of the registry or system. When the user shuts down the computer, these changes will be deleted from the temporary area. This is the redirection technology. If the user turns off this option, software incompatible with Windows Vista will not use redirection technology, so it cannot be installed and used.