Home | Computers

Tech Support Forum Opinion on UAC

By: Lisa Collins


Read More About Computers

User Account Control (UAC) is an enhanced security-related computer technology introduced with Microsoft Windows Vista. It also comes with Windows 07 and Windows Server 2008.

When an administrator logs on to a computer running Windows using User Account Control, two separate access tokens are granted to a user. Access tokens include a user's group membership and data they are permitted to access. Before Windows Vista, an administrator account had only one access token. This included data which the user was allowed to access. This access control model of one token did not have any failsafe checks to verify that users truly wanted to perform a function that required their administrative access token. As a result, there are chances that malicious software could install on users' computers without notifying the users. This is also sometimes called as "silent" installation. Such malicious software has the capability to use administrator's access control data. In some instances, it becomes almost impossible to undo the harm.

Microsoft developed UAC feature to prevent malicious software from installing silently and causing infection in the entire networked computers. When an administrator logs on to a computer using UAC, administrator access token is split into two access tokens: a standard user access token and a full administrator access token. During logon, authorization and access control features that identify an administrator are removed. The standard user access token is used to initialize the desktop: explorer.exe process. As all applications derive their access control input from the initial launch of the desktop, they all operate as a standard user only. When an administrator logs on, full administrator access token is not activated till the administrator attempts to perform an administrative task.

UAC allows administrators to carry day-to-day tasks as non-administrators. Users other than administrators are called standard users in Windows Vista and subsequent Windows version. A standard user account is equivalent to a user account in Windows XP. It allows administrators to use Run As and log off without requiring switching users. A Local Administrators group can have number of user accounts as members. They can run most applications as a standard user.

One of the key difference between an administrator and standard user in Windows Vista and subsequent Windows version is the level of access the user has over protected areas of the computer system. Now, using Windows Vista or Windows 07, an administrator can configure security policy, reconfigure system state, turn off the firewall, and install a driver or a service which affects all users on the computer. An administrator can install software for the entire network of computer. Standard users cannot perform these tasks. They can only install per-user software.

The experience of many Oracle users with UAC has not been completely hassle-free. Many Oracle users complained that it was interfering with their Oracle Client 92, 10.1, 10.2 as well as 11g. Problems were erratic and not necessarily pointed to UAC. On the 92 version, many were able to login to the database but unable to use RMAN. In 10.2 many were unable to create databases using the client. As a result, many Oracle users in popular tech support forum are reluctant to use UAC. UAC has 4 settings in Windows 7.0, including one option to turn UAC off. If you are really facing such issue, you can get a good antivirus and a firewall and turn it off. However, keep track of your actions and create a recovery CD as well as restore points frequently.

User Account Control is an important feature that separates user and administrator functions without compromising security. It enhances productivity in multi-user computer settings. You need to try to fine tune it to your computer settings.

Article Source: http://depositarticles.com/

A professionally-managed tech support forum updates you with the latest computer security tools. Logon and learn more about working with UAC from tech help experts as well as ordinary PC users.

Please Rate this Article

 

Not yet Rated

Click the XML Icon Above to Receive Computers Articles Via RSS!

counter easy hit

Powered by Article Dashboard