Thanks to visit codestin.com
Credit goes to www.scribd.com

Scribd
Upload
102 views12 pages

User Account Control Guide

User Account Control (UAC) helps prevent malware and allows for better desktop management. UAC runs most processes under a standard user account for security, but allows elevation for administrative tasks after consent. To turn on or off UAC, users access the UAC settings and adjust the security slider. When enabled, UAC displays consent prompts for administrative actions and credential prompts when standard users request elevation. This reduces programs running with elevated privileges and helps block unauthorized changes to better protect the system.

Uploaded by

Sahil A. Khan
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
102 views12 pages

User Account Control Guide

User Account Control (UAC) helps prevent malware and allows for better desktop management. UAC runs most processes under a standard user account for security, but allows elevation for administrative tasks after consent. To turn on or off UAC, users access the UAC settings and adjust the security slider. When enabled, UAC displays consent prompts for administrative actions and credential prompts when standard users request elevation. This reduces programs running with elevated privileges and helps block unauthorized changes to better protect the system.

Uploaded by

Sahil A. Khan
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 12

USER

ACCESS
CONTROL

PRESENTED BY:
SUKANYA MOHANTY- 170301200030
CONTENTS :

– What is UAC
– How to turn On/Off UAC
– Log On Process
– Prompts in UAC
– Benefits of UAC
What is UAC ?

– User Account Control (UAC) helps prevent malware from damaging a PC and
helps organizations deploy a better managed desktop.

– With UAC,apps and tasks always run in the security context of a non-
administrator account, unless an administrator specifically authorizes
administrator-level access to the system.

– UAC can block the automatic installation of unauthorized apps and prevent
inadvertent changes to system settings.
– UAC allows all users to log on to their computers using a standard user account.
Processes launched using a standard user token may perform tasks using access
rights granted to a standard user.

– For instance, Windows Explorer automatically inherits standard user level


permissions.
HOW TO TURN ON/OFF UAC:

– Type UAC in the search field on your taskbar. (If the search field isn't visible,
right-click the Start button and choose Search.)
– Click Change User Account Control settings in the search results.
– Then do one of the following:
– To turn UAC off, drag the slider down to Never notify and click OK.
– To turn UAC on, drag the slider up to the desired level of security and click OK.
– You may be prompted to confirm your selection or enter an administrator
password.
– Reboot your computer for the change to take effect.
LOG ON PROCESS :

– By default, standard users and administrators access resources and run apps in
the security context of standard users. When a user logs on to a computer, the
system creates an access token for that user.

– The access token contains information about the level of access that the user is
granted, including specific security identifiers (SIDs) and Windows privileges.
When an administrator logs on, two separate access tokens are created for the
user: a standard user access token and an administrator access token.
– The standard user access token contains the same user-specific information as
the administrator access token, but the administrative Windows privileges and
SIDs are removed. The standard user access token is used to startups .

– As a result, all apps run as a standard user unless a user provides consent or
credentials to approve an app to use a full administrative access token.
PROMPTS IN UAC :

– The default, built-in UAC elevation component for an administrator account in


Admin Approval Mode is called the consent prompt.

– The consent prompt : The consent prompt is presented when a user attempts
to perform a task that requires a user's administrative access token. The
following is an example of the UAC consent prompt.

– The credential prompt : The credential prompt is presented when a standard


user attempts to perform a task that requires a user's administrative access
token.
BENEFITS OF UAC :

– It reduces the number of programs that run with elevated privileges, therefore
helping to prevent users from accidentally changing their system settings, and
helping to prevent "malware" from gaining system-wide access.

– User Account Controls primary design goal was to help protect a Windows
computer, Vista and later, from programs attempting to make a major change.
When UAC is active it prompts the user and asks the user if the change is valid.

You might also like