In past versions of Windows, such as XP, you needed to use Run As to log on with administrator rights, although if the user account had been jeopardized, it wouldnt matter anyway.

Token 4.28 Software Such As

UAC uses Admin Approval Mode which protects administrators from malicious software such as malware, spyware, and even viruses.

This token is used to launch explorer.exe and any applications the user launches.

The second token generated is the full administrator access token.

This token is used only after the administrator confirms hisher intention to move forward at the UAC prompt.

Token 4.28 Install A Certain

Figure 9.8 shows an administrator being prompted by the UAC before agreeing to install a certain application.

If the administrator clicks Allow, the full administrator access token will be invoked by the Application Information service.

If heshe clicks Cancel, it wont.

Figure 9.8. Administrator Prompted by UAC Command prompts, on the other hand, need special consideration.

When a standard user attempts to run a command that requires administrative rights, UAC does not provide them with a prompt.

They are simply told A required privilege is not held by the client, as shown in Figure 9.9.

Figure 9.9. A Message Stating Administrative Rights Are Required for this Command To run a command that requires administrative rights, click Start, and then right-click Command Prompt Run As Administrator (as shown in Figure 9.10 ).

In our case, this user needs to change the time on the system, and unlike in earlier Windows versions they now can change the time.

Figure 9.11. An Administrator Command Prompt Note Admin Approval Mode does not apply to the built-in Administrator account.

This account, by default, is disabled, protecting the system from attack.

Here, you can check Internet Explorers security settings, as well as use User Account Control (UAC).

User Account Control User Account Control (UAC) UAC is a new tool used with Windows Vista for preventing unauthorized changes.

UAC is another level of security applied to the defense in depth model.

UAC (known in earlier Windows versions as Least-Privilege User Account LUA) is responsible for warning you whenever Windows needs your permission to continue with the use of a program or other application.

LUA followed the concept that if the LUA account was jeopardized, it would not cause a serious issue because it did not have administrator privileges.

If the account was compromised, there wasnt much you could do with it.

When a user now logs on to a Windows Vista computer, she is logged on by default as a standard user.

If she needs to perform a task in which administrator privileges are required, Vista (with the help of UAC) will prompt her for specific permission to perform the task.

This helps to make sure that malware cannot manipulate her account if jeopardized.

When an administrator needs to use her administrator privileges, she doesnt have to use Run As, because Windows Vista can automatically prompt her for the required credentials, as shown in Figure 2.24.

In the past, accounts for standard users contained too many available permissions.

Now, standard user accounts are locked down to allow for only the privileges that are needed; anything that requires administrator privileges (such as installing software on the system) will require that the user log on with an administrator account.

Because UAC is enabled by default, it will be invoked whenever administrator logon is required.

Driver Token 4.28 Windows 7