Detailed computer Core Security functions

User Account Control One of the core security features of Windows Vista, and it is also the most controversial feature in Vista's many security features. Whether you like it or not, you should learn more about this feature in order to balance security and user-friendliness .

Reduces the risk of logging in as an administrator account
we often see a common phenomenon: if the user has an administrator-level account, and a regular account, then most users prefer to use an Administrator account login system, although they may only be logged into the system to do some simple work that does not require administrator privileges. Login with Administrator account is sometimes convenient, and people always put the convenience in the first place.

The security risks associated with logging on as an administrator are much lower, because in this case most of the tasks that are running are still performed with normal user rights, not because the logged-on user is the administrator and makes the The program with the line has higher permissions.

login process has changed
Although the login process does not seem to be changing for the user - user still needs to enter user name and password - but Vista vista recording system, You will not only get access tokens for that account, but also access tokens for ordinary users. This standard token can start the explorer.exe Explorer.exe permissions, unless the user has elevated the permissions of a process.

It's easy to tell which program requires administrator privileges
in the in Vista, it is easy for users to distinguish which features or action actions require elevated privileges. All function buttons that require elevated privileges are provided with a shield-shaped icon. Users see this icon will know that if you click on the button, the UAC dialog box will pop up prompting the user for permission elevation. (If Group Policy has some settings, you might not be able to elevate permissions when the user logs on to the system as a normal user account.)

is the default state
in the default state, Vista 's various applications are run with normal user privileges, even if the user is logged in as an administrator. If a task requires administrator privileges to run, the system pops up a UAC dialog box prompting the user for permission elevation. This mechanism prevents malicious software from systematically destroying or stealing data with administrator privileges without the user's knowledge.

Higher security
by editing the Group Policy (Local Security policy or domain policy), the user can modify the action. For example, users can ask the administrator to enter an administrator account and password to elevate permissions, rather than just click on the " continue " button to elevate permissions. For the average user, the default is to enter an administrator account and password to elevate the program's running privileges. In a domain environment, the normal user is forbidden to elevate the program's operation permissions, but users can also edit the Group Policy to modify.

even if the user's network topology and application are very simple, but still need to use a firewall, if the user's environment, the application is more complex, then the firewall will be able to bring more benefits. For more security tutorials, please visit security guard .

Detailed computer Core Security functions