User Account Control

The Name Changes, But Goal Remains the Same
What is User Account Control (UAC)?

User Account Control (UAC) has gone through several names until settling on its final title. Originally known as Limited User Accounts and then User Account Protection, User Account Control is a core security feature in Vista. It is intended to be the progression of Windows Administrator privileges and a huge hike up in their overall concept of desktop security, as we know it.

The concept of user permissions has been around since Windows NT, but most applications fail to run in a non-administrator capacity. The UAC aims to change all that, making standard mode the default, and an easy option for everyone to utilize.

User Account Control will run your computer in standard user mode allowing you to do most common actions, but require permission to install applications or make changes to your system. Running your system in standard user mode greatly decreases the probabilities of security breaches to you computer. When you want to install a program, or make changes to the settings, you’ll be required to enter the Administrator’s password.

So when you go to install a program on your system, the Consent Dialog will pop up. The Consent Dialog box tells you when you’re going to do something that requires Administrator privileges. You’ll have to grant or deny permission at this point. If this box appears unexpectedly, it may signal a hackers attempt to access your system or an installation of spyware.

For one, this is a good step towards preventing unwanted malware being installed on your computer without the end user knowing it, however, I’m interested to see how difficult it may make using your system in practical ways. I have high hopes that Microsoft can tweak the final version of UAC to make both worlds mesh nicely.

And while the UAC’s intentions are good, Microsoft warns it may take users awhile adjust to this new protocol and to fully appreciate its long-term benefits. MSDN likens the experience to seatbelts in automobiles. Sounds like a major inconvenience to sysadmins, and a confusing concept for support techs to explain to novices. Should prove interesting to see how the general public receives this “feature”.