The article provides basic information about User Account Control (UAC). It also outlines the steps in turning UAC on or off.
User Account Control (UAC) improves security for all users. It also replaces the following user accounts available in earlier versions of Microsoft Windows.
The main goal of UAC is to protect the computer and reduce the exposure and attack surface of the operating system by basically starting with all users running in standard mode.
An administrator can run most applications, components and processes with a limited privilege, but have the ability to elevate or increase the privilege for specific administrative related tasks and application functions.
Surveys have indicated that up to 80% of most users have full administrative access to their desktops in order to perform all of their needed tasks. The increased privileges that are introduced will reduce this figure quite a bit, also proportionately reducing the risk of malicious system damage.
The following are some additional privileges that are granted to standard user accounts, so that the need to run as administrator is further eliminated:
For an individual user, you can choose “Run this program as an administrator.” When this is chosen, this setting will only apply to the account of the currently logged-on user. Only a user with administrator privileges can configure and use this option. (This helps with older legacy software that must always run as administrator.)
There also is a “Show settings for all users” option on the application compatibility tab. This allows the administrator to allow application configuration for ALL users. (This is most often recommended for legacy software.)
When an application asks your permission to continue, this indicates being in Administrator Approval Mode. How this happens is by Vista generating two security tokens for an administrator account, a user token and an administrative token. The administrative token will be used if ‘Run as administrator’ has been chosen for a program shortcut. This added permission processes also prevents malicious software from running unnoticed on your system.
NOTE: Based on the security importance of UAC, it is of utmost importance to know that if UAC is ever turned off for troubleshooting purposes, that at the end of any ‘procedure’ that the UAC is turned back ON.
IMPORTANT: While turning UAC off may be necessary when troubleshooting QuickBooks Desktop issues, it is highly recommended that you turn it back on to prevent security risks on your computer.