An administrator can run most applications, components and processes with a limited privilege, but have the ability to elevate or increase the privilege for specific administrative related tasks and application functions.
Standard User Privileges Defined:
Surveys have indicated that up to 80% of most users have full administrative access to their desktops in order to perform all of their needed tasks. The increased privileges that are introduced will reduce this figure quite a bit, also proportionately reducing the risk of malicious system damage.
The following are some additional privileges that are granted to standard user accounts, so that the need to run as administrator is further eliminated:
For an individual user, you can choose “Run this program as an administrator”. When this is chosen, this setting will only apply to the account of the currently logged-on user. Only a user with administrator privileges can configure and use this option. (This helps with older legacy software that must always run as administrator.)
There also is a “Show settings for all users” option on the application compatibility tab. This allows the administrator to allow application configuration for ALL users. (This is most often recommended for legacy software. )
Administrator Approval Mode:
When an application asks your permission to continue, this indicates being in Administrator Approval Mode. How this happens is by Vista generating two security tokens for an administrator account, a user token and an administrative token. The administrative token will be used if ‘Run as administrator’ has been chosen for a program shortcut. This added permission processes also prevents malicious software from running unnoticed on your system.
NOTE: Based on the security importance of UAC, it is of utmost importance to know that if UAC is ever turned off for troubleshooting purposes, that at the end of any ‘procedure’ that the UAC is turned back ON.
Windows 10, 8/8.1 and 7