Re-understand Windows 7 user account control UAC

Starting with Windows Vista, Microsoft has added a new UAC function (ie User Account Control) to control the permissions of different types of user accounts, but the prompts that pop up frequently during the use process allow users to Suffering, so many users have chosen to close UAC directly. When it comes to Windows 7, many users can't shut down UAC. In fact, Windows 7 UAC has a lot of new features and security features, if you turn it off, it is likely to suffer! Let's revisit it together

The reason why users turn off UAC

Starting with the Vista system, in order to solve the problem of limited user permissions in XP, many XP users directly use the administrator account, thus Microsoft has added UAC functionality to the system by causing viruses and Trojans to easily obtain administrator privileges and tamper with system settings, causing system poisoning or crashes. With UAC, operations that a standard user does not have permission to perform can be done after obtaining administrator privileges without switching to an administrator user.

But the UAC function in Vista is not perfect, only the two options are turned on and off. Moreover, in the state where UAC is turned on, only normal system setting or modification operations (for example, normal operations performed in the control panel) are performed, and a running prompt is also popped up. Too many tips make the user complain, and the end result is that many users choose to turn off UAC and make it a VIP function of Vista.

The UAC of Win 7 has to look at it differently

But under Windows 7, the UAC function is quite different, and its working principle is more scientific (as shown in Figure 1). A more intelligent judgment mechanism minimizes pop-up prompts and does not affect the normal operation of the user. At the same time, working with UAC also has a secure desktop mode. When the UAC window pops up, the entire desktop will be grayed out, and the start menu, resource manager, and various shortcuts are completely blocked. This means that the UAC cannot be bypassed, the UAC working status is reset by Group Policy, and the anti-virus software firewall settings cannot be modified or switched to a higher level user operation, thereby further ensuring the security of the system.


Windows 7 UAC working principle diagram

different levels, there is definitely a suitable for you

Win 7 improvements to UAC, on the one hand, strengthen it The accuracy of running the program detection, and efforts to reduce the number of pop-ups in the UAC prompt window, on the other hand, compared to Vista only open and close options, UAC in Windows 7 has 4 different security levels to choose from It also makes our operations more flexible (as shown in Figure 2).

The highest level is "always notify" (ie fully open), where users install applications, upgrade software, make changes to the operating system under any circumstances, and change Windows settings In other cases, a prompt window will pop up (and the secure desktop is enabled) to request user confirmation. This shows that this level is the safest level, but it is also the most "troublesome" level. It is suitable for multiple users sharing a single computer, restricting other standard users, and prohibiting them from changing system settings at will.

Second is the default level. At this level, the user is only prompted when the application attempts to change the computer settings, and the user does not prompt for changes to the Windows settings. At the same time, the secure desktop will be enabled in this mode to prevent system settings from being bypassed by UAC. It can be seen that the default level can not interfere with the normal operation of the user, and can effectively prevent the malicious program from modifying the system settings without the user's knowledge. This level setting can be used by normal users.

is again a lower level than the default level. A slight difference from the default level is that the level will not enable the secure desktop, which means that it is possible to change the system settings by bypassing UAC. However, in general, if you want to start some programs and you need to modify the system, you can run it directly without any security problems. However, if the user does not run any program but pops up a prompt window, it may be that the malicious program is trying to modify the system settings, and you should decisively choose to block. This level is for users with a certain system experience.

The lowest level is to turn off UAC (it must be restarted to take effect). At this level, if you are logged in as an administrator, all operations will run directly without any notification, including modifications made to the system by viruses or Trojans. At this level, viruses or Trojans can connect to other computers on the network or even communicate with computers on the Internet. It can be seen that if UAC is completely turned off and logged in as an administrator, system security will be seriously degraded. In addition, if you log in as a standard user, installing, upgrading, or modifying and setting up the system will be rejected directly without popping up any prompts. Users can only do so with administrator privileges. It can be seen that UAC is completely turned off and logged in as a standard user. Various operations and settings are also very inconvenient, so it is recommended not to select this level.

Windows 7 more rich UAC security level selection

UAC role

Practice shows that in the Win 7 default level UAC pop-up prompts are not many, The prompt will only pop up when the program tries to change the computer settings, so it will not affect and interfere with the user's normal operation, and it can effectively prevent the malware from running in the background and modifying the system settings. Therefore, turning on UAC is equivalent to turning on the active defense system of Win 7, which can effectively enhance system security. In addition, with UAC enabled standard users, it can bring more security, so that viruses and Trojans can't get started.

UAC level display summary table

written in the last

Vista UAC only has two options to close and open, plus its working mechanism is not mature enough, leading to open UAC frequently pops up a prompt window, causing inconvenience to the user or even disturbing the normal operation of the user. Therefore, many users choose to directly close the UAC and put it on the shelf. This also makes it a chicken rib function of Vista. However, in Windows 7, this situation has changed. Both UAC's working principle and UAC's level setting have been greatly improved. Frequent operation prompts are no longer available, and administrator rights are more convenient to obtain. At the same time, UAC's active defense function can effectively prevent malware. Running in the background also makes the system more secure.

Recommendation: UAC in Windows 7 is not comparable to UAC in Vista. Whether it is an administrator or a standard user, enabling UAC does not affect the normal user experience, but also ensures system security. If you have turned off UAC for Windows 7, you may wish to open it!