Solved UAC and security question (WARNING: UAC NOOB!)

Hey guys,

I always run as Administrator and have UAC enabled on Default, but have a few questions regarding UAC, which I don't fully understand.

1. By using an Administrator account, I assumed that all programs installed would have Administrator privileges and didn't expect UAC prompts, I thought you'd only receive UAC prompts on a standard account. The only way I can understand why UAC prompts would pop up on an Administrator account is that UAC is not only a way for Standard account users to access Administrator privileges but also for Administrator account users to restrict Administrator privileges for programs? Am I Correct?


2. I've noticed that some software I've installed has the UAC shield on (that requires the prompt) and some software does not (and does not require any prompt). I've always kept these settings as is, assuming that Windows knows best and that they should not be changed for security purposes. Is it dangerous to change a program and not allow Administrator privileges? I've noticed Brink had a tutorial where you can disable "Run this program as Administrator".

The reason I ask is that I have a few computer games that when I installed had the UAC shield on them. I thought I'd better keep it as it is, but would it compromise my security by disabling Run program as Administrator so I don't get the prompts?

Appreciate any answers. Thanks.

Hello Templar,

Q1) Basically, administrator user accounts are unelevated accounts that have complete access to the computer and can make any desired changes. Based on your UAC notification settings, administrators may be prompted to provide their password or confirmation before being allowed to open or run anything that requires elevated rights (run as administrator) to do so, and make changes that affect the system or other users.
Only the built-in Administrator account has elevated rights by default, and will not be prompted by UAC to approve any action that requires elevated rights. However, it's not recommended to use this account for everyday usage since everything that runs (ex: malware) while signed in to the account would have unrestricted access to the entire computer.

Q2) Correct. The UAC shield overlay on an icon indicates that it requires elevated rights to open/run, and that you may be prompted by UAC depending on your UAC settings. If the program requires elevated rights to run properly, then setting it not to do so would most likely cause the program to not run properly or at all.

Hope this helps,
Shawn

Cheers Brink, you've clarified that wonderfully for me! Legend as usual! :thumb:

You're most welcome. Glad I could help.