![]() ![]() The default, built-in UAC elevation component for standard users is the credential prompt. With the built-in UAC elevation component, standard users can easily perform an administrative task by entering valid credentials for a local administrator account. Running as a standard user helps to maximize security for a managed environment. The recommended and more secure method of running Windows, is to ensure your primary user account is a standard user. When UAC is enabled, the user experience for standard users is different from administrator users. This prompt is called an elevation prompt, and its behavior can be configured via policy or registry. When the administrator needs to perform a task that requires the administrator access token, Windows automatically prompts the user for approval. As a result, all apps run as a standard user unless a user provides consent or credentials to approve an app to use a full administrative access tokenĪ user that is a member of the Administrators group can sign in, browse the Web, and read e-mail while using a standard user access token. Explorer.exe is the parent process from which all other user-initiated processes inherit their access token. It's used to display the desktop by executing the process explorer.exe.It's used to start applications that don't perform administrative tasks (standard user apps). ![]()
0 Comments
Leave a Reply. |