Microsoft introduced User Account Control (UAC) in Windows Vista as a new security mechanism where the primary goal is to force users to work using restricted accounts, instead of administrators. While security professionals would say that it is generally is a good idea, there always is the debate of convenience over usability and security for user-friendliness.

While people complain that UAC is the most annoying thing in Windows Vista, we can ignore the fact there are good uses for the UAC that do help users stay safe while computing.

 The default setting for UAC is enabled, even when a user logs in as an administrator and programs run as restricted processes. Technically, this helps to curb the spread of malicious software by disallowing access to higher-level resources that can be used to compromise a machine or damage critical files. When such an action happens, Vista dims the desktop and presents the consent window to the user. In this case, the user then has to click the OK button or enter an administrator password to allow the program to continue its processes. As such, malicious software that attempts to hijack or change system files forces the user to review the actions being taken. A security conscious user would then recognize the malicious software as malicious, having taken actions that the user did not initiate.

 

UAC recognizes installer executables by a compatibility database and several heuristics to determine which installers or programs should be allowed to proceed with the actions that it is requesting. Despite the seemingly complicated method of screening, any executable with the word “Setup” would be automatically subject to screening by UAC.

In view of that, Internet Explorer 7’s Protected Mode depends heavily on UAC to run with a ‘low’ integrity level – effectively running in a sandbox and being unable to write files to most of the system except the Temporary Internet Files folder unless UAC allows an elevation. This impacts ActiveX and toolbars within Internet Explorer as they also run with low privileges, severely limiting the damage they can do to the system.

Microsoft Windows Vista has included new Aero cursors that is not turned on by default.

Right click on your desktop and select personalize. Click on the mouse cursors item to select a Vista graphics different mouse cursor scheme. Change the scheme from none to Windows Vista Aero. Click OK to see the new Aero mouse cursors.

Create a Standard user account for daily use and leave the administrative accounts to perform administrative actions for increased security on your Mac.