Starting from Windows Vista, Microsoft has added a new UAC function (i.e. User Account Control) to the system to control the permissions of different types of user accounts. However, frequent pop-up prompts during use have made users complain. Therefore, many users choose to turn off UAC directly. With Windows 7, many users turn off UAC without explanation. In fact, Windows 7's UAC has many new features and security functions. If you turn it off, you will probably suffer! Let’s get to know each other again
Reasons why users turn off UAC
Starting from the Vista system, in order to solve the problem of limited user rights in XP being too low, causing many XP users to directly use administrator accounts, causing viruses and Trojans to easily obtain administrator rights, tamper with system settings, and cause system poisoning or crash. Microsoft added the UAC function to the system. Through UAC, operations that standard users do not have permission to perform can be completed after obtaining administrator permissions without switching to an administrator user.
However, the UAC function in Vista is not perfect, and there are only two options: on and off. Moreover, when UAC is turned on, a running prompt will pop up if you just perform ordinary system settings or modification operations (such as normal operations in the control panel). Too many prompts make users complain endlessly. The final result is that many users choose to turn off UAC, making it a useless function of Vista and being idle.
Win 7’s UAC needs to be looked at differently
However, under Windows 7, the UAC function is quite different, and its working principle is more scientific (as shown in Figure 1). A more intelligent judgment mechanism reduces pop-up prompts to the greatest extent and does not affect the user's normal operation. At the same time, the safe desktop mode also works with UAC. When the UAC window pops up, the entire desktop will be in a gray state, and the start menu, resource manager, and various shortcuts will be completely blocked. This means that it is impossible to bypass UAC, reset the working status of UAC through group policy, and cannot modify the firewall settings of anti-virus software or switch to a higher-level user operation, thus further ensuring the security of the system.
.jpg)
UAC working principle diagram of Windows 7
Different levels, there must be something suitable for you
Win 7 has improved UAC. On the one hand, it has strengthened its accuracy in detecting running programs and tried to reduce the number of UAC prompt window pop-ups. On the other hand, compared to Vista, there are only options to turn it on and off. In Windows 7 UAC among them has 4 different security levels to choose from, which also makes our operation more flexible (as shown in Figure 2).
The highest level is "Always Notify" (that is, fully turned on). At this level, prompts will pop up when users install applications, upgrade software, make changes to the operating system under any circumstances, change Windows settings, etc. window (and enable Secure Desktop), requesting user confirmation. It can be seen that this level is the safest level, but it is also the most "troublesome" level. It is suitable for situations where multiple people share a computer. It restricts other standard users and prohibits them from changing system settings at will.
The second is the default level. At this level, the user will only be prompted when an application attempts to change computer settings, and will not be prompted if the user actively changes Windows settings. At the same time, a secure desktop will be enabled in this mode to prevent system settings from being changed by bypassing UAC. It can be seen that the default level can not interfere with the user's normal operation, but can also effectively prevent malicious programs from modifying system settings without the user's knowledge. General users can use this level setting.
Again, it is a slightly lower level than the default level. What is slightly different from the default level is that this level will not enable the secure desktop, which means that it is possible to bypass UAC and change system settings. However, in general, if users are required to start certain programs that require modifications to the system, they can be run directly without causing security issues. However, if the user does not run any program but a prompt window pops up, it may be a malicious program trying to modify the system settings. In this case, you should decisively choose to block it. This level is suitable for users with certain system experience.
The lowest level is to turn off the UAC function (it must be restarted to take effect). At this level, if you are logged in as an administrator, all operations will run directly without any notification, including modifications to the system by viruses or Trojans. At this level, viruses or Trojans can arbitrarily access other computers on the network and even communicate or transmit data with computers on the Internet. It can be seen that if you completely turn off UAC and log in as an administrator, system security will be seriously reduced. In addition, if you log in as a standard user, installing and upgrading software or modifying and setting up the system will be directly rejected without any prompt popping up. The user can only proceed with administrator rights. It can be seen that completely turning off UAC and logging in as a standard user will make various operations and settings very inconvenient, so it is recommended not to choose this level.
.jpg)
Windows 7 has richer UAC security level options
The role of UAC
Practice has shown that under the default level of Win 7, the number of UAC pop-up prompts is not many. The prompt will only pop up when the program tries to change the computer settings, so it will not have any impact or interference on the user's daily operations, and at the same time It can effectively prevent malware from secretly running in the background and modifying system settings. Therefore, turning on UAC is equivalent to turning on Win 7's active defense system, which can effectively enhance system security. In addition, enabling standard users in conjunction with UAC can provide greater security, making it impossible for viruses and Trojans to attack.
.jpg)
UAC level display summary table
write at the end
UAC in Vista only has two options: off and on. In addition, its working mechanism is not mature enough. As a result, prompt windows frequently pop up when UAC is turned on, causing inconvenience to users or even interfering with their normal operations. Therefore, many users choose to directly Turn off UAC and leave it alone. This also makes it a tasteless feature of Vista. However, in Windows 7, this situation has changed. Both the working principle of UAC and the level setting of UAC have been greatly improved. Frequent operation prompts are no longer required, and it is more convenient to obtain administrator rights. At the same time, coupled with the active defense function of UAC, it can effectively prevent malware. Running in the background also makes the system more secure.
Recommendation: The UAC in Windows 7 is no longer comparable to the UAC in Vista. Whether it is an administrator or a standard user, turning on UAC will not affect the user's normal use experience, but also ensure system security. If you have turned off UAC in Windows 7, you might as well turn it on!
-