You are on page 1of 12

User Account

Control

A.Umesh Subudhi
SD054909
MNA
Session Objectives

Session Objective(s):
Microsoft Windows User Account Control overview
The new Shield paradigm
UAC Architecture

Admin logon

Abby Admin Token


Administrative Rights

Split Token
“Standard User”
Filtered Token
Standard User Rights
UAC Architecture
Admin logon Standard User Rights

• Change Time
Zone

• Run Standard
User Compliant
“Standard User” Applications
Filtered Token
• Install Fonts

• Install Printers

Abby • Run MSN


Messenger

User Process
UAC Architecture
Admin logon Administrative Rights

Change Time

Elevation dialog Admin Process

Admin Token

Abby
Install Application

Admin Process
User Experience (UX)
The Security Shield Icon
The Security Shield

Goal is to make your application simple & predictable


Attached to controls which, if clicked, will require
elevation as the next step
Has only one state (i.e. no hover, disabled etc.)
Does not remember elevated state
Not an unlock operation
Security Shield UI Examples
Consent UI
OS Application

Unsigned Application

Signed Application
Credential UI
Applications that require Administrator
privileges
Administrative applications can be marked to identify
them to the O/S

Mark application as requiring Administrator privileges using embedded


manifest.

Installer detection

Application Compatibility shims

Compatibility Tab on Program Properties

Right-click Run as administrator

You might also like