|
....................................................Windows 7 Resource
Kit
Unofficial Support Site
Win7 Reskit
> Part 4: Desktop Maintentance > Chapter
24: Managing Client Protection
Frequently Asked Questions: User Account Control (UAC)
Q-4. If WIndows 7 uses AppLocker while
Windows Vista and earlier used Software Restriction Policies, why is the
Basic User level still visible in Windows 7 if it applies only to SRP
and not AppLocker?
A-4. SRP still applies in Windows 7
provided Applocker is not defined within the same policy. In other
words, Applocker rules takes precedence over SRP rules.
Q-3. What is the default UAC setting?
A-3. The default UAC setting varies depending
on the type of user involved. Specifically:
- For standard users the default UAC
setting is High
- For protected admins the default UAC
setting is Medium High
Q-2. How do the available UAC
settings differ for standard users and protected admins?
A-2. For standard users, only the top two
UAC settings can be selected. Specifically:
- High - Always notify me when
programs try to install software or make changes to my computer
or when I make changes to Windows settings.
- Medium High - Always notify me
(and do not dim my desktop) when programs try to install
software or make changes to my computer or when I make changes
to Windows settings.
For protected admins, there are
four possible UAC settings:
- High - Always notify me when
programs try to install software or make changes to my
computer or when I make changes to Windows settings.
- Medium High - Notify me only
when programs try to install software or make changes to my
computer.
- Medium - Notify me only (and
do not dim my desktop) when programs try to install software
or make changes to my computer.
- Low - Never notify me when
programs try to install software or make changes to my
computer or when I make changes to Windows settings.
Note that the Medium High
settings are different for standard users and protected
admins. Note also that standard users require admin
credentials in order to change the UAC settings on a
computer.
Q-1. Can UAC settings be
configured on a per-user basis?
A-1. No. When a standard user
changes the UAC setting, this applies to all standard users
on the computer. And when a protected admin changes the UAC
setting, this applies to all protected admins on the
computer.
Disclaimer: The Windows 7 Resource
Kit Unofficial Support Site makes no
representations concerning the accuracy,
reliability or suitability of the
information contained herein. All such
information is presented "as is" with no
warranties of any kind.
Contact us if you have questions or feedback concerning this site.
|
