text:
User Account Control
From Wikipedia, the free encyclopedia
Jump to: navigation, search
User Account Control "Windows Security" alerts in Windows 10. From top to bottom: blocked app, app with unknown publisher, app with a known/trusted publisher
User Account Control (UAC) is a technology and security infrastructure introduced with Microsoft's Windows Vista[1] and Windows Server 2008 operating systems, with a more relaxed[2] version also present in Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012 and Windows 10. It aims to improve the security of Microsoft Windows by limiting application software to standard user privileges until an administrator authorizes an increase or elevation. In this way, only applications trusted by the user may receive administrative privileges, and malware should be kept from compromising the operating system. In other words, a user account may have administrator privileges assigned to it, but applications that the user runs do not inherit those privileges unless they are approved beforehand or the user explicitly authorizes it.
UAC uses Mandatory Integrity Control to isolate running processes with different privileges. To reduce the possibility of lower-privilege applications communicating with higher-privilege ones, another new technology, User Interface Privilege Isolation, is used in conjunction with User Account Control to isolate these processes from each other.[3] One prominent use of this is Internet Explorer 7's "Protected Mode".[4]
Contents
[hide]
1 History
2 Tasks that trigger a UAC prompt
3 Features
4 Requesting elevation
5 Security
6 Criticism
7 See also
8 References
9 External links
History[edit]
Operating systems on mainframes and on servers have differentiated between superusers and userland for decades. This had an obvious security component, but also an administrative component, in that it prevented users from accidentally changing system settings.
Early Microsoft home operating-systems (such as MS-DOS, Windows 95, Windows 98 and Windows Me) did not have a concept of different user-accounts on the same machine. Under Windows 95, Windows 98, and Windows Me, all applications enjoyed system-wide privileges rivaling those of the operating system itself; under MS-DOS and Windows versions 1.0 to 3.11 all applications had privileges equivalent to the operating system. Windows NT introduced multiple user-accounts, but in practice most users continued to function as an administrator for their normal operations. Further, some applications would require that the user be an administrator for some or all of their functions to work.[5] Subsequent versions of Windows and Microsoft applications encouraged the use of non-administrator user-logons, yet some applications continued to require administrator rights. Microsoft does not certify applications as Windows-compliant if they require administrator privileges; such applications may not use the Windows-compliant logo with their packaging.
Microsoft developed Vista security firstly from the Limited User Account (LUA), then renamed the concept to User Account Protection (UAP) before finally shipping User Account Control (UAC).[6] Introduced in Windows Vista, User Account Control (UAC) offers an integrated, balanced approach[citation needed] to encourage "super-user when necessary". The key to UAC lies in its ability to elevate privileges without changing the user context (user "Bob" is still user "Bob"). As always, it is difficult to introduce new security features without breaking compatibility with existing applications.
When someone logs into Vista as a standard user, the system sets up a logon session and assigns a token containing only the most basic privileges. In this way, the new logon session cannot make changes that would affect the entire system. When a person logs in as a user with membership in the Administrators group, the system assigns two separate tokens. The first token contains all privileges typically awarded to an administrator, and the second is a restricted token similar to what a standard user would receive. User applications, including the Windows Shell, then start with the restricted token, resulting in a reduced-privilege environment - even when running under an Administrator account. When an application requests higher privileges or when a user selects a "Run as administrator" option, UAC will prompt standard users to enter the credentials of an Administrator account and prompt Administrators for confirmation and, if consent is given, continue or start the process using an unrestricted token.[7]
In Windows 7 Microsoft included a user interface to change User Account Control settings, and introduced one new notification mode: the default setting. By default, UAC does not prompt for consent when users make changes to Windows settings that require elevated permission through programs stored in %SystemRoot% and digitally signed by Microsoft. Programs that require permission to run still trigger a prompt. Other User Account Control settings that can be changed through the new UI could have been accessed through the registry in Windows Vista.[8]
Windows 8 and 8.1 add a design change. When UAC is triggered, all applications and the taskbar are hidden when the desktop is dimmed.
Windows 10 copies the same layout as Windows 8.1, but the Anniversary Update has a more modern look. Also, Windows 10 adds support for Windows Hello in the User Account Control dialog box.
Tasks that trigger a UAC prompt[edit]
Tasks that require administrator privileges will trigger a UAC prompt (if UAC is enabled); they are typically marked by a security shield icon with the 4 colors of the Windows logo (in Vista and Windows Server 2008) or with two panels yellow and two blue (Windows 7, Windows Server 2008 R2 and later). In the case of executable files, the icon will have a security shield overlay. The following tasks require administrator privileges:[9][10]
Running an Application as an Administrator
Changes to system-wide settings or to files in %SystemRoot% or %ProgramFiles%
Installing and uninstalling applications
Installing device drivers
Installing ActiveX controls
Changing settings for Windows Firewall
Changing UAC settings
Configuring Windows Update
Adding or removing user accounts
Changing a user’s account type
Configuring Parental Controls
Running Task Scheduler
Restoring backed-up system files
Viewing or changing another user’s folders and files
Running Disk Defragmenter
Running Registry Editor
Running the Windows Experience Index assessment
Common tasks, such as changing the time zone, do not require administrator privileges[11] (although changing the system time itself does, since the system time is commonly used in security protocols such as Kerberos). A number of tasks that required administrator privileges in earlier versions of Windows, such as installing critical Windows updates, no longer do so in Vista.[12] Any program can be run as administrator by right-clicking its icon and clicking "Run as administrator", except MSI or MSU packages as, due to their nature, if administrator rights will be required a prompt will usually be shown. Should this fail, the only workaround is to run a Command Prompt as an administrator and launch the MSI or MSP package from there.
Features[edit]
User Account Control asks for credentials in a Secure Desktop mode, where the entire screen is temporarily dimmed, Windows Aero disabled, and only the authorization window at full brightness, to present only the elevation user interface (UI). Normal applications cannot interact with the Secure Desktop. This helps prevent spoofing, such as overlaying different text or graphics on top of the elevation request, or tweaking the mouse pointer to click the confirmation button when that's not what the user intended.[13] If an administrative activity comes from a minimized application, the secure desktop request will also be minimized so as to prevent the focus from being lost. It is possible to disable Secure Desktop, though this is inadvisable from a security perspective.[14]
Applications written with the assumption that the user will be running with administrator privileges experienced problems in earlier versions of Windows when run from limited user accounts, often because they attempted to write to machine-wide or system directories (such as Program Files) or registry keys (notably HKLM).[5] UAC attempts to alleviate this using File and Registry Virtualization, which redirects writes (and subsequent reads) to a per-user location within the user's profile. For example, if an application attempts to write to a directory such as "C:\Program Files\appname\settings.ini" to which the user does not have write permission, the write will be redirected to "C:\Users\username\AppData\Local\VirtualStore\Program Files\appname\settings.ini". The redirection feature is only provided for non-elevated 32-bit applications, and only if they do not include a manifest that requests specific privileges.[15]
There are a number of configurable UAC settings. It is possible to:[16]
Require administrators to re-enter their password for heightened security;
Require the user to press Ctrl+Alt+Del as part of the authentication process for heightened security;
Disable only file and registry virtualization[17]
Disable Admin Approval Mode (UAC prompts for administrators) entirely; note that, while this disables the UAC confirmation dialogs, it does not disable Windows' built-in LUA feature, which means that users, even those marked as administrators, are still limited users with no true administrative access.
Command Prompt windows that are running elevated will prefix the title of the window with the word "Administrator", so that a user can discern which instances are running with elevated privileges.[18]
A distinction is made between elevation requests from a signed executable and an unsigned executable; and if the former, whether the publisher is 'Windows Vista'. The color, icon, and wording of the prompts are different in each case; for example, attempting to convey a greater sense of warning if the executable is unsigned than if not.[19]
Internet Explorer 7's "Protected Mode" feature uses UAC to run with a 'low' integrity level (a Standard user token has an integrity level of 'medium'; an elevated (Administrator) token has an integrity level of 'high'). As such, it effectively runs in a sandbox, unable to write to most of the system (apart from the Temporary Internet Files folder) without elevating via UAC.[7][20] Since toolbars and ActiveX controls run within the Internet Explorer process, they will run with low privileges as well, and will be severely limited in what damage they can do to the system.[21]
Requesting elevation[edit]
A program can request elevation in a number of different ways. One way for program developers is to add a requestedPrivileges section to an XML document, known as the manifest, that is then embedded into the application. A manifest can specify dependencies, visual styles, and now the appropriate security context:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <v3:trustInfo xmlns:v3="urn:schemas-microsoft-com:asm.v3"> <v3:security> <v3:requestedPrivileges> <v3:requestedExecutionLevel level="highestAvailable"/> </v3:requestedPrivileges> </v3:security> </v3:trustInfo> </assembly>
Setting the level attribute for requestedExecutionLevel to "asInvoker" will make the application run with the token that started it, "highestAvailable" will present a UAC prompt for administrators and run with the usual reduced privileges for standard users, and "requireAdministrator" will require elevation.[22] In both highestAvailable and requireAdministrator modes, failure to provide confirmation results in the program not being launched.
An executable that is marked as "requireAdministrator" in its manifest cannot be started from a non-elevated process using CreateProcess(). Instead, ERROR_ELEVATION_REQUIRED will be returned. ShellExecute() or ShellExecuteEx() must be used instead. If an HWND is not supplied, then the dialog will show up as a blinking item in the taskbar.
Inspecting an executable's manifest to determine if it requires elevation is not recommended, as elevation may be required for other reasons (setup executables, application compatibility). However, it is possible to programmatically detect if an executable will require elevation by using CreateProcess() and setting the dwCreationFlags parameter to CREATE_SUSPENDED. If elevation is required, then ERROR_ELEVATION_REQUIRED will be returned.[23] If elevation is not required, a success return code will be returned at which point one can use TerminateProcess() on the newly created, suspended process. This will not allow one to detect that an executable requires elevation if one is already executing in an elevated process, however.
A new process with elevated privileges can be spawned from within a .NET application using the "runas" verb. An example using C#:
System.Diagnostics.Process proc = new System.Diagnostics.Process(); proc.StartInfo.FileName = "C:\\Windows\\system32\\notepad.exe"; proc.StartInfo.Verb = "runas"; // Elevate the application proc.StartInfo.UseShellExecute = true; proc.Start();
In a native Win32 application the same "runas" verb can be added to a ShellExecute() or ShellExecuteEx() call:[7]
ShellExecute(hwnd, "runas", "C:\\Windows\\Notepad.exe", 0, 0, SW_SHOWNORMAL);
In the absence of a specific directive stating what privileges the application requests, UAC will apply heuristics, to determine whether or not the application needs administrator privileges. For example, if UAC detects that the application is a setup program, from clues such as the filename, versioning fields, or the presence of certain sequences of bytes within the executable, in the absence of a manifest it will assume that the application needs administrator privileges.[24]
Security[edit]
UAC is a convenience feature, it neither introduces a security boundary nor prevents execution of malware.[25][26][27][28]
Leo Davidson discovered that Microsoft weakened UAC in Windows 7 through exemption of about 70 Windows programs from displaying a UAC prompt and presented a proof of concept for a privilege escalation.[29]
Stefan Kanthak presented a proof of concept for a privilege escalation via UAC's installer detection and IExpress installers.[30]
Stefan Kanthak presented another proof of concept for arbitrary code execution as well as privilege escalation via UAC's auto-elevation and binary planting.[31]
Criticism[edit]
There have been complaints that UAC notifications slow down various tasks on the computer such as the initial installation of software onto Windows Vista.[32] It is possible to turn off UAC while installing software, and re-enable it at a later time.[33] However, this is not recommended since, as File & Registry Virtualization is only active when UAC is turned on, user settings and configuration files may be installed to a different place (a system directory rather than a user-specific directory) if UAC is switched off than they would be otherwise.[14] Also Internet Explorer 7's "Protected Mode", whereby the browser runs in a sandbox with lower privileges than the standard user, relies on UAC; and will not function if UAC is disabled.[20]
Yankee Group analyst Andrew Jaquith said, six months before Vista was released, that "while the new security system shows promise, it is far too chatty and annoying."[34] By the time Windows Vista was released in November 2006, Microsoft had drastically reduced the number of operating system tasks that triggered UAC prompts, and added file and registry virtualization to reduce the number of legacy applications that triggered UAC prompts.[5] However, David Cross, a product unit manager at Microsoft, stated during the RSA Conference 2008 that UAC was in fact designed to "annoy users," and force independent software vendors to make their programs more secure so that UAC prompts would not be triggered.[35] Software written for Windows XP, and many peripherals, would no longer work in Windows Vista or 7 due to the extensive changes made in the introduction of UAC. The compatibility options were also insufficient. In response to these criticisms, Microsoft altered UAC activity in Windows 7. For example, by default users are not prompted to confirm many actions initiated with the mouse and keyboard alone such as operating Control Panel applets.
In a controversial article, New York Times Gadgetwise writer Paul Boutin said "Turn off Vista's overly protective User Account Control. Those pop-ups are like having your mother hover over your shoulder while you work."[36] Computerworld journalist Preston Gralla described the NYT article as "...one of the worst pieces of technical advice ever issued."[37]
See also[edit]
Comparison of privilege authorization features
Features new to Windows Vista
runas
Secure attention key (SAK)
Security and safety features new to Windows Vista
sudo - A similar feature in UNIX-like operating systems
References[edit]
Jump up ^ "What is User Account Control?". What is User Account Control?. Microsoft. January 2015. Retrieved 2015-07-28.
Jump up ^ Windows 7 Feature Focus: User Account Control, An overview of UAC in Windows 7 by Paul Thurott
Jump up ^ "The Windows Vista and Windows Server 2008 Developer Story: Windows Vista Application Development Requirements for User Account Control (UAC)". The Windows Vista and Windows Server 2008 Developer Story Series. Microsoft. April 2007. Retrieved 2007-10-08.
Jump up ^ Marc Silbey, Peter Brundrett (January 2006). "Understanding and Working in Protected Mode Internet Explorer". Microsoft. Retrieved 2007-12-08.
^ Jump up to: a b c Torre, Charles (March 5, 2007). "UAC - What. How. Why." (video). Retrieved 2007-12-08.
Jump up ^ Howard, Michael; LeBlanc, David (2010). Writing Secure Code for Windows Vista. O'Reilly Media, Inc. ISBN 9780735649316. Retrieved 2013-08-06. UAC started life as the Limited User Account (LUA), then was renamed to User Account Protection (UAP), and finally we got UAC.
^ Jump up to: a b c Kerr, Kenny (September 29, 2006). "Windows Vista for Developers – Part 4 – User Account Control". Retrieved 2007-03-15.
Jump up ^ http://www.askvg.com/how-to-tweak-user-account-control-uac-options-in-windows-vista-home-basic-home-premium/
Jump up ^ Bott, Ed (2007-02-02). "What triggers User Account Control prompts?".
Jump up ^ "Living with and benefiting from User Account Control". Microsoft. 2014-12-09.
Jump up ^ Allchin, Jim (2007-01-23). "Security Features vs. Convenience". Windows Vista Team Blog. Microsoft.
Jump up ^ "User Account Control Overview". TechNet. Microsoft.
Jump up ^ "User Account Control Prompts on the Secure Desktop". UACBlog. Microsoft. 4 May 2006.
^ Jump up to: a b Bott, Ed (2 February 2007). "Why you need to be discriminating with those Vista tips". Ed Bott's Windows Expertise.
Jump up ^ "Determine How to Fix Applications That Are Not Windows 7 Compliant". TechNet. Microsoft. Retrieved 2013-09-09.
Jump up ^ "Chapter 2: Defend Against Malware". Windows Vista Security Guide. Microsoft. November 8, 2006.
Jump up ^ User Account Control: Virtualize file and registry write failures to per-user locations
Jump up ^ "Administrator Marking for Command Prompt". UACBlog. Microsoft. 1 August 2006.
Jump up ^ "Accessible UAC Prompts". Windows Vista Blog. Microsoft.
^ Jump up to: a b Russinovich, Mark (June 2007). "Inside Windows Vista User Account Control". TechNet Magazine. Microsoft.
Jump up ^ Friedman, Mike (10 February 2006). "Protected Mode in Vista IE7". IEBlog. Microsoft.
Jump up ^ Carlisle, Mike (10 March 2007). "Making Your Application UAC Aware". The Code Project.
Jump up ^ Zhang, Junfeng (18 October 2006). "Programmatically determine if an application requires elevation in Windows Vista". Junfeng Zhang's Windows Programming Notes. Microsoft.
Jump up ^ "Understanding and Configuring User Account Control in Windows Vista". TechNet. Microsoft. Retrieved 2007-07-05.
Jump up ^ "Disabling User Account Control (UAC) on Windows Server". Microsoft Support Knowledge Base. Microsoft. Retrieved 2015-08-17.
Jump up ^ Russinovich, Mark. "Inside Windows 7 User Account Control". Microsoft. Retrieved 2015-08-25.
Jump up ^ Johansson, Jesper. "The Long-Term Impact of User Account Control". Microsoft. Retrieved 2015-08-25.
Jump up ^ Russinovich, Mark. "Inside Windows Vista User Account Control". Microsoft. Retrieved 2015-08-25.
Jump up ^ Davidson, Leo. "Windows 7 UAC whitelist: - Code-injection Issue - Anti-Competitive API - Security Theatre". Retrieved 2015-08-25.
Jump up ^ Kanthak, Stefan. "Defense in depth -- the Microsoft way (part 11): privilege escalation for dummies". Full disclosure (mailing list). Retrieved 2015-08-17.
Jump up ^ Kanthak, Stefan. "Defense in depth -- the Microsoft way (part 31): UAC is for binary planting". Full disclosure (mailing list). Retrieved 2015-08-25.
Jump up ^ Trapani, Gina (31 January 2007). "Geek to Live: Windows Vista upgrade power tips". Lifehacker.
Jump up ^ "Disable UAC in Vista".
Jump up ^ Evers, Joris (2006-05-07). "Report: Vista to hit anti-spyware, firewall markets". ZDNet. CBS Interactive. Archived from the original on 2006-12-10. Retrieved 2007-01-21.
Jump up ^ Espiner, Tom (11 April 2008). "Microsoft: Vista feature designed to 'annoy users'". CNET. CBS Interactive.
Jump up ^ Boutin, Paul (14 May 2009). "How to Wring a Bit More Speed From Vista". New York Times – Gadgetwise. Retrieved 2015-01-04.
Jump up ^ Gralla, Preston (14 May 2009). "NYT Offers Bad Tech Advice". PCworld.com. Retrieved 2015-01-04.
External links[edit]
Turning UAC On or Off in Windows 7
Documentation about UAC for Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista
UAC Understanding and Configuring More Information at Microsoft Technet
Development Requirements for User Account Control Compatibility More information at Microsoft Developer Network
UAC Team Blog
[hide]
v
t
e
Microsoft Windows components
Management
tools
App Installer
Command Prompt
Control Panel
Applets
Device Manager
Disk Cleanup
Disk Defragmenter
Driver Verifier
Event Viewer
IExpress
Management Console
Netsh
Performance Monitor
Recovery Console
Resource Monitor
Settings
Sysprep
System Configuration
System File Checker
System Information
System Policy Editor
System Restore
Task Manager
Windows Error Reporting
Windows Ink
Windows Installer
PowerShell
Windows Update
Windows Insider
WinRE
WMI
Apps
3D Builder
Alarms & Clock
Calculator
Calendar
Camera
Character Map
Cortana
Edge
Fax and Scan
Feedback Hub
Get Help
Groove
Magnifier
Mail
Maps
Media Player
Movies & TV
Mobility Center
Money
News
Narrator
Notepad
OneDrive
OneNote
Paint
Paint 3D
People
Phone Companion
Photos
Quick Assist
Snipping Tool
Speech Recognition
Skype
Sports
Sticky Notes
View 3D
Store
Tips
Voice Recorder
Wallet
Weather
Windows To Go
WordPad
Xbox
Shell
Action Center
Aero
AutoPlay
AutoRun
ClearType
Explorer
Search
Indexing Service
IFilter
Saved search
Namespace
Special folder
Start menu
Taskbar
Task View
Windows Spotlight
Windows XP visual styles
Services
Service Control Manager
BITS
CLFS
Multimedia Class Scheduler
Shadow Copy
Task Scheduler
Error Reporting
Wireless Zero Configuration
File systems
CDFS
DFS
exFAT
IFS
FAT
NTFS
Hard link
Junction point
Mount Point
Reparse point
Symbolic link
TxF
EFS
ReFS
UDF
WinFS
Server
Domains
Active Directory
DNS
Group Policy
Roaming user profiles
Folder redirection
Distributed Transaction Coordinator
MSMQ
Windows Media Services
Rights Management Services
IIS
Remote Desktop Services
WSUS
SharePoint
Network Access Protection
PWS
DFS Replication
Remote Differential Compression
Print Services for UNIX
Remote Installation Services
Windows Deployment Services
System Resource Manager
Hyper-V
Server Core
Architecture
Architecture of Windows NT
Startup process
CSRSS
Desktop Window Manager
Portable Executable
EXE
DLL
Enhanced Write Filter
Graphics Device Interface
hal.dll
I/O request packet
Imaging Format
Kernel Transaction Manager
Library files
Logical Disk Manager
LSASS
MinWin
NTLDR
Ntoskrnl.exe
Object Manager
Open XML Paper Specification
Registry
Resource Protection
Security Account Manager
Server Message Block
Shadow Copy
SMSS
System Idle Process
USER
WHEA
Win32 console
Winlogon
WinUSB
Security
Security and Maintenance
BitLocker
Data Execution Prevention
Family Safety
Kernel Patch Protection
Mandatory Integrity Control
Protected Media Path
User Account Control
User Interface Privilege Isolation
Windows Defender
Windows Firewall
Compatibility
COMMAND.COM
Virtual DOS machine
Windows on Windows
WoW64
Windows Subsystem for Linux
API
Active Scripting
WSH
VBScript
JScript
COM
ActiveX
ActiveX Document
COM Structured storage
DCOM
OLE
OLE Automation
Transaction Server
DirectX
.NET Framework
Universal Windows Platform
Windows Mixed Reality
Windows Runtime
WinUSB
Games
Solitaire Collection
Discontinued
Games
3D Pinball
Chess Titans
FreeCell
Hearts
InkBall
Hold 'Em
Purble Place
Reversi
Spider Solitaire
Solitaire
Tinker
Apps
ActiveMovie
Anytime Upgrade
Address Book
Backup and Restore
Cardfile
CardSpace
Contacts
Desktop Gadgets
Diagnostics
DriveSpace
DVD Maker
Easy Transfer
Fax
File Manager
Food & Drink
Help and Support Center
Health & Fitness
HyperTerminal
Internet Explorer
Journal
Media Center
Meeting Space
Messaging
Messenger
Mobile Device Center
Movie Maker
NetMeeting
NTBackup
Outlook Express
Travel
Photo Gallery
Program Manager
Steps Recorder
WinHelp
Write
Others
ScanDisk
File Protection
Media Control Interface
Next-Generation Secure Computing Base
POSIX subsystem
Interix
Video for Windows
Windows SideShow
Windows Services for UNIX
Windows System Assessment Tool
Spun off to
Windows Store
DVD Player
Hover!
Mahjong
Minesweeper
Retrieved from "https://en.wikipedia.org/w/index.php?title=User_Account_Control&oldid=801081644"
Categories:
Microsoft Windows security technology
Windows Vista
Windows 7
Hidden categories:
All articles with unsourced statements
Articles with unsourced statements from July 2016
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Čeština
Deutsch
Eesti
Español
Français
한국어
Italiano
Bahasa Melayu
Nederlands
日本語
Polski
Português
Русский
Suomi
Tagalog
Українська
中文
Edit links
This page was last edited on 17 September 2017, at 15:07.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

values: mw-page-base noprint

values: mw-head-base noprint

attrs: id class style

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

attrs: class style

value: sup

values:
/wiki/User_privilege
mw-redirect
User privilege

values:
/wiki/Userland_(computing)
mw-redirect
Userland (computing)

values: This claim needs references to reliable sources. (July 2016)

values:
noprint Inline-Template Template-Fact
white-space:nowrap;

values:
/wiki/Token_(Windows_NT_architecture)
mw-redirect
Token (Windows NT architecture)

values:
/wiki/Windows_Shell
mw-redirect
Windows Shell

values:
/wiki/Anniversary_Update
mw-redirect
Anniversary Update

values:
/wiki/Windows_Hello
mw-redirect
Windows Hello

values: Edit section: Tasks that trigger a UAC prompt

values:
/wiki/HKEY_LOCAL_MACHINE
mw-redirect
HKEY LOCAL MACHINE

values:
/wiki/Command_Prompt_(Windows)
mw-redirect
Command Prompt (Windows)

values:
/wiki/Heuristic_algorithm
mw-redirect
Heuristic algorithm

values:
/wiki/Paul_Thurott
mw-redirect
Paul Thurott

values:
nofollow
external text
http://www.edbott.com/weblog/?p=1602

values:
/wiki/James_Allchin
mw-redirect
James Allchin

values:
/wiki/TechNet_Magazine
mw-redirect
TechNet Magazine

values: Microsoft Support Knowledge Base (page does not exist)

values:
/wiki/New_York_Times
mw-redirect
New York Times

values: -moz-column-width: 30em; -webkit-column-width: 30em; column-width: 30em; list-style-type: decimal;

values:
nofollow
http://blogs.msdn.com/uac/
external text

values: Template talk:Microsoft Windows components

values:
/wiki/Windows_Recovery_Environment
mw-redirect
Windows Recovery Environment

values:
/wiki/Calculator_(Windows)
mw-redirect
Calculator (Windows)

values:
/wiki/Camera_(Windows)
mw-redirect
Camera (Windows)

values:
/wiki/Voice_Recorder_(Windows)
mw-redirect
Voice Recorder (Windows)

values: Microsoft Distributed Transaction Coordinator

values: Active Directory Rights Management Services

values:
/wiki/Microsoft_SharePoint
mw-redirect
Microsoft SharePoint

values: Local Security Authority Subsystem Service

values:
/wiki/Data_Execution_Prevention
mw-redirect
Data Execution Prevention

values:
/wiki/Microsoft_Family_Safety
mw-redirect
Microsoft Family Safety

values:
/wiki/Microsoft_Fax
mw-redirect
Microsoft Fax

values:
/wiki/MSN_Food_%26_Drink
mw-redirect
MSN Food & Drink

values:
/wiki/Help_and_Support_Center
mw-redirect
Help and Support Center

values:
/wiki/MSN_Health_%26_Fitness
mw-redirect
MSN Health & Fitness

values:
/wiki/Travel_(Windows)
mw-redirect
Travel (Windows)

values:
/wiki/Problem_Steps_Recorder
mw-redirect
Problem Steps Recorder

values: nowraplinks collapsible autocollapse navbox-inner

values: Category:Microsoft Windows security technology

values: Category:All articles with unsourced statements

values: Category:Articles with unsourced statements from July 2016

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values:
/wiki/User_Account_Control
View the content page [ctrl-alt-c]
c

values: Discussion about the content page [ctrl-alt-t]

values: List of all English Wikipedia pages containing links to this page [ctrl-alt-j]

values: Recent changes in pages linked from this page [ctrl-alt-k]

values:
/wiki/Wikipedia:File_Upload_Wizard
Upload files [ctrl-alt-u]
u

values: A list of all special pages [ctrl-alt-q]

values: Permanent link to this revision of the page

values: Link to connected data repository item [ctrl-alt-g]

values: Printable version of this page [ctrl-alt-p]

values:
uls-settings-trigger
Language settings
0
button
true

values: 사용자 계정 컨트롤 – Korean

values: ユーザーアカウント制御 – Japanese

values: Контроль учётных записей пользователей – Russian

values: 使用者帳戶控制 – Chinese

values: /static/images/wikimedia-button-1.5x.png 1.5x, /static/images/wikimedia-button-2x.png 2x

values: /static/images/poweredby_mediawiki_132x47.png 1.5x, /static/images/poweredby_mediawiki_176x62.png 2x

values:
suggestions
display: none; font-size: 13px;

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-User_Account_Control rootpage-User_Account_Control skin-vector action-view