User Account Control, or UAC, is a security feature first introduced in Microsoft Windows Vista. It aims to improve security by limiting application software to user level privileges unless the process is authorized to run with elevated privileges.

learn more… | top users | synonyms

33
votes
3answers
28k views

How does the Windows “Secure Desktop” mode work?

Can anyone explain (or provide a link to a simple explanation) of what the Windows "Secure Desktop" mode is and how it works? I just heard about it in the KeePass documentation (KeePass - Enter ...
11
votes
2answers
2k views

Custom Metasploit payload with UAC bypass

The machine I am attacking has anti-virus installed. I have managed to use Veil Framework in order to create an initial reverse shell payload that is undetected by the AV. However, UAC is enabled on ...
10
votes
2answers
441 views

How is UAC a security improvement?

What does User Account Control on Windows offer in terms of security? It's just an extra click to potentially run a virus.
5
votes
1answer
173 views

What are the differences between “simple” UAC and two user accounts on Windows?

I'm currently thinking about increasing security on my Windows machine. As part of this harderning I considered the least-privilege principle and want to apply this on Windows using two different ...
7
votes
4answers
8k views

Preferred UAC configuration in Enterprises that use Login scripts to map drives?

In Windows 7, Vista and newer OS's, UAC will prevent logon scripts from mapping hard drives so that the following logon script code won't work: Dim WshNetwork Set WshNetwork = ...