Windows 7 Security Features
User Account Control(UAC)
UAC for Standard Users
Microsoft made many changes to the operating system so that standard users could perform almost any day-to-day task. Tasks that standard users can do without receiving a UAC prompt that requires administrative privileges in Windows XP include:
- Viewing the system clock and calendar
- Changing the time zone
- Connecting to wired or wireless networks
- Connecting to virtual private networks (VPNs)
- Changing display settings and the desktop background
- Changing their own passwords
- Installing critical Windows updates
- Installing device drivers that have been staged
- Scheduling tasks
- Adding printers and other devices that have the required drivers installed on the computer or that are allowed by an administrator in Group Policy
- Installing ActiveX Controls from sites approved by an administrator
- Playing or burning CDs and DVDs (configurable with Group Policy settings)
- Connecting to another computer with Remote Desktop
- Configuring battery power options on mobile computers
- Configuring accessibility settings
- Configuring and using synchronization with a mobile device
- Connecting and configuring a Bluetooth device
- Restoring backed-up files from the same user
Additionally, disk defragmentation is scheduled to happen automatically in the background, so users do not need privileges to initiate a defragmentation manually. Some of the common tasks standard users cannot do include:
- Installing and uninstalling applications
- Installing device drivers that have not been staged
- Installing noncritical Windows updates
- Changing Windows Firewall settings, including enabling exceptions
- Configuring Remote Desktop access
- Restoring system files from a backup
- Installing ActiveX controls from sites not approved by an administrator