Re: Vista Guest Account Has Unrestricted Access to the Registry?
seriously I don't know why anyone would disable UAC with its enormous potential to secure the most insecure system :cough: Windows...
Microsoft was 10 years behind industry security standards and other systems like Apple and Linux until they included this feature, It might not always be accurate informing you if a program needs elevation to run correctly or if a program legitimately requires it but for anyone who keeps an eye on PC security it gives them the power to deny anomaly programs (and users) the ability to make system-wide changes without the admin`s permission in a way thats perfectly balanced between user-user and user-system and thats just NOT possible under any previous Windows version...
Two good examples...The Guest user changing the registry in specific locations on XP and earlier windows can cause the entire computer to blue-screen permanently while on vista the changes crash just the guest user until they logout, the other good example is IE`s protected mode since it runs IE under a lower privileged user than your own so any exploit code ran inside the web browser can only affect the current user not the entire system. |