Windows Vista UAC.ppt

Windows User Account Control: Separating the Administrator from the Administrator. Windows XP provides a single access token for all users. An administrative user always uses their “administrative” token to access all resources. Many downfalls to this method Installation of software without interaction from the user. Code run through exploits using the users token. Windows Vista splits the access tokens for users with administrative privileges. Vista included only two types of users. Administrators; tokens provided are a “filtered” standard user token and an “full administrator access” token. Standard Users; only provided a “standard user” token. Benefits of the UAC Installation of software now requires conscious action on the part of the user. Malicious code cannot be installed without the knowledge of the user. When an administrator performs a task that requires the “administrator access” token an elevation prompt is provided. What actions require elevated privileges? Install and uninstall applications Install a driver for a device (E.G. a digital camera driver) Install Windows updates Modify UAC settings in the Security Policy Editor snap-in (secpol.msc) Copy or move files into the Program Files or Windows directory Which Actions do not require elevated privileges? Establish a Local Area Network connection Modify Display Settings Open the Date and Time Control Panel and change the time zone Color Coding of Elevation Prompts. Red background and red shield icon: The application is from a blocked publisher or is blocked by Group Policy. Blue/green background: The application is a Windows Vista administrative application, such as a control panel. Gray background and gold shield icon: The application is Authenticode signed and trusted by the local computer. Yellow background and red shield icon: The application is unsigned or signed but not yet trusted by the local computer. AIS is a new service in Vista Launched when an application that requires elevated privilege