To: mishedlo who wrote (63518 ) 2/8/2007 6:52:53 PM From: regli Read Replies (1) | Respond to "... kb.iu.edu technet.microsoft.com "... User Account Control leverages the Windows security user model to distinguish between administrator and standard users. The standard user account is an account that has no computer administrator privilege. When a user whose account is a member of the local Administrator account logs on to a Windows Vista computer, they are logged on as a standard user by default. When the user wants to perform a task that requires administrative privileges, such as installing an application, Windows Vista explicitly prompts the user for permission or for credentials, depending on the security policy that is chosen. This process helps ensure that malware cannot silently install on a user’s computer. Unlike Windows XP, however, standard users are not automatically blocked from performing tasks that require administrative privileges. Windows Vista explicitly prompts a standard user to enter valid credentials for a local administrator account before it will allow the standard user to perform the task. ..." 72.14.253.104 "...System services are background processes that are always running to support key functionality. They have been a major target for malicious software attacks because they typically run with the highest possible system privileges (referred to as LocalSystem). A malicious attack that exploits system services could cause problems by running arbitrary code with administrator privileges on the user’s machine. (The Slammer, Blaster and Sasser worms all targeted system services.)
