UserAccountControl 66048 and 66080

[Narragansett]

One of the main innovations which I noticed in Windows 7 is the UAC, which each account is enabled by default. Thus, the current user has to decide whether a program or service should be allowed. So that makes the system a bit security. I found a question on forums about UserAccountControl 66048 and 66080. What are this settings and can UAC help more in system security.

[Dr. V]

The UAC can only be disabled completely. The account must be a member of the administrators in order to track the deactivation can be performed. That is easy if it is annoying you the most. For UserAccountControl 66048 and 66080 there are password settings. The 66048 Account means settings for DONT_EXPIRE_PASSWORD and the other menas DONT_EXPIRE_PASSWORD - PASSWD_NOTREQD.

[SalVatore]

The User Account Control is responsible for the execution of administrative tasks. Basically it is recommended to let the thing work for your system security. There are still many users with administrative privileges to work, and therefore to viruses and attacks, an increased safety risk. Until Windows Vista, the attackers had therefore always equal to the full privileges on the running system.

[jesse]

What I think that the idea for UAC is to use the administrative privileges for installation and configuration of Windows. If you insert the system works, one that should really make a normal user without administrative privileges. Once an application needs administrative privileges to run, a dialog box appears to confirm what is extra, so be granted for an application the appropriate permissions.

[Enriquee]

The UAC offers them the security of a standard user which does have any administrative privileges. In addition, however, can also administrative tasks are carried out without a new application with an administrative account is required. There is just settings defined by the UserAccountControl 66048 and 66080. The setting are enabled from the registry entries.

[Lillebror]

The administrative user will get two security tokens assigned by default. It worked with the token that identifies them as a standard user. So you have the same privileges as a standard user and work with limited access permissions. Explicated only by a user confirmation, a process can switch to the second token of the user, which gives him full administrative privileges. There will be two security tokens passed between.

[DanielV]

The issue is that if you use any other application then Windows must also recognize that the application requires administrative privileges. The applications are at the start in Integrity Level. When you give the application a dialog will appear to confirm. The Windows applications that require administrative privileges, you can usually recognize also already on the icon.