Changes in User Account Control

Applies To: Windows 7, Windows Server 2008 R2

This product evaluation article written for the IT professional describes the changes for User Account Control (UAC) in Windows 7 and Windows Server 2008 R2.

Changes in User Account Control

The improvements to UAC in Windows 7 and Windows Server 2008 R2 result in an improved user experience when configuring and troubleshooting your computer. Improvements in UAC functionality include:

• Increase the number of tasks that the standard user can perform that do not prompt for administrator approval.

• Allow a user with administrator privileges to configure the UAC experience in the Control Panel.

• Provide additional local security policies that enable a local administrator to change the behavior of the UAC messages for local administrators in Admin Approval Mode.

• Provide additional local security policies that enable a local administrator to change the behavior of the UAC messages for standard users.

For more information about these improvements, see What's New in User Account Control. For information about configuring UAC, see User Account Control Step-by-Step Guide.

Reduced number of UAC prompts

The default UAC setting allows a standard user to perform the following tasks without receiving a UAC prompt:

• Install updates from Windows Update.

• Install drivers from Windows Update or included with the operating system.

• View Windows settings. (However, a standard user is prompted for elevated privileges when changing Windows settings.)

• Pair Bluetooth devices to the computer.

• Reset the network adapter and perform other network diagnostic and repair tasks.

The following table lists the likelihood of UAC prompts for user actions in comparison to Windows Vista SP1.

Actions	Only notify me when programs try to make changes to my computer	Always notify me
Change personalization settings	No prompts	Fewer prompts
Manage your desktop	No prompts	Fewer prompts
Set up and troubleshoot your network	No prompts	Fewer prompts
Use Windows Easy Transfer	Fewer prompts	Same number of prompts
Install ActiveX controls through Internet Explorer	Fewer prompts	Fewer prompts
Connect devices	No prompts	No prompts if drivers are on Windows Update, or similar number of prompts if drivers are not on Windows Update
Use Windows Update	No prompts	No prompts
Set up backups	No prompts	Same number of prompts
Install or remove software	No prompts	Fewer prompts

Changes in UAC administration

Changes to administer UAC include:

• The UAC experience can be configured in Control Panel, and four levels of notification are available.

• The behavior of UAC messages for administrators and standard users can be changed in local security policies.

• The ActiveX Installer Service allows enterprises to manage the deployment of ActiveX controls through Group Policy.