Raven Mill said:
<< Built-in Administrator Account is Disabled by Default on New
Installations...
The built-in Administrator account is disabled by default in Windows Vista
Beta 2. If Windows Vista determines during an upgrade from Windows XP that
the built-in Administrator is the only active local administrator account,
Windows Vista leaves the account enabled and places the account in Admin
Approval Mode. >>
You have to understand the way it works now...and this is also only if you
have updated Beta2...
As far as *I* can see it, it simply disables the Administrator account
within the user settings from control panel and such. It is quite easy to
go in and UNcheck the "disable this account" box in the Computer
Maintenance settings.
I've never really been great with the settings there, and I had the same
questions when I first installed Beta2. Because I was having problems
with something that I just didn't understand at the time. (Working with
JUNCTIONS) If you are marked as an administrator, You ARE the
administrator. Am I correct in my thinking that way?
I'm more of a hardware person than a security person...
Not necessarily (the if you are marked as an Administrator, you are the
Administrator comment). UAC adds another layer of protection to the scene
now. So, even the Computer Administrators are more or less limited users.
It doesn't seem to make sense, but in all honesty it does. A limited user
has two layers of protection (you have to provide Administator credentials
(or the credentials of a Computer Administrator, if you will) then clicking
on the "Run as Administrator" box that appears), whereas the "Computer
Administrator" only has to click on the "Run as Administrator" box.
It's a half-way method of doing su in Linux/Unix. However, Microsoft hasn't
refined it as much as the *nix distros have. But, that's coming also. In
the internal builds, UAC/UAP is supposedly less intrusive then it is in our
builds (including the TechBeta builds). So, time will tell.
HTH
--
Patrick Dickey.
smile... someone out there cares deeply for you.
http://www.microsoft.com/protect
http://update.microsoft.com
http://www.pats-computer-solutions.com