![]() When the administrator needs to perform a task that requires the administrator access token, Windows automatically prompts the user for approval. As a result, all apps run as a standard user unless a user provides consent or credentials to approve an app to use a full administrative access tokenĪ user that is a member of the Administrators group can sign in, browse the Web, and read e-mail while using a standard user access token. Explorer.exe is the parent process from which all other user-initiated processes inherit their access token. It's used to display the desktop by executing the process explorer.exe.It's used to start applications that don't perform administrative tasks (standard user apps).Contains the same user-specific information as the administrator access token, but the administrative Windows privileges and SIDs are removed.When an administrator logs on, two separate access tokens are created for the user: a standard user access token and an administrator access token. The access token contains information about the level of access that the user is granted, including specific security identifiers (SIDs) and Windows privileges. When a user signs in, the system creates an access token for that user. The following diagram shows how the sign in process for an administrator differs from the sign in process for a standard user.īy default, both standard and administrator users access resources and execute apps in the security context of a standard user. To better understand how this process works, let's take a closer look at the Windows sign in process. ![]() When a standard user attempts to run an app that requires an administrator access token, UAC requires that the user provides valid administrator credentials.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |