UAC UIAccess Secure Desktop

Internet / Network SecuritySearchNetwork SecurityCybercrimeSecure Win/MacSocial/MobileShare

Discuss in my forum

User Account Control: Allow UIAccess Applications to Prompt w/o Secure DesktopConfiguring Vista User Account Control SettingsFrom Tony Bradley, CISSP-ISSAP, former About.com Guide

See More About:allow uiaccess applications to prompt for elevation without using the secure desktopuacconfigure uac in vistaThis security setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts being used by a standard user.

If you enable this setting, UIA programs including Windows Remote Assistance can automatically disable the secure desktop for elevation prompts. Unless you have also disabled elevation prompts, the prompts will appear on the interactive user's desktop instead of the secure desktop.

If you disable or do not configure this setting, the secure desktop can only be disabled by the user of the interactive desktop or by disabling the "User Account Control: Switch to the secure desktop when prompting for elevation" setting.

UIA programs are designed to interact with Windows and application programs on behalf of a user. This setting allows UIA programs to bypass the secure desktop to increase usability in certain cases, but allowing elevation requests to appear on the regular interactive desktop instead of the secure desktop increases your security risk.

Since UIA programs must be able to respond to prompts regarding security issues, such as the UAC elevation prompt, UIA programs must be highly trusted. In order to be considered trusted, a UIA program must be digitally signed. By default, UIA programs can be run only from the following protected paths:

..

View the Original article