Crispin Cowan, PhD Senior PM, WinCore Security Microsoft Corporation PC51

Default account type

Much more secure, but much less convenient Will get better in future releases, want it to be the default

Petit Demo

Things an Administrator Can do

Things an Administrator Can do Things a standard User can do Things a standard user can do

Things an Administrator Can do Things a standard User can do Things a real user Needs to do

Things an Administrator Can do Things a standard User can do Things a real user Needs to do These are UAC elevations

Things an Administrator Can do Things a standard User can do Things a real user Needs to do These are UAC elevations They allow the user to do privileged operations when needed

Things an Administrator Can do Things a standard User can do Things a real user Needs to do These are UAC elevations They allow the user to do privileged operations when needed While highlighting that these are privileged operations that you don’t want to happen without your consent

Low Privilege Application Low Privilege Application High Privilege COM Object High Privilege COM Object Malware Malware can press buttons on low application, Causing bad things in high COM object

Low Privilege Application Low Privilege Application High Privilege COM Object High Privilege COM Object Malware Malware cannot press buttons on high COM GUI, Protected by UIPI High Privilege COM GUI High Privilege COM GUI

XKCD 327

Please fill out your evaluation for this session at: This session will be available as a recording at:

© 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.