I think it might also be worth reminding / informing people that UAC was not introduced by MS as a security measure.
It was intended to be a convenience.
- Without UAC, if an Admin process has to be run then the Standard user has to back up whatever work is in hand, get out of the way to allow the Admin user to sit down in front of the computer, log in to an Admin user account and do whatever is necessary before then logging out, getting out of the way & going back to an IT dungeon somewhere.
- With UAC, the Admin can just take over, enter a password then get lost.
MS were very clear about this in the
Engineering Windows 7 series of articles issued in the run up to Windows 7 release in 2009.
-
User Account Control - Engineering Windows 7 - MSLearn
- UAC in Windows 7 was a significant improvement upon its equivalent in Vista.
So we are diverging from MS's intentions by being routinely logged in to Admin user accounts.
What appears to be the whole series is now available at
Engineering Windows 7 - MSLearn
Having said all that, Windows breaks UAC rules itself.
- If I'm logged into an Admin user account then I can set/clear the metered setting for a network. No UAC prompt appears.
- If I'm logged into a Standard user account then the metered setting for a network does not even appear.
All the best,
Denis
