是什么让 c:\Program Files 受 UAC 保护? [英] What makes c:\Program Files UAC-protected?

问题描述

我知道 c:\Program Files 受 UAC 保护，如果我允许用​​户安装到 d:\Program Files，这不是，通过默认，UAC 保护.除了目录安全设置之外，是什么让 c:\Program Files UAC 受到保护?是简单的目录安全性，还是 Windows 做的其他事情使它与众不同?

I know that c:\Program Files is UAC-protected, and if I allow a user to install to d:\Program Files, this is not, by default, UAC protected. What makes c:\Program Files UAC protected other then the directory security settings? Is it simply directory security, or is there something else that Windows does to make it special?

我想建议某人是否可以使 d:\Program Files 与 c:\Program Files 一样安全.如果我要创建与 c:\Program Files 具有相同目录安全性的 d:\Program Files，这些文件夹是否等效?

I am trying to advise someone if it is possible to make d:\Program Files sort of as equivalently secure as c:\Program Files. If I were to create d:\Program Files with the same directory security as c:\Program Files, would these folders be equivalent?

推荐答案

目录安全性本身决定了用户在添加、删除或更改该文件夹中的文件时可以或不可以做什么.UAC 仅发挥作用，即使对于 Windows 中管理员组中的用户，您现在(默认情况下)也没有将管理员令牌附加到您的登录会话.当您尝试执行特权操作时，Windows 不允许您并开始尝试获取具有管理员访问权限的用户的过程.由于您的帐户是 Adminstrators 的成员，UAC 将显示允许/拒绝对话框，并且仅对于该操作，管理员令牌将附加到您的登录会话.由于您是管理员的成员，您可以单击确定"或取消".如果不是，系统会提示您输入具有管理员权限的帐户的登录凭据.

Directory security alone dictates what a user can or can't do in regards to adding, deleting or changing files in that folder. UAC only comes into play in that even for users in the Administrators group in Windows, you now (by default) DON'T have the admin token attached to your login session. When you try to do a privileged action, Windows doesn't let you and begins the process to try and get a user that does have admin access. Since your account is a member of Adminstrators, UAC will show the Allow /Deny dialog, and FOR THAT ACTION ONLY the admin token will attach to your logon session. Since you're a member of admin, you can click just OK or cancel. If you were not, you'd be prompted for logon credentials for an account which does have admin privileges.

您可以在此处阅读有关 UAC 以及幕后情况的更多信息:http://technet.microsoft.com/en-us/library/dd835561(v=ws.10).aspx

You can read more about UAC and what's going on behind the scenes here: http://technet.microsoft.com/en-us/library/dd835561(v=ws.10).aspx

这篇关于是什么让 c:\Program Files 受 UAC 保护?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！