By default, your Program Files and Windows folders, and most of their subfolders,
are protected, as well as almost all of the HKEY_LOCAL_MACHINE\
Software branch in the Registry. UAC does not protect a user??™s own folder C:
\Users\{your_username}\, nor does it lock out changes to the HKEY_CURRENT_
USER\Software branch of the Registry.
To turn virtualization off, set the User Account Control: Virtualizes file and
registry write failures to per-user locations option in the Local Security Policy
editor to Disabled. But keep in mind that turning off virtualization won??™t,
in itself, permit older applications to write in these protected areas; instead,
it will cause more of your older programs to stop functioning, since Windows
will no longer give them a safe place to play.
To see which of your running programs are subject to virtualization, rightclick
an empty area of your taskbar and select Task Manager. Choose the
Processes tab, and then go to View ??? Select Columns. Turn on the Virtualization
column, and then click OK. Now, in the Processes list, you??™ll see that
some programs??”particularly the older ones??”have virtualization set to
Enabled, as do explorer.exe and iexplore.exe (because of the danger of addons).
UAC-aware programs will have virtualization set to Disabled, and programs
already running as the administrator will have it set to Not Allowed.
Logon and Profile Options | 487
Users and
Security
Logon and Profile Options
Here??™s the dilemma: you??™ve set up multiple user accounts on a machine, and
you??™ve gone the extra mile to ensure that your data is properly protected by
configuring permissions and employing encryption.
Pages:
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678