![]() |
![]() |
![]() |
Group Policy Extensions in Windows Vista and Windows Server 2008, Part 3
Thursday, September 20th, 2007
If you would like to be notified when Brien Posey releases the next article in this series please sign up to the WindowsNetworking.com Real time article update newsletter. Being that security was Microsoft’s paramount concern when developing Windows Server 2008 and Windows Vista, it should come as no surprise that some of the new group policy settings are specifically related to how these various new security features are implemented. I want to begin this article by talking about the group policy settings that are related to a new security feature called User Account Protection (also referred to in some Microsoft documents as User Account Control or UAC).
In case you aren’t familiar with User Account Protection it is a security feature designed to protect Windows against users with excessive permissions. In a Windows XP environment, it was usually necessary for users to have local administrative permissions in order for them to be able to do their jobs. When designing Vista, Microsoft took a long, hard look at what capabilities users really needed, and rolled those capabilities into standard user accounts so that users would not have to be granted local administrative permissions. For example, some of the tasks that Windows Vista allows a mobile user to perform without having administrative permissions include installing a printer driver, entering a WEP key, configuring a VPN connection, and installing application updates. Group Policy Extensions in Windows Vista and Windows Server 2008, Part 3
Popular Posts
Please read our Disclaimer




