Is the Administrator protection FINALLY has been rolled out? Take a look from the images.


pseymour said:
credential thefts are possible in theory.
...
Administrator Protection creates a separate elevation path rather than having the user's normal administrator token simply sitting there available for elevation
Click to expand...

I do not understand the difference between my enforcing a PIN for elevation with UAC and Administrator Protection doing what seems, to me, to be the same thing.
- I got as far as understanding that using a PIN was a worthwhile precaution against credential theft in that it avoided exposing the Admin account's password.
- I got as far as understanding that enforcing use of that PIN for UAC elevations on the Secure desktop was a necessary step in avoiding that exposure.


Denis
 

My Computer My Computer

At a glance

Windows 11 Home x64 Version 26H2 Build 26300....
OS
Windows 11 Home x64 Version 26H2 Build 26300.9457
It seems as if you're under the impression that the UAC credentials dialog is equivalent to the Hello authentication system. It is not.
 

My Computer My Computer

At a glance

Windows 11 Enterprise 25H2
OS
Windows 11 Enterprise 25H2
I am trying to find out what Admin protection achieves.
In the hope of stimulating an answer, I described what I can do without it [UAC at full, PIN set, PIN enforced at UAC prompts on the Secure desktop].


Denis
 

My Computer My Computer

At a glance

Windows 11 Home x64 Version 26H2 Build 26300....
OS
Windows 11 Home x64 Version 26H2 Build 26300.9457
Well I guess that's been answered then. Admin protection uses Hello, not the UAC dialog box. It also has profile separation that UAC does not.
 

My Computer My Computer

At a glance

Windows 11 Enterprise 25H2
OS
Windows 11 Enterprise 25H2

My Computer My Computer

At a glance

Windows 11 Home x64 Version 26H2 Build 26300....
OS
Windows 11 Home x64 Version 26H2 Build 26300.9457
Depending on how loosely you want an explanation to depict the differences, think about a browser storing your passwords vs setting up passkeys

(Unless I’m way off base here @pseymour )
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
dacrone said:
Depending on how loosely you want an explanation to depict the differences, think about a browser storing your passwords vs setting up passkeys
(Unless I’m way off base here @pseymour )
Click to expand...

That's not a bad analogy in terms of strength, but comparing it to a browser is kind of one of those things that falls apart quickly.

Really @dacrone's post #18 is pretty good, except in the first item, it says UAC uses a consent dialog. Of course it doesn't have to, and using the credentials dialog on the secure desktop is pretty good, but it's still not as good as Hello.

And even if the UAC dialog was as good as Hello authentication, UAC does not provide profile separation.
 

My Computer My Computer

At a glance

Windows 11 Enterprise 25H2
OS
Windows 11 Enterprise 25H2
You must log in or register to reply here.

Similar threads

  • Article Article
Third generation of OneDrive (OD3) has been rolled out
Replies
0
Views
794
Brink
Brink
  • Article Article
Solved Fences5 5.81 Release Update - NOTE: This has been rolled back to 5.80
Replies
2
Views
2K
antspants
antspants

Latest Support Threads

Latest Tutorials

Back
Top Bottom