Security question about UAC and Admin aprroval mode

Greetings Ladies and Gentlemen,

I use an Administrator account with UAC in default. I was reading about Admin Approval and noticed that it is disabled. Should this be enabled? I noticed when it mentions this Admin Approval it says "Built-In"
Administrator and looking at Brink's tutorial there looks like there is a difference between an Administrator account and a Built-In Administrator account? If so then would I be correct in saying I do not need Admin Approval enabled?

I'm assuming it would say Built-In Administrator under my account info if it was the other one. I receive the UAC consent prompts so am I correct in saying I am protected?


Thanks!

For security, it's safest to use a standard account for routine use. I only log into the admin account for computer maintenance. I also have a second backup admin account in case the main one becomes corrupted. There is no need to use the "built in" admin account.

Try3 said:

About "Admin Approval and noticed that it is disabled. Should this be enabled?" - This is almost certainly a red herring but I cannot explain why unless you say what you have noticed & where you noticed it.

Your Admin account [created by you during or since Windows installation] has all the power of the Built-In Admin [that Windows created by itself].
- The major difference is that you have to go through the Admin prompt to give permission to use your Admin powers but the Built-In Admin bypasses that very useful step.
- In normal usage, your Admin account behaves just like a Standard account. That Admin prompt is you giving yourself permission to invoke your Admin powers for a given task.
- You can also bypass the need for that approval prompt but you would be bypassing essential protection [to such an extent that you ought never to connect to any network until you had restored that protection].

Denis

Ah, I think I understand.