You have a computer that runs Windows 7. You log on to the computer by using a user account that is a member of Administrators group. From Windows Explorer you open C:windows system32driversetchosts in Notepad. You attempt to save the file and receive the Save As dialog box. You need to ensure that you can save changes to C:windowssystem32driversetc hosts. What should you do?
A.
Stop the Windows Search service.
B.
Remove the inherited permissions from the file.
C.
Start Windows Notepad by using elevated privileges.
D.
Change the User Account Control (UAC) settings to Notify me only when program try to make changes to my computer.
Explanation:
Windows 7 does not allow applications to write data to these secure locations.
User Account Control (UAC)
UAC is a security feature of Windows 7 that informs you when the action that you want to
undertake requires an elevation of privileges. If you logged on with a user account that was
a member of the local administrators group in previous versions of Microsoft Windows, such
as Windows XP, you automatically had administrator-level access at all times. This, by itself,
was not a problem because recommended good practice was that people logged on with
accounts that were members of the local administrator group only when they needed to do
something related to administration. The problem with this is that people tended to use their
administrator account as their normal user account. It was convenient for them because they
did not have to log off and log on again each time they wanted to do something related to
systems administration. Unfortunately, this behavior presented a security problem because
any program run by a user logged on with an administrative account runs with the rights and
privileges of that user. UAC resolves this problem by allowing a user that is a member of the
local Administrators group to run as a standard user most of the time and to briefly elevate
their privileges so that they are running as administrators when they attempt to carry out
specific administration-related tasks.
Privilege elevation
All users of clients running Windows 7 run with the rights of a standard user. When a user attempts an act that requires administrative privileges, such as creating a new user account, her rights need to be raised from those of a standard user to those of an administrative user. This increase in rights is termed
privilege elevation. UAC is a gateway to privilege elevation. It allows users who are members of the local Administrators group to access administrative rights, but ensures that the person accessing the Administrative rights is aware that they are doing so. This privilege elevation occurs only for a specific task. Another task executed at the same time that also requires privilege elevation generates its own UAC prompt.