I'm having trouble understanding the Windows 7 security model. I gather there are two types of users: a standard user and an Administrator. Upon logon the standard user is issued a single "token" but the Administrator is issued two" tokens (user and admin). Still , somehow, there are tasks that the Admin will be asked to enter an Admin account and password before being permitted to complete. Am I correct? If so, does turning the UAC slider all the way down (not recommended) remove those questions? Or are there some tasks that always require the Admin to enter an Admin account and password? TIA, Barkingdog P.S. By Administrator I mean someone who belongs to the local Admins group on a worksation or is a Domain Adsmin.

Yes with UAC you have 2 tokens and the filtered token has standard user rights. When an operation needs admin rights, you get the UAC prompt and when you accept it the operation is started with the non filtered token which has admin rights."A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/