Yeah, this was the way XP should be configured, but all the n00bs don't do this. But this kind of configuration has some issues (due to runAs service). now that's the trick inside the UAC. You have 2 accounts in 1! The normal administrator accounts have 2 security tokens (1 as limited user and 1 for doing operations with needs elevated rights). The normal user token is used when you login to Windows so you are a limited user. When you want to install applications you click the UAC prompt to have the elevated rights. This is cool Read about how the UAC works before posting this whole nonsense and disabling it: http://technet.microsoft.com/en-us/magazine/2007.06.uac.aspx Here is a comparison of Vulnerabilities between XP and Vista http://blogs.technet.com/security/archive/...eport-2007.aspx Also using UAC means that IE7 is running in Protected Mode, so that a malicious program can't change settings and can't install itself in an autostart location. With this IE7 is a really good and safe browser! It's always the same, people are not willing to learn new things and that's why they turn off features they DO NOT UNDERSTAND. I thought that people here are better informed and have fun with learning new things, but I was wrong. That is sad