[pavement]

UAC is merely a prompt that desensitizes users to more prompts. Whenever UAC shows up, for most people, the default reflex is just make the annoying prompt go away. Yes it to death.

Users simply should not log in as Administrators for day-to-day use. Anything requiring Administrator permissions should force a full log out, and change of identity. UAC doesn't educate users. Users should either be locked out of dangerous operations, or not locked out.

Administrators should take action only when there's the awareness that their decisions could result in the need to perform a full re-install of the system, without internet access.

This is the "nuke from orbit" gambit. It's the only way to be sure.

[funkymike]

I recall at least one instance where my mom stopped at a UAC prompt wondering what it meant. Her calling me to verify what it was doing saved her from installing some malware. So anecdotally those prompts are not completely useless. She is not a tech literate person either, not much beyond referring to the browser as "the internet."

[pavement]

But, did she have Administrator permissions?