Quote:
Originally Posted by
tompsonn 
Quote:
Originally Posted by
Brutuz 
I was using Vista from beta and while it had its issues, it was just as if not more usable for me, Metro really does put a damper on it for me.
At least with Vista you have
full OS control.
It's very arguable, not "factually wrong" at all.
Err, except Linux and OS X allow you to access the root account and alter everything, MS is clearly angling to change that. I don't wish to give away any actual control of my PC to a 3rd party, if I want to completely change security, etc settings then I should be able to...The other question is why is MS locking this down?
Read this: "
User Administrators are no longer Admin, but are considered "Soft Admin" a type of blended shell layered 3rd Party Software Administrator ONLY. You have to go into your local security policies to disable this extra layers of protection from users, ONLY after you have figured out how to natively convert your account to a local user, then a local admin, and have UAC switched off via GUI interface. Then you can must make the changes in LocSec. Furthermore, this is just UAC, which acts like OSX Gatekeeper, you are still no longer a true administrator to your OS. The only administrator is the Windows 8 internal Administrator account, which must be logged into to make all systemic level changes."
You can clearly see that it's preventing you from making some major changes, one such change could be allowing the "soft admin" account to install files from a MSI or EXE file but only from the MS App Store.
Local admin account has been disabled since Vista, is this something different?
You are right, by default Vista/7 etc. internal Administrator is disabled. The difference being, creating a user that was an administrator had identical privileges. Now no longer the case. You are not an administrator in Windows 8,
even if you are a local admin.
It is now the equivalent of a power power user (double power included) as you do have the ability through 4 or 5 more hoops to give your local admin close to full administration with a small caveat: you break MetroUI which includes the desktop underlining. Even a few other services no longer executable in what the OS considers a non safe system. Something I have never seen before on Windows.
Windows Update forces your settings back to "stock" but I can't determine if its before getting updates, applying updates, or post updates. On a few occasions the Windows Update service was completely broken until I manually reverted FULL control access from my account.
Edit:
Basic Break Down:
Windows 7 - Create User, Usually Defaults first user to Admin
UAC - Notifies you only, asks/prompts your choice. It is fully disabled in Account Options.
Windows 8 - Create Online ID, Convert to Local User (or start here with creating a local user), add to Administrators Group. Mine did not automatically get added.
UAC - Disables all unsigned .exe (unsigned being anything MS doesn't approve of), Notifies/Prompts for administration access to programs signed, Prevents Access to System Functions even as Admin. Prevents installation of any non-signed executable.
Partially reduced functionality when disabled in Account Options.
Requires configuring of Local Security Policies to allow Administration level access to install/uninstall items.

Integrated with the entire system MetroUI, which includes the desktop interface, so disabling it does break configurations.
System functions such as Windows Update, Defender access, seem to restore UAC control behind the scenes. I again admit have not narrowed down which specific event causes, just the overarching use of such features.
Brutuz hit it right on the head. It's like using Linux and not having access to root, but through a round about way of getting access to root, and then periodically losing access to root when certain events or services flag it.
This is officially more locked down than OSX. One step away from a mobile device where we will need to root our computers.
Edited by RagingCain - 10/23/12 at 11:23pm