Read this section for an understanding of User Account Control and the security model associated with Microsoft® Windows® Vista.
Microsoft Windows Vista User Access Control
Microsoft Windows Vista implements a new security model referred to as User Account Control (UAC), which when enabled limits access to protected directories and sections of the registry. These limits are imposed on standard users and members of the Administrator group. Members of the Administrator group are prompted for access each time they attempt to access the resource. Likewise, users must provide the password of a member of the Administrators group each time they want to access the resource. An additional limitation in both scenarios is the dialog prompting for consent or the password has a two-minute timeout after which it will disappear and interrupt software installations or deny access to the requested resource.
UAC also implements resource virtualization for the protected directories and sections of the registry. An example of resource virtualization is a standard user trying to create a file in C:\\Program Files\\<MyApp
> will not receive an access error; rather the file will be created in C:\\Users\\<user
. If UAC is disabled, resource virtualization is disabled.
IBM® Lotus® Expeditor can be installed with UAC enabled or disabled, though it is recommended to keep User Account Control enabled to help secure the system.
Administering the platform on Windows Vista
With the advent of the new Microsoft security model in Vista, the platform is inherently more secure as all users are limited to standard user access rights. Administrative users can request elevated privileges when they need to perform administrative functions. For IBM Lotus Expeditor, you must launch the platform requesting the elevated privileges when installing additional features, multicultural language support, or making other configuration changes which might affect all users. This will allow proper creation of new application icons on the Windows Desktop or in the Windows Start Menu and proper creation of global registry keys. The platform should not be run with elevated privileges excessively as some functions such as launching external browsers will not behave as expected. To run the platform with elevated privileges:
- Log in to Vista as a user part of the Administrators group
- Right-click on the IBM Lotus Expeditor icon (typically on the desktop or in the Start Menu)
- Select Run as administrator
- Respond to the Vista prompt for consent to run the program with elevated privileges
Parent topic: Installing the Lotus Expeditor Client on the desktop: XPD622