It is most annoying to have to keep swiching users to o it but this is the only way to provide security. The answer however is not to only have 2 levels, but have several allowing a proper power user account, which however still protects the system against abuse in critical areas, such as modification of the system itself (software installation, driver upgrades etc). The limited user account should be for users who really don;t understand computers and for business use. For most other situations, the admin account is too open really and the imited account is far too closed. Therefore what actually happens is that no-one uses a limited account. I certanly don't and couldn't do my job if I did. Instead of UAC as it is, it should have worked as an improved local policy system, with nicely organised and simply named options for configuration, similar to AD but less obtuse to use. With the Windows Installer service, and the fact that it keeps track of components, Security for instance could have been sepcified in Add/Remove Programs... sorry Programs and Features. As well as a more detailed one in policy settings. No most users would never need to touch it if there appropriate defaults, but it would give the power to do so and make UAC actually usable. Oh and Tiel, Linux is more secure than Windows for many reasons. What you say has some truth, yes more viruses are written for Windows users because MS have a