"Jeff Strickland" wrote in message
news:hnp00o$md3$1@news.eternal-september.org...
>
> "snuffles" wrote in message
> news:2EA23512-2DCD-42D8-A756-4CF7C1418ADF@microsoft.com...
>>I tried going through my company help desk. Unfortuantely they are still
>>on
>> XP and IE7 and did not run into any problem.
>>
>> I have tried to install all the update that window asked me. Strangely,
>> there isn't one for root certificate. Is there a root certificate update
>> for
>> Vista?
>>
>>
>
> If you are using Vista, odds are that your company's customers are also
> using Vista, and therefore the certificate ought to work.
>
> I found a problem with my Vista machine where the only user account on the
> machine was an Administrator account, but for whatever reason Vista would
> not play the ActiveX add-on for Flash. I went to the User Accounts and set
> User Account Control to OFF. The User Account Control is supposed to allow
> administrators and standard users have different access to the machine so
> that standard users can't make changes that harm the machine or the
> business enterprise. Given that simple explanation of the purpose of the
> UAC, it stands to reason that the only account is an Administrator
> account, wo the machine should do whatever the administrator wants it to
> do, but it does not always work out this way.
>
> Try turning the Usaer Account Control OFF, then reboot and see if the
> certificate loads. My theory is that the machine is protecting you from
> yourself when it should be doing what you want it to do.
UAC adds an extra security layer so that an Administrator account still
requires some interaction from the user to allow certain things to happen,
basically turning an Administrator account into a Standard Account with some
extra options. UAC has little to do with separating Admin accounts from
Standard accounts - it's there to help give an Admin level account the
chance to stop something malicious should it try to modify settings that a
Standard account would not have access to, but also so the Admin account can
allow a process to make those changes if necessary (such as when installing
software or updates) without having to log out and back in as a dedicated
admin user.
For more info on UAC see
http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx
While turning it off for testing an issue can help diagnose the cause of a
problem, leaving it turned off is not recommended as it leaves you more
vulnerable to malicious code that does manage to execute on your system.
--
Dan