Advice Request Standard user account, or User account control = High, or both?

[shmu26]

What are the relative advantages of
(A) Standard user account.
(B) User account control set to High, on an Admin account.

Is (B) as good as (A), or not?

 

[ForgottenSeer 85179]

As MT user you can use "(B), UAC on max" without trouble and better comfort.
Just use H_C / harden your system and your system is strong enough against 99% malware.

UAC also make your default admin account to a restricted thanks to tokens.
See How User Account Control works (Windows 10) - Microsoft 365 Security

 

[shmu26]

@Andy Ful do you have any comments on this?

 

[Andy Ful]

What are the relative advantages of
(A) Standard user account.
(B) User account control set to High, on an Admin account.

Is (B) as good as (A), or not?

It is not. There are some unpatched UAC bypasses on Admin account (UAC set to "Always notify") that are blocked on SUA. The difference is not especially important when using default-deny security in the home environment on well-updated Windows 10 with well-updated software. Anyway, if one has no problems with SUA then it is always better to use it over the Admin account. Generally, SUA is useful as general anti-exploit prevention for Windows & Microsoft software vulnerabilities.