User Account Control, or UAC, is back in Windows 7. Microsoft has tweaked the feature so that it's less intrusive, but it's not clear whether that means you're actually more or less secure than you were in Vista. UAC was one of the biggest changes in Vista. It tightened program access, but did it in such a way as to frustrate many owners of single-user computers. Windows 7 provides more options for user customisation of UAC.
The default setting is to notify users only when programs try to make changes to the computer, one step below the most restrictive setting of Always Notify. Under Always Notify, anytime a program tries to access the Internet, or you try to make changes to the computer, Windows 7 will require user confirmation. The second-least restrictive option doesn't dim the desktop when UAC is activated, and will only notify the user when programs try to make changes to the computer. When the desktop dims, Windows 7 is locking it down and preventing access. Never Notify is the most relaxed option, and is only recommended by Microsoft for programs that aren't compatible with UAC.
UAC also displays a blue banner when confronted with a program from a known publisher versus a yellow banner and exclamation point when the program is from an unknown publisher. The number of clicks it should take to use UAC safely has been reduced, but it's important to note that it's a less-aggressive default posture by UAC.
A less glitzy, but no less important, change to how removable drives are handled also can impact your media. Unlike Windows XP and Windows Vista, Windows 7 will no longer AutoRun external hard drives and USB keys when they're connected. This kills off a risky vector for malware infections that has been the bane of many security experts.
It's possible that Windows 7 will eventually ship with additional programs, including the revamped Live OneCare antivirus and antimalware program now called Microsoft Security Essentials, but Microsoft has given no indication if that will happen. For now, users will have to download a third-party antivirus and antimalware program, although the Windows Firewall remains intact. As with many features in Windows 7 that have been carried over from Windows Vista, people will notice there's far more granular settings control than before. Features such as filtering outbound traffic, which were available in Vista but not exposed, are easier to access in Windows 7.