But I want a yes/no prompt. Otherwise anything can request root access and get it without my input. Again, Windows handles this about as well as any system without granular permissions based access control can. A prompt comes up which is presented on the secure desktop, thus necessitating manual intervention but only requiring a single click since the secure desktop is only able to be interacted with by SYSTEM level processes anyway.