In this paper I will talk about the much discussed topic of Windows Vista and the feature of UAC. In this discussion, I will show what a common user might be expected to do, in response to UAC alerts, in a normal business day. I will include information discussing the probability of users allowing or disallowing common actions, and also the potential for UAC spoofing.