Answer 1

Have fun getting past Windows UAC. You could maybe write a simple keylogger to get someone to input the login info, but not into UAC, if you're not using an advanced one.

Simple keyloggers mostly implement GetAsyncKeyState() and then just write the char data to a .txt file, that doesn't work for UAC (I mean it is their API after all).

Maybe run an external key event library? I don't know all the extents of the UAC event protection, but it seems pretty high.

Answer 2

No.