Re: Use of credentials with UAC in vista




"Mr. Bean" <mb@xxxxxxxxxxxxxxxx> wrote in message news:3PDqk.96475$nD.17560@xxxxxxxxxxxx
This is what is wrong with Vista IMO. They took away the ability to run
the OS how I want. I don't want UAC running and prefer to use a limited
user account without UAC. But the problem with that is that in Vista if
you run under a limited user account you can't run anything with admin
privileges if something needs it like you can on XP. The run as admin
command is there but it just runs the exe without admin privilieges and
never asks for admin user name and password. That means I have to log
back into the admin account whenever I need to run a prog that needs
admin access. I don't have to do that on XP so in this way Vista is worse
than XP. I hope they change this in Windows7 because how I choose to run
the OS should be a users choice and not enforced by Microsoft. I ran
withy UAC for a long time but finally got fed up wityh it so created a
limited user account instead so that when I am connected to the internet
I still have good protection from malware etc. That's how I have always
run XP and is how I would prefert to run Vista too. UAC is for the dweebs
who never ran XP under a limited user account.

They are doing the same thing on Linux, basically. The user on Linux runs
with Limited user rights until such time that the user needs its rights
escalated to root-admin-user and they must give that root-admin user-id and
psw to escalate rights.

With UAC enabled and you're running as Admin on the machine, the Admin gets
assigned two security tokens. One token is for Full Admin rights, and the
second security token is Standard user rights. The Admin account is locked
down to Standard user security token, until such time that it needs its
privileges escalated to the Full Admin security rights token, which is
implemented by a allow of disallow prompt. If you are a Standard user with
only the Standard user security token, then one must give that Admin user-id
and psw.

How is this not unlike what is happening on Linux?

I got four applications I run as Admin on Vista that need Full Admin rights
to run, and I don't run them that much. The rest of the applications and I
have lots of things I run only need the Standard user token assigned to my
admin account.

So the reality for me is that I am running as Admin on the Internet with
Standard user rights. If I get prompted by UAC to escalate to Full Admin
rights by the prompt to allow or disallow, then I have to conclude that
something may be bad or it may be good, but it's I that has the control to
allow or disallow.

Most users of XP are not running with Limited rights sitting out there on
the Internet. They are out there with Full Admin rights, running around.

.



Relevant Pages

  • Re: I turned off UAC
    ... Five Misunderstood Features in Windows Vista ... The User Access Control (UAC) can detect rootkits before they ... full-rights admin like on XP. ... The admin-user is only a user with Standard user rights, ...
    (microsoft.public.windows.vista.general)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... The admin-user is only a user with Standard user rights, that must be escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: Poor Security Measures Waste Time
    ... Turn on UAC, answer the prompts and you should now have access to those ... I saw evidence of this through Process Explorer. ... I found out about how Admin rights were not ...
    (microsoft.public.windows.vista.security)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: The Microsoft Search service cannot be administered under the present user accou
    ... When you changed the SQL-Service to run with Local User account (with admin ... rights), did you make this change in the SQL Server 2000 Enterprise Manager ...
    (microsoft.public.sqlserver.fulltext)