Re: I turned off UAC

Justin wrote:
Kayman wrote:
On Sun, 15 Feb 2009 01:03:01 -0500, Justin wrote:

For various reasons I turned off UAC.
Is there a way I can prevent that bubble in the lower right from warning me constantly?

Five Misunderstood Features in Windows Vista
¡E User Account Control
¡E Image management
¡E Display Driver Model
¡E Search
¡E 64 bit architecture
http://www.microsoft.com/downloads/details.aspx?FamilyID=34f40386-9661-49b1-87ce-6d4a39e83747&DisplayLang=en


The User Access Control (UAC) can detect rootkits before they install.
AV-Test.org carried on a test of common AV applications to find out how
good they detected rootkits. The examiner had to turn off UAC because it
detected every rootkit used in the test.

Avoiding Rootkit Infection.
"The rules to avoid rootkit infection are for the most part the same as
avoiding any malware infection however there are some special
considerations:
Because rootkits meddle with the operating system itself they *require*
full Administrator rights to install. Hence infection can be avoided by
running Windows from an account with *lesser* privileges" (LUA in XP and
UAC in Vista).

You should understand the reason why UAC is there. You should read about
the two access tokens for user/admin on Vista, and yes, if UAC is disabled,
then Run As Administrator is disabled too.

http://technet.microsoft.com/en-us/library/cc709691.aspx
http://technet.microsoft.com/en-us/magazine/cc160882.aspx
http://technet.microsoft.com/en-us/magazine/cc138019.aspx

Now, listen to the experts and be guided accordingly!

Good luck :)


I understand why UAC is there.
I also understand that it interferes with Firefox/Thunderbird's update and the Java updater as well.

Interferes as far as what? I have Thunderbird and Java in use, and I see no interference with UAC enabled, other than you have to approve the update.

Do you really know what UAC is about? It's about not allowing a user-admin to run on the Internet or do anything else as a full-rights admin like on XP.

The admin-user is only a user with Standard user rights, that must be escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights.

Unlike XP that has no UAC, Vista doesn't allow a virus or malware the ability to have full rein on the computer once it has compromised the machine like on XP with a full-rights admin user using the machine.

Malware or a virus can only run under the context of the user account that is using the computer. If admin user on Vista is only a Standard user with Standard user rights in reality that must be escalated to full admin rights, then that mitigates the damage that can occur because the virus or malware is not running with full admin rights with the user that's using an admin account on Vista.

Nothing is bulletproof, but one doesn't see a lot of posts by Vista users about virus or malware issues, not like you see on XP.




.

Relevant Pages

  • Re: I turned off UAC
    ... Five Misunderstood Features in Windows Vista ... The User Access Control (UAC) can detect rootkits before they ... full-rights admin like on XP. ... The admin-user is only a user with Standard user rights, ...
    (microsoft.public.windows.vista.general)
  • Re: Poor Security Measures Waste Time
    ... Turn on UAC, answer the prompts and you should now have access to those ... I saw evidence of this through Process Explorer. ... I found out about how Admin rights were not ...
    (microsoft.public.windows.vista.security)
  • Re: Permissions again
    ... because it runs as admin, but compiled I get error 75, error in acces to ... And if I manually delete the file, the UAC pops up for confirmation. ... rights to change permissions. ... Here's the ACCESS_MASK for Users on a folder: ...
    (microsoft.public.vb.general.discussion)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: The Microsoft Search service cannot be administered under the present user accou
    ... When you changed the SQL-Service to run with Local User account (with admin ... rights), did you make this change in the SQL Server 2000 Enterprise Manager ...
    (microsoft.public.sqlserver.fulltext)
Loading