Re: I turned off UAC

Jack the Ripper wrote:
Justin wrote:
Kayman wrote:
On Sun, 15 Feb 2009 01:03:01 -0500, Justin wrote:

For various reasons I turned off UAC.
Is there a way I can prevent that bubble in the lower right from warning me constantly?

Five Misunderstood Features in Windows Vista
¡E User Account Control
¡E Image management
¡E Display Driver Model
¡E Search
¡E 64 bit architecture
http://www.microsoft.com/downloads/details.aspx?FamilyID=34f40386-9661-49b1-87ce-6d4a39e83747&DisplayLang=en


The User Access Control (UAC) can detect rootkits before they install.
AV-Test.org carried on a test of common AV applications to find out how
good they detected rootkits. The examiner had to turn off UAC because it
detected every rootkit used in the test.

Avoiding Rootkit Infection.
"The rules to avoid rootkit infection are for the most part the same as
avoiding any malware infection however there are some special
considerations:
Because rootkits meddle with the operating system itself they *require*
full Administrator rights to install. Hence infection can be avoided by
running Windows from an account with *lesser* privileges" (LUA in XP and
UAC in Vista).

You should understand the reason why UAC is there. You should read about
the two access tokens for user/admin on Vista, and yes, if UAC is disabled,
then Run As Administrator is disabled too.

http://technet.microsoft.com/en-us/library/cc709691.aspx
http://technet.microsoft.com/en-us/magazine/cc160882.aspx
http://technet.microsoft.com/en-us/magazine/cc138019.aspx

Now, listen to the experts and be guided accordingly!

Good luck :)


I understand why UAC is there.
I also understand that it interferes with Firefox/Thunderbird's update and the Java updater as well.

Interferes as far as what? I have Thunderbird and Java in use, and I see no interference with UAC enabled, other than you have to approve the update.

As in when it tried to update, the UAC prompt comes up; I allow it and it still doesn't update.



Do you really know what UAC is about? It's about not allowing a user-admin to run on the Internet or do anything else as a full-rights admin like on XP.

I know that.



The admin-user is only a user with Standard user rights, that must be escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights.

I know that too.


Unlike XP that has no UAC, Vista doesn't allow a virus or malware the ability to have full rein on the computer once it has compromised the machine like on XP with a full-rights admin user using the machine.

Malware or a virus can only run under the context of the user account that is using the computer. If admin user on Vista is only a Standard user with Standard user rights in reality that must be escalated to full admin rights, then that mitigates the damage that can occur because the virus or malware is not running with full admin rights with the user that's using an admin account on Vista.

I know that too.


Nothing is bulletproof, but one doesn't see a lot of posts by Vista users about virus or malware issues, not like you see on XP.


.

Relevant Pages

  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... The admin-user is only a user with Standard user rights, that must be escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: Use of credentials with UAC in vista
    ... I don't want UAC running and prefer to use a limited ... you run under a limited user account you can't run anything with admin ... The run as admin ... with Limited user rights until such time that the user needs its rights ...
    (microsoft.public.windows.vista.general)
  • Re: UAC invoked when moving files on external drive
    ... Ray wrote: ... Give full write NTFS permissions to your user account on the external drive, ... UAC is elevating to Admin to write, ...
    (microsoft.public.windows.vista.general)
  • Re: Admin Rights GONE!
    ... longer have admin rights. ... Logging in safe mode as ADMIN and reissuing administrative rights to my ... I get through the process and it tell me it was unable to restore. ... have tried the restore in both ADMIN and my user account. ...
    (microsoft.public.windowsxp.security_admin)
  • Users can change their account settings???
    ... While signed on with an Admin Account, I created a user account on a ... Do the users account settings on the PDC override the user security ... automatically give it admin rights on the XP machine? ...
    (microsoft.public.windowsxp.setup_deployment)
Loading