Re: I turned off UAC

Justin <Justin@nobecauseihatespam> wrote in
news:upSuRh9jJHA.4760@xxxxxxxxxxxxxxxxxxxx:

(Top-posted for brevity.....)

Don't you just love it how some people, when they hear you don't like
something, it's because you don't understand it or how to use it or too
stupid to understand it.

How come, I know what it does, I know how it works, I don't like it is
never good enough for some people. (rhetorical)







Jack the Ripper wrote:
Justin wrote:
Kayman wrote:
On Sun, 15 Feb 2009 01:03:01 -0500, Justin wrote:

For various reasons I turned off UAC.
Is there a way I can prevent that bubble in the lower right from
warning me constantly?

Five Misunderstood Features in Windows Vista
�¡E User Account Control
�¡E Image management
�¡E Display Driver Model
�¡E Search
�¡E 64 bit architecture
http://www.microsoft.com/downloads/details.aspx?FamilyID=34f40386-96
61-49b1-87ce-6d4a39e83747&DisplayLang=en


The User Access Control (UAC) can detect rootkits before they
install. AV-Test.org carried on a test of common AV applications to
find out how good they detected rootkits. The examiner had to turn
off UAC because it detected every rootkit used in the test.

Avoiding Rootkit Infection.
"The rules to avoid rootkit infection are for the most part the
same as avoiding any malware infection however there are some
special considerations:
Because rootkits meddle with the operating system itself they
*require* full Administrator rights to install. Hence infection can
be avoided by running Windows from an account with *lesser*
privileges" (LUA in XP and UAC in Vista).

You should understand the reason why UAC is there. You should read
about the two access tokens for user/admin on Vista, and yes, if
UAC is disabled,
then Run As Administrator is disabled too.

http://technet.microsoft.com/en-us/library/cc709691.aspx
http://technet.microsoft.com/en-us/magazine/cc160882.aspx
http://technet.microsoft.com/en-us/magazine/cc138019.aspx

Now, listen to the experts and be guided accordingly!

Good luck :)


I understand why UAC is there.
I also understand that it interferes with Firefox/Thunderbird's
update and the Java updater as well.

Interferes as far as what? I have Thunderbird and Java in use, and I
see no interference with UAC enabled, other than you have to approve
the update.

As in when it tried to update, the UAC prompt comes up; I allow it and
it still doesn't update.



Do you really know what UAC is about? It's about not allowing a
user-admin to run on the Internet or do anything else as a
full-rights admin like on XP.

I know that.



The admin-user is only a user with Standard user rights, that must be
escalated to admin rights, the escalation to full-admin rights only
last for the moment of escalation to do the task, and then the admin
user is returned to being a Standard user again with Standard user
rights only, not admin rights.

I know that too.


Unlike XP that has no UAC, Vista doesn't allow a virus or malware the
ability to have full rein on the computer once it has compromised the
machine like on XP with a full-rights admin user using the machine.

Malware or a virus can only run under the context of the user account
that is using the computer. If admin user on Vista is only a Standard
user with Standard user rights in reality that must be escalated to
full admin rights, then that mitigates the damage that can occur
because the virus or malware is not running with full admin rights
with the user that's using an admin account on Vista.

I know that too.


Nothing is bulletproof, but one doesn't see a lot of posts by Vista
users about virus or malware issues, not like you see on XP.



.

Relevant Pages

  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... The admin-user is only a user with Standard user rights, that must be escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: I turned off UAC
    ... Vista users about virus or malware issues, not like you see on XP. ... I would rather have it enabled so that I am not on the Internet with full admin rights, like the previous versions of the NT based O/Swhich are open by default O/Sand wide-open to attack/compromise by default. ... The out of the box admin account on Vista that is given to a user or any subsequent admin account that is created on Vista with UAC enabled is NOT a full-rights-admin account. ...
    (microsoft.public.windows.vista.general)
  • Re: Run As Adminstrator - why hasnt it saved us?
    ... UAC and Run As Administrator are tied together on Vista and are the new security profile for the Admin and Standard user accounts. ... You set your account to be Super Admin so that you still have UAC enabled because some applications will not work correctly with UAC off, those applications using the Vista UAC manifest as an example, and by being Super Admin, UAC will not prompt you as Super Admin, as stated in the link. ...
    (microsoft.public.windows.vista.security)
  • Re: I turned off UAC
    ... Vista users about virus or malware issues, not like you see on XP. ... I would rather have it enabled so that I am not on the Internet with full admin rights, like the previous versions of the NT based O/Swhich are open by default O/Sand wide-open to attack/compromise by default. ... The out of the box admin account on Vista that is given to a user or any subsequent admin account that is created on Vista with UAC enabled is NOT a full-rights-admin account. ...
    (microsoft.public.windows.vista.general)
  • Re: Compiling DLL & Vista: Follow up
    ... running as an Admin or setting a program to run as Admin will ... The biggest problem I've found in my cool little registry hack to register ... Try reading the Vista newsgroups....lots of complaining about the UAC. ...
    (microsoft.public.vb.general.discussion)