What are the implications of disabling the UAC

FerchogtX · 16 Aug 2010

pparks1 said:

Well, I cannot say that I agree with this. I put myself far from the level of "unexperienced user" and I leave my UAC enabled. In fact, I configured my box using a limited user access account with UAC...so not only do I have to click ok, I also have to type in a username and password each time. Honestly, this only happens to me 2 or 3 times in any given day at work.

The same case as I do, that's why I put that phrase in quotes...

pparks1 said:

Sites that I visit on the web could be compromised, and a DNS attack could lead me to a bogus site. How could I ever be absolutely sure...even as a knowledgeable user. Same goes for the applications that I use, I do understand their intended purpose...but if I have an app that somehow wants escalated permissions, I certainly want to know about it.

That's the risk of surfing on the web, even with UAC this could happen, UAC will stop that from executing, but some anti-malware do also (McAffee Internet Security, ESET Smart Security) That's why is recommended to use a full suite instead of only an AV program, anyway that not guarantee you to be safe, but at least is less than 30% of infection probablility, with UAC is less of course...
That's why I say it's only for people that know what they are doing.

See ya!!

malexous · 17 Aug 2010

UAC is meant to enable users to run with standard user rights, as opposed to administrative rights.

Security: Inside Windows Vista User Account Control

Too many believe that UAC was designed to make it safer running as admin.

Edit: It may not be disigned for that but having UAC enabled is better than it being disabled while running as admin.

FerchogtX · 17 Aug 2010

malexous said:

UAC is meant to enable users to run with standard user rights, as opposed to administrative rights.

Security: Inside Windows Vista User Account Control

Too many believe that UAC was designed to make it safer running as admin.

Edit: It may not be disigned for that but having UAC enabled is better than it being disabled while running as admin.

But in that case... you are STILL the admin, no matter if UAC is enabled or not, is just the principle of the "super user" that was being held in Linux some time ago... I use an admin account (I always had and no infections so far) but UAC always prompt me if any non-UAC compliant program or any "super user" action is required... here in Windows 7, the super user is the administrator acount (that is disabled as it was in XP, but now with UAC on board) so, everytime you need an "administrator" or "super user" priviledge, you need to accept or decline the UAC prompt. Just that.

See ya!!

DarkEnergy · 19 Aug 2010

Here's what I do and I'd say I have a secure system-

Set UAC to "never notify"- it's annoying when you have to click allow every time just to run ccleaner at startup, especially if you have autologin and you're away, then the UAC windows will disappear after some time meaning some important programs won't start at all

Install Comodo Firewall only

Avast Antivirus

Sandboxie for Firefox

Disable unneccesary services- use blackviper website

Deep Freeze entire system when it's all set up how you want (or use free alternative)

I know this isn't related to UAC only, and is probably way off topic but there are so many questions related to security- the way I have my PC set up it's always clean and fast, and uses no resources at all.

Comodo is the best free firewall, Avast is the best free antivirus, sandboxie won't let you get drive by downloaded viruses, and even if you did avast would detect them almost guaranteed.

Use Deep Freeze if you're browsing or to test programs out, or just messing around or to keep your system clean/not fragmented- you'll never get a virus or any junk building up and you won't ever have to mess around with annoying UAC. This is assuming you're a single user btw.

I've always wanted the most secure Windows system I can get, while running as fast as possible- and I've never once been infected by a virus or had any problems

Layback Bear · 19 Aug 2010

IMHO UAC is a little added security that is only one click away and should be kept on. I have seen people that don't like that one more click and they are still double clicking every thing else. My question; why one would turn off a little free security over a mouse click after reading all these post.

DarkEnergy · 20 Aug 2010

But it's not just an extra mouse click, if you have programs starting up when you turn on your PC you have to click then every time- you can't just leave it to all load up by itself. And every time you open programs you have to click then, it might not seem like much when you've got UAC enabled but when you disable it you realise how much easier and faster it is. I can't see one instance where UAC has protected me, which is why 99% of people all moan about how annoying it is and were happy to see that Windows 7 lets you disable it easily from the control panel

Teerex · 20 Aug 2010

Why the hell would you want to run CCleaner at every startup?

Petey7 · 20 Aug 2010

Teerex said:

Why the hell would you want to run CCleaner at every startup?

I can't say why someone would. Even the people on here that use say to use it once a month.

I can say that he does have a point about some startup programs. For some reason, at my school we have to download and install this weird Cisco Clean Access Agent program (I think its called something else now) that insist on trying to run at startup. You have to change settings is a few different places to get it to not run. Point is, the thing scans you computer to make sure you have an antivirus installed and checks some other stuff. Its really like malware in a way. Point is, it is annoying to see a pop up every time you login to windows. But I don't want the thing running unless I tell it to, so it is still helpful to me.

Barman58 · 20 Aug 2010

If you absolutely have to have a program run at start-up that invokes the UAC then the best way to go is to use the task scheduler, you can set the application to run with highest credentials and have it start at user log-on or system start

If you want a pop up message you can have that too

pparks1 · 21 Aug 2010

DarkEnergy said:

Comodo is the best free firewall, Avast is the best free antivirus, sandboxie won't let you get drive by downloaded viruses, and even if you did avast would detect them almost guaranteed.

I'm glad these products are working so well for you...however I think you would have trouble getting agreement that these products are without a doubt the best solutions.

Petey7 said:

For some reason, at my school we have to download and install this weird Cisco Clean Access Agent program (I think its called something else now) that insist on trying to run at startup. You have to change settings is a few different places to get it to not run. Point is, the thing scans you computer to make sure you have an antivirus installed and checks some other stuff. Its really like malware in a way.

When you plug into and use the schools network, or any other persons network, or a companies network you are sometimes going to be asked/forced/required to follow some rules. These places have a responsibility to try to keep the entire population safe using it. I for one would not want some unprotected and potentially unsafe computer plugging into any network that I maintain. If you don't want to abide by these rules, please choose to simply not use the network...don't take actions to shut off these applications and prevent them from not running...that's a really uncool thing to do.