UAC is Useless in Windows 7

kikloo · 05 May 2012

Hi,

In my opinion UAC that comes in Windows 7 is totally useless and it really just slows your computing down. I just have to do more clicks to get things done in my opinion. And I don't know how it protects noobs. from viruses, malwares in anyway ?

For eg. I am noob, I see flashy mouse cursors banner on some site and I click on banner, it downloaded an exe (Remember IE is asking me whether I want to download or not),but Nooo, I just ignore IE and go ahead with the download becuase I want flashy cursors, then I run exe and UAC pop's up but again I allow it becuase those flashy cursors are so tempting and I must have the flashy cursor on my PC etc. In the end I ignore everything and still install malware on my PC etc.

So how did the UAC or adding more warning which noobs etc. don't even care to read, will protect them ? So putting in UAC is just bogus and waste of time, I know it can be disabled etc. but I don't see the point in putting it there in the first time.

Anyways my thumb rule is, that if my antivirus software etc. says that X file has virus, then I simply go with that, if that file is important for me then I try to clean it, if cleaning fails, I delete it. No point in keeping an infected file on my system. It will only make things worse.

So NOOBS here's a tip: When your antivirus says its a virus then don't ignore that. Just clean it if it can be else delete it. If you follow this practice I assure you that you will never get virus in your PC.

Thanks.

DustSailor · 05 May 2012

Well, the UAC is actually very useful, especially if you have an administrative account, but use a limited account. Don't know why you should use a limited user? Here is why: Why use a standard user account instead of an administrator account?

The UAC allows the limited user to enter an administrative password so that he can access things normally restricted to Administreator accounts (useful and very much more secure). It also prevents many changes a potential virus could try to make as it restricts the virus from making administrative changes. Believe me, it is a very good extra layer of security. In addition, IE(9) has a built in screening process (called Smartscreen filter) that can prevent known malware from downloading to the computer (it will let you know that the program is a known risk). On top of this, windows has a built in firewall and spyware scanner (windows defender). You can further download MSE for an integrated virus protection that runs quite well on windows 7.

This doesn't even mention other free security protections for use outside microsoft.

The best practice is common sense, but often common sense can be forgotten, even by the best of us. Any way to increase security can be very helpful in the event you receive a virus. It is the ever furious battle between security and convenience. You choose that which you care more for.

HexDSL · 05 May 2012

DustSailor said:

The UAC allows the limited user to enter an administrative password so that he can access things normally restricted to Administreator accounts (useful and very much more secure.

I have to say, i did now know this.

the moment I get home I'll make and admin account and convert my current login to a limited User. i assume this will work how my Linux (ubuntu) VM does. Once you get used to this its really no hardship.

Thanks for the tip.

logicearth · 05 May 2012

UAC is not antivirus software...Why would you even think it was? What UAC is, allows one to run their computer with limited power and only elevate to higher power (Administrator) when it is required. It is not going to stop you from running an application as administrator, that is not its purpose. The failing of installing malware lies on you.

DustSailor · 05 May 2012

HexDSL said:

DustSailor said:

The UAC allows the limited user to enter an administrative password so that he can access things normally restricted to Administreator [sic] accounts (useful and very much more secure).

I have to say, i did now know this.

the moment I get home I'll make and admin account and convert my current login to a limited User. i assume this will work how my Linux (ubuntu) VM does. Once you get used to this its really no hardship.

Thanks for the tip.

Glad I could help. So long as you do not do tasks requiring administrative permissions often (changing certain settings, installing, etc), then you should be fine. If you need to install anything, including add-ons for an internet browser, I recommend logging on to the administrative account to do it. That is what the administrative account was meant for. You can do simple tasks and have the added security through limited user accounts. It is what I use at work, and it works pretty well for me.

Cheers!

pparks1 · 05 May 2012

kikloo said:

Hi,

In my opinion UAC that comes in Windows 7 is totally useless and it really just slows your computing down.

I would disagree, and I don't feel it slows my computer down at all. Only once in a blue moon I try to do something and have to click on Allow.

kikloo said:

And I don't know how it protects noobs. from viruses, malwares in anyway ?

Well, in most cases, if used properly, it allows you to run with a nonadmin account. It's your responsibility to decide whether you are going to push ok or not. Without UAC, these things would have just installed and not said anything. At least with UAC, after you get something bad, you might remember, and think "oh yeah, probably shouldn't have said ok to that".

kikloo said:

I know it can be disabled etc. but I don't see the point in putting it there in the first time.

Because XP was a mess as everybody ran as an administrator. This was the smoothest way to run as a standard user and easily elevate when necessary.

Alejandro85 · 05 May 2012

UAC surely has its uses and serves a particular purpose. It's not a life saver an doesn't relief you of the task of protecting your computer, but adds another layer of defense against viruses that want to run as admin, but have to ask the user first. I know it's a bit annoying and some operations are slowed down by the prompts, but it's worth having it enabled as long as you think twice before elevating.

Anyway, I think THE best protection is common sense. Some programs for sure need admin access, but many often don't, so when you see an UAC prompt for a simple program that isn't supposed to modify anything globally, you have a warning that something suspicious is happening.

Personally, I've once catched a virus trying to sneak in when an UAC prompt poped up out of nowhere, asking to elevate an executable in a temporary folder. Of course, it was a virus.

I have to agree with you in one aspect. The default UAC level in Windows 7 is actually totally useless, because it has two known bugs that let any program freely elevate without notifying the user. You should always move the slider to the top for UAC to be of some use, otherwise it's better to have it completely off.

M1GU31 · 05 May 2012

I find UAC as a annoyance I believe i'm smart enough to handle my pc and can the majority of the time keep my pc clean from infections and if i get a infection then i'm more then capable to clean it but that's just me.

pparks1 · 05 May 2012

M1GU31 said:

I find UAC as a annoyance I believe i'm smart enough to handle my pc and can the majority of the time keep my pc clean from infections and if i get a infection then i'm more then capable to clean it but that's just me.

That's the beauty of the system, you can turn it on or turn it off. I feel that I too can keep my machine clean without it, but I leave it enabled.

kikloo · 06 May 2012

M1GU31 said:

I find UAC as a annoyance I believe i'm smart enough to handle my pc and can the majority of the time keep my pc clean from infections and if i get a infection then i'm more then capable to clean it but that's just me.

Thats the thing I am saying, when you setup Windows 7 your account is created as Administrator and not a normal user. If a noob is using Windows 7 then most probably he's using an Admin account and then UAC will help him very little when he really wants flash mouse cursors to be installed on the system.

So if MS wanted to use UAC as suggested by other people (like admin / normal account) then why MS is creating Admin accounts in setup ? Why not setup a default admin account and let users create default Normal accounts ? Its like doing mistake to cover another mistake i guess.

Either you're dumb enough to get your pc infected or you're smart enough to not use UAC. Where its helping ? How many noob users are using accounts as normal and not administrator ? How many users find UAC annoying ? How many users have disabled it permanently. I really don't think people know this stratgey that they have to use normal account with UAC and not admin accounts.

So in theory this is good from MS, but it really fails at user end.

P.S: I love MS and Windows. Its just i am increasing my knowledge by debating this. :)

Thanks.