|View Poll Results: Have You Got UAC Enabled or Disabled ?|
|Voters: 56. You may not vote on this poll|
|16 Feb 2010||#41|
I don't know how anybody tolerates that thing! It apparently uses no logic and squawks at every move one makes it even tries to protect me from Microsoft offerings that are digitally signed! If it does not recognize its own parent what good is it? I just turned it on and the first %@&$!!**! thing it did was disable my Internet connection!
It also is very paranoid of my printer! Good grief this is the best they have to offer?
Just turn the whole blasted computer off thats the safest!
If you make a decision to do something on YOUR computer , do you want something
asking you if it is OK ???
UAC wasn't created to notify you about changes you are doing...
It's not something which will tell you if something is trying to do something.
It's not HIPS.
It works differently..
ok, I have already explained it to one member, so I am just quoting myself:
(I hope after reading this you will understand purpose of the UAC. It's not notifier! )
Though I would still like to disable UAC for my user account (administrator account) and leave it enabled on the standard user accounts (my mother and my girlfriend). It seems this can't be done, so I suppose I'm going to stick with my current settings.
If they don't have your password and they don't use any tasks/programs which need Administrator privileges, then they don't really benefit from UAC at all.
In this case benefit from UAC is only for you.
before anybody starts to say something about last statement, let me explain UAC basics..
UAC (User Account Control) is just feature that controls user privilege tokens (what user can do).
Situation when is UAC on:
1. You log in with your Administrator account.
While logging in UAC gives you 2 user tokens (one administrative and one standard user) and makes standard user privilege as main token.
You see this (UAC) was one of the cleverest things Microsoft came up for Windows security.
The problem with windows is that almost EVERYBODY runs it as administarator (any other OS takes away that privilege from user)
Microsoft tried to encourage it's users to use Standard account, but there were only handful people who did. (and funny thing is that those people who haven't even considered Microsoft's advice, blamed the company for not doing anything for Windows security )
So, Microsoft had to came up with something new and take away administrative privileges from average users. They created UAC.
If you remember I said that when you logged in with administrator account UAC gave you standard user privilege token as your main.
So basically, even if you are logged in with administrator account, you are using it as if you were standard user and have it's privileges.
And according to privilege inheritation, any process inheritates privileges of parent process, so everything you open will run as standard user.
But theoretically there will be problem when you try to do something which requires administrative privileges.
There comes UAC again when you try to do something that requires Administrative privileges UAC will come up and after getting confirmation from you (the user who has admin privileges), gives Administrative privilege token to that process.
So as you can see, from security point of view UAC was genius thing. It made administrator account into standard account and this way blocked lots of security flaws.
But UAC isn't perfect and Microsoft still encourages and wants average users to run as standard users.
But the probem is that many users don't want log off and log in to administrator account to do anything that requires administrative privileges.
So they creates fast switch, but even then people were lazy to do this.
2. So after this they implemented UAC into standard user aswell.
It works the same way as it does in Administor account.
But in this case it doesn't give you 2 tokens at the start as you don't have (you have only standard user privileges)
So you will work as standard user and if you need something that requires administrative privileges, It asks from users who has it (administrators). After confirmation from administrator (after you writing admin password) it "borrows" this admin privileges from that user and does that specific task from the name of the administrator who was confirmed with password.
So now, Standart user dosen't even need to log off to do administrative tasks...
now, back to your topic.
1. If you family members don't use anything that requires administrative privilegs, or even when they want they can't use it (as they don't your password or any other admin password).
If this is your situation, as I already mentioned they don't benifit from UAC.
Why? because UAC for standard user is just to give Standard user to give fast way to get ("borrow") administrative privileges.
If you turn off UAC. They will be automatically denied from task that require admin privileges (task which will be asked by UAC if it was on)
So, from this point of view you can turn off UAC.
But then you (Administrator) will have administrator privileges token always!
So, just read through how UAC works again, and decide if it's worth it...
But if your family members know your password and do tasks which require admin privilegs then you can't turn off UAC. (if your turn offf it they will have to switch user/log off and log in with admin account to do those tasks.)
Hope it will help you!
|My System Specs|
|16 Feb 2010||#42|
Jav....nice write-up explaining in average joe terms what the UAC system is doing.
I think UAC has to be one of the most misunderstood features that Microsoft has ever released. Most problems stemming from fact that MS allowed people to freely run as admin for so long that people want this sheer convenience and seem more than willing to accept the viruses, trojans, malware, spyware, rootkits and bots which come along with it.
Other systems like Unix, Linux and OS X have had features like UAC since their inception...so users are far less irritated by it's inclusion as that is the way that it is has always been.
Personally, I never found UAC that troublesome with Vista and it's even far less of a hassle in Windows 7...since it only informs me when applications escalate by default.
|My System Specs|
|Thread Tools||Search this Thread|
|Similar help and support threads|
IE 11 Add-ons disabled but show as enabled
I'm using IE 11 and when I sign into the snapfish website I'm unable to view the pictures with the slideshow function. It tells me to install flash player. When I look at the programs, flash player is installed. Under accessories I started digging around and found Internet Explorer is currently...
|Browsers & Mail|
What do 'enabled' and 'disabled' UAC virtualization mean?
In the task manager in the column for UAC virtualization, "not allowed" means a thing is running as administrator. But what do 'enabled' and 'disabled' mean? I don't know what virtualization is but it's safe to say I don't need to get deeply involved with it. I only have one computer and I'm...
How do i? : OS-Startup configuration with LAN=enabled + WWW=disabled
Hi, I would like to configure my Win7 OS so that it starts with WLAN for my printer, but inhibits the start of www/Internet services. Problem is (at least for me) that my WLAN-Router handles both. The laptop machine in question is using a dual install config with Win7 and Ubuntu 12.04. I would...
|Network & Sharing|
Disabled Guest Account found stil Enabled
Hello, When I installed the W7 Ultimate, I think I went into user accounts as admin and disabled the Guest account. During another problem that let me to secpol.msc, I was addressing some issue and noted that there was as entry that said that the Guest Account was still enabled. Being green...
win7 x64 needs devices disabled/enabled after reboot, why?
I've posted elsewhere, no answers, so I thought I would try here... I rebooted my Win7 x64 machine the other day. It acted funny after boot. Device manager shows about 10 usb devices and my ethernet motherboard nics (2 of them) as 'error 10, cannot start' If I disable and reenable each one...
|Hardware & Devices|
Which Features have you got Enabled/Disabled ?
This is what I've got (see Pic) I would disable the XPS Feature, however I believe it's needed in order for PowerPoint 2007 to function.
© Designer Media Ltd
All times are GMT -5. The time now is 14:48.