Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: User Account Control - UAC - Change Notification Settings

27 Oct 2013   #50
konlo1

7, 64 bit
 
 

I would think that I might be able to up my account to admin, or that UAC is for all accounts?


My System SpecsSystem Spec
27 Oct 2013   #51
Brink

64-bit Windows 10 Pro
 
 

Only an administrator can do that. If that's not an option for you, then you may need to reinstall.
My System SpecsSystem Spec
28 Oct 2013   #52
andrew129260

Windows 7 Professional x64 Sp1
 
 

Quote   Quote: Originally Posted by konlo1 View Post
I had a trojan a while ago that disabled UAC. Now I don't get the prompt window for anything. Even if I do run as administrator. I use standard, but know admin pass. I cant access the control panel, and the file gave me this error. "Cannot import c:\users\username\desktop\UAC_Level-1.reg: Not all data was succesfully written to the registry. Some keys are open by the system or other processes" Please help, I need to be prompted for admin password to... well, do anything.

Please post in the security/malware removal forum here:

System Security - Windows 7 Help Forums

Please include a new thread there explaining your issue in as much detail as possible. We will be happy to help.
My System SpecsSystem Spec
23 Nov 2013   #53
alacarre

Windows 7 Ultimate 32 bit
 
 
Disable secure desktop & maintain highest security rating

Of the 4 or so [.reg file] configuration options given here, none of them seem to have both the secure desktop off while maintaining UAC's security rating at its highest level, which is not only possible but surely preferable for most users.

This configuration works best if your user is a member of the Administrators group, in which case UAC prompts are predictable and unobtrusive (one extra click to perform an administrative action).

Now I don't know if my registry settings will work with all versions of Windows 7, but I don't see why they wouldn't.

==============================
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000004
"ConsentPromptBehaviorUser"=dword:00000003
"PromptOnSecureDesktop"=dword:00000000
==============================

I think those are the only relevant ones in this context.


As an administrator if you click on "Administrator Tools" for instance, your consent will be prompted for, without any switching of desktops. So it is instant and amounts to a single (and expected) extra confirmation click.

Your overall security rating goes up to level 4 while UAC prompts are predictable and unobtrusive. For instance I have a quick launch icon for an administrator-level command prompt. To open it up requires two clicks (basically one to launch and another "are you sure?"). Additionally, the UAC prompt not centered on some dark desktop, but appears right beside the icon I just clicked. Not annoying at all.

But now, see that's still a level 4 security rating config because you don't NEED the secure desktop when all administrative actions require confirmation. And I only use the control panel every now and again. For other administrative things I have my quicklaunch to "Admin: cmd.exe" (You can use "taskbar quicklaunch" or start menu "pinned links" in a similar way).

- Alan
My System SpecsSystem Spec
.

23 Nov 2013   #54
Brink

64-bit Windows 10 Pro
 
 

Hello Alan, and welcome to Seven Forums.

The .reg files in this tutorial are only to make the same default settings from the UI.

The tutorial below for the dimmed secure desktop mode can be set in addition with it.

User Account Control (UAC) - Blacking Out of Screen
My System SpecsSystem Spec
23 Nov 2013   #55
alacarre

Windows 7 Ultimate 32 bit
 
 

Well maybe I missed something because I looked at that tutorial prior to making my post, just to be sure, and (correct me if I am wrong) but the overall security rating after making those changes is only at level 2 instead of level 4 where it should be.

- Alan

P.S. Oh, and thanks for welcoming me in!
My System SpecsSystem Spec
23 Nov 2013   #56
Brink

64-bit Windows 10 Pro
 
 

My System SpecsSystem Spec
23 Nov 2013   #57
alacarre

Windows 7 Ultimate 32 bit
 
 

Just to be sure, assuming you have Local Security Policy manager on your system, this image shows my setup which is the one I actually prefer even though it happens to push my overall security status to the highest level:



I will definitely turn off the auto-detection of install programs and prompt bug (ie. feature) I just discovered taking that screenshot ... but that's only because I can. The average user will not know how to do it and will, very unfortunately, become habituated to allowing "God Mode" for all software installations.

Well I shouldn't say "all". In fact I just compiled an installer using Inno Setup and it does not use, require nor invoke God Mode prior to installation.

Works great!

- Alan
My System SpecsSystem Spec
23 Nov 2013   #58
Brink

64-bit Windows 10 Pro
 
 

The one you have circled in green is to enable/disable giving a UAC prompt when users try to install a program that requires elevation to do so.

Of course, the downside to being logged in to an account that has been elevated without any restrictions is that anything that runs (ex: malware in the background) will also have the same unrestricted access to everything on the PC. You'll never know since you don't get any prompts by UAC for your approval when anything tries to run or open anything that requires elevated rights.
My System SpecsSystem Spec
23 Nov 2013   #59
alacarre

Windows 7 Ultimate 32 bit
 
 

You are right, I tried it and it didn't help. In fact that's only part of what I wanted disabled. There's a very strange bug that exists in Win 7 and I'm not sure if it's new or nobody noticed. And that's the following:

Take *any* program (particularly one that is not an install program and rename it so that the word "setup" appears in the file name. For example hellosetupworld.exe for *any* program (except a real installer).

If you do that a little shield appears with the program's icon and when you try to run what would otherwise be an innocuous unit test that tries (and would normally fail) to make some global system change, instead you get the UAC prompt for which you will click yes (ever clicked no?) and it will have acquired Admin access to your system and install a rootkit or whatever it wants to do. Trusted Installer is more on the level of NT Authority System than a regular old Administrator.

- Alan
My System SpecsSystem Spec
Comment

 User Account Control - UAC - Change Notification Settings




Tutorial Tools




Similar help and support threads
Windows 7 Tutorial Category
Can't Access User Account Control Settings
Hi there, my problem is that I'm unable to access my UAC settings - there is no Admin password installed, I'm operating as a standard user. every time I try to download a program onto my computer - the "User Account Control" dialog box appears and tells me to type in the Admin password then click...
System Security
Problem changing the User Account Control Settings
I'm trying to change the User Account Control Settings in my Standard Account but each time I try to do so I'm greeted with the message that I "must be logged in as an administrator to select this setting". What's puzzling is that I am logged in as an administrator when I try to change the setting...
System Security
User account notification settings
I installed an APC battery backup yesterday along with the required software. Now every time I boot up, the message about "do I want this program to make changes to your computer" comes up. I have the software installed in my startup folder so don't know why I have to see this at each boot up. Any...
Software
Change user account control settings
I'm trying to change the settings back to "never notify", but every time I click the link, after typing it in the search bar, nothing happens. Wile in the user account menu, the 4 options with an admin symbol next to them don't work either. I'm assuming that's the problem, I don't have admin...
System Security
User Account Control Settings Shortcut - Create
How to Create a User Account Control Settings Shortcut in Windows 7 This will show you how to create or download a User Account Control Settings shortcut. You can also Pin to Taskbar or Pin to Start Menu this shortcut, or move where you like for easy use in Windows 7. EXAMPLE: User Account...
Tutorials
User Account Control Settings
Hello all....:) I'm just wondering what all of you are running (if at all) your UAC at? Post and let us know. I have mine set at "full"; slider all the way up. I've seen from experience over at x64 that it's a bad idea to operate with it disabled... People that (supposedly..;).) know what...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:08.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App