UAC. Have you turned your's off?

[noyb]

Let me guess - not a "security" MVP?

Microsoft goofed again ... Liking M$ is not a requirement ..
:roflmao:

 

[Disk4mat]

I was never a big believer in UAC. One day (on Vista) I created a .NET app that deleted and modified some important registry keys (services, policies etc). With UAC off the app was able to do its damage. No alerts from AV since it wasnt a known threat. Couldnt log on to my user account after that.

Restored a fresh drive image and re-ran the app with UAC enabled. No changes were made to the registry. No prompts were displayed.

For me seeing was believing and I can say that UAC does do more behind the scenes than displaying a simple prompt. It was worth the time I invested to test it.

 

[H2SO4]

I was never a big believer in UAC. One day (on Vista) I created a .NET app that deleted and modified some important registry keys (services, policies etc). With UAC off the app was able to do its damage. No alerts from AV since it wasnt a known threat. Couldnt log on to my user account after that.

Restored a fresh drive image and re-ran the app with UAC enabled. No changes were made to the registry. No prompts were displayed.

For me seeing was believing and I can say that UAC does do more behind the scenes than displaying a simple prompt. It was worth the time I invested to test it.

Have rep

The UAC is indeed far more than "the prompt", and a preponderance of UAC prompts in a given app is in fact an indication of relatively poor design from a security standpoint.

 

[swarfega]

I leave mine as installed.

 

[esteban]

I tried it for a short while, but it's back to being completely off. I only have a few applications, and I perform various extensive disk checks regularly.

 

[niteowl2k]

I also use UAC at the default levels. After I get past the first couple days on a system, not much gets installed. Therefore, if something DOES try to install I'd like to know about it!

Combined with the real-time monitoring of Norton Internet Secutiry 2010, UAC protects me from myself more often than not.

 

[kegobeer]

I tried it for a short while, but it's back to being completely off. I only have a few applications, and I perform various extensive disk checks regularly.

Why do you continually check your drives?

 

[pparks1]

I tried it for a short while, but it's back to being completely off. I only have a few applications, and I perform various extensive disk checks regularly.

Why do you continually check your drives?

I was going to ask the same thing. Seems somewhat odd to continuously check your drives for errors...but then disable UAC because it prompts far too often when checking your drives over and over again.

 

[esteban]

I tried it for a short while, but it's back to being completely off. I only have a few applications, and I perform various extensive disk checks regularly.

Why do you continually check your drives?

I was going to ask the same thing. Seems somewhat odd to continuously check your drives for errors...but then disable UAC because it prompts far too often when checking your drives over and over again.

Once a week isn't continuously.

 

[pparks1]

Once a week isn't continuously.

So, you do extensive checks once per week...but find that UAC is overly intrusive with a few prompts once per week? I think this just reaffirms my suspicions that people often exaggerate the nagging nature of this tool and simply disable it because they don't feel it provides any value.

 

[kegobeer]

What software do you use to do disk checks, and what kind of UAC prompts do you get? Are you using software designed for Windows 7? Do you run them in an elevated state, or as a standard user?

Extensive disk checks done weekly still seems a bit much to me, unless you suspect a drive is about to fail. To each his/her own, though.

 

[vram]

Windows 7 default UAC setting is less secure than Vista's UAC because it potentially allows malware to self elevate it own privileges so that it may infect your system. This of course defeats the purpose of UAC entirely. Every Win7 install I've done so far has had the slider raised to max level as it should be. After you get your programs installed and your settings tweaked, UAC barely prompts you anyway. It was a mistake by MS to allow the UAC settings to be lowered but I can understand why they chose to.

 

[esteban]

Once a week isn't continuously.

So, you do extensive checks once per week...but find that UAC is overly intrusive with a few prompts once per week? I think this just reaffirms my suspicions that people often exaggerate the nagging nature of this tool and simply disable it because they don't feel it provides any value.

Some of my C programs run multiple processes. They also occasionally take advantage of all unused system resources. One of my debugging tools is Task Manager. Some of my programs also do some registry editing. With UAC on, I have to click through it EVERY TIME I debug/run. So I turn it off.

My weekly maintenance isn't me constantly typing or clicking; I run a couple diagnostics, and sit back and do homework. I also scan the registry for changes/inconsisties.

I am comfortable with how I maintain my system. If I ever get a security breach, I'll make sure to tell you. Promise.

 

[pparks1]

It's your right to disable UAC if you feel comfortable without it. I just feel that it's worthwhile for the masses to also hear from people who don't have a need to disable the UAC system and can successfully use it and still get their work done.

Unfortunately, UAC got a bad rap when it first came out in Vista and was terrible overbearing and many people simply disable because they still assume that it's the same ole thing.

 

[kegobeer]

Windows 7 default UAC setting is less secure than Vista's UAC because it potentially allows malware to self elevate it own privileges so that it may infect your system. This of course defeats the purpose of UAC entirely. Every Win7 install I've done so far has had the slider raised to max level as it should be. After you get your programs installed and your settings tweaked, UAC barely prompts you anyway. It was a mistake by MS to allow the UAC settings to be lowered but I can understand why they chose to.

I believe you are referring to the ongoing debate between Microsoft and various reviewers/testers that differ on how UAC is designed. If I remember correctly, Microsoft's stance is that malware has to find its way onto your system, which can only happen if the user allows it. IE identifies potential hazardous applications, and gives the user a chance to deny it. A good anti-virus/security applicatoin should also be running and monitoring various processes, alerting the user and preventiing it from spreading and installing. Once a user lets malware install and run, it's very difficult to prevent it from doing what it wants. I tend to agree with this stance.

 

[noyb]

I use WinPatrol and have UAC disabled.
The purpose of WinPatrol is different than UAC ...
In that its primary purpose is to keep a clean system and stop programs from adding to the start-ups when not needed.

At least when WinPatrol barks at me .. I know it's something that might be important.

You can run Both

 

[Creer]

I use WinPatrol and have UAC disabled.
The purpose of WinPatrol is different than UAC ...
In that its primary purpose is to keep a clean system and stop programs from adding to the start-ups when not needed.

At least when WinPatrol barks at me .. I know it's something that might be important.

You can run Both

For the same reasons I have disabled UAC on my computer, the only one difference is I use DefenseWall which do pretty the same what WinPatrol and even more (based-on sandbox policy application).

 

[vram]

Windows 7 default UAC setting is less secure than Vista's UAC because it potentially allows malware to self elevate it own privileges so that it may infect your system. This of course defeats the purpose of UAC entirely. Every Win7 install I've done so far has had the slider raised to max level as it should be. After you get your programs installed and your settings tweaked, UAC barely prompts you anyway. It was a mistake by MS to allow the UAC settings to be lowered but I can understand why they chose to.

I believe you are referring to the ongoing debate between Microsoft and various reviewers/testers that differ on how UAC is designed. If I remember correctly, Microsoft's stance is that malware has to find its way onto your system, which can only happen if the user allows it. IE identifies potential hazardous applications, and gives the user a chance to deny it. A good anti-virus/security applicatoin should also be running and monitoring various processes, alerting the user and preventiing it from spreading and installing. Once a user lets malware install and run, it's very difficult to prevent it from doing what it wants. I tend to agree with this stance.

I would never suggest relying on UAC to keep a system clean. UAC is just an added layer of security that is used along with AV and a Firewall. Security starts with the user and if they're going to click yes on every box that pops up, then no AV, Firewall or UAC will protect them.

 

[noyb]

.. No AV, Firewall or UAC will protect them.

That's the reason for ..
Complete hard disk recovery solution, backup, drive copy, clone and image computer software ..

Nothing tunes up a computer or fixes what may have corrupted it better than a fast fresh install.

Sometimes .. The Cure is easier than the Prevention.

 

[J.R.]

Yes, I have turned off UAC (whether permanently or for good, only time will tell).

Have used it/studied it until I'm blue in the face. Have not found much I like about.

All I've seen with UAC is that it interfers with the installation of programs, the running of programs, and it sure is annoying to see the UAC prompts. Whether or not it lives up to it's hype of security remains to be seen.

Ain't going to debate the pros/cons of UAC; to each their own reasons to using or not using it.

And I sure have not read any compelling reasons/arguements to have UAC from reading info all over the net.

I didn't need it with XP and I don't need it with Vista or Win 7 (at this time).