What are the implications of disabling the UAC

[FerchogtX]

Well, I cannot say that I agree with this. I put myself far from the level of "unexperienced user" and I leave my UAC enabled. In fact, I configured my box using a limited user access account with UAC...so not only do I have to click ok, I also have to type in a username and password each time. Honestly, this only happens to me 2 or 3 times in any given day at work.

The same case as I do, that's why I put that phrase in quotes...

Sites that I visit on the web could be compromised, and a DNS attack could lead me to a bogus site. How could I ever be absolutely sure...even as a knowledgeable user. Same goes for the applications that I use, I do understand their intended purpose...but if I have an app that somehow wants escalated permissions, I certainly want to know about it.

That's the risk of surfing on the web, even with UAC this could happen, UAC will stop that from executing, but some anti-malware do also (McAffee Internet Security, ESET Smart Security) That's why is recommended to use a full suite instead of only an AV program, anyway that not guarantee you to be safe, but at least is less than 30% of infection probablility, with UAC is less of course...
That's why I say it's only for people that know what they are doing.

See ya!!

 

[malexous]

UAC is meant to enable users to run with standard user rights, as opposed to administrative rights.

Security: Inside Windows Vista User Account Control

Too many believe that UAC was designed to make it safer running as admin.

Edit: It may not be disigned for that but having UAC enabled is better than it being disabled while running as admin.

 

[FerchogtX]

UAC is meant to enable users to run with standard user rights, as opposed to administrative rights.

Security: Inside Windows Vista User Account Control

Too many believe that UAC was designed to make it safer running as admin.

Edit: It may not be disigned for that but having UAC enabled is better than it being disabled while running as admin.

But in that case... you are STILL the admin, no matter if UAC is enabled or not, is just the principle of the "super user" that was being held in Linux some time ago... I use an admin account (I always had and no infections so far) but UAC always prompt me if any non-UAC compliant program or any "super user" action is required... here in Windows 7, the super user is the administrator acount (that is disabled as it was in XP, but now with UAC on board) so, everytime you need an "administrator" or "super user" priviledge, you need to accept or decline the UAC prompt. Just that.

See ya!!

 

[DarkEnergy]

Here's what I do and I'd say I have a secure system-

Set UAC to "never notify"- it's annoying when you have to click allow every time just to run ccleaner at startup, especially if you have autologin and you're away, then the UAC windows will disappear after some time meaning some important programs won't start at all

Install Comodo Firewall only

Avast Antivirus

Sandboxie for Firefox

Disable unneccesary services- use blackviper website

Deep Freeze entire system when it's all set up how you want (or use free alternative)

I know this isn't related to UAC only, and is probably way off topic but there are so many questions related to security- the way I have my PC set up it's always clean and fast, and uses no resources at all.

Comodo is the best free firewall, Avast is the best free antivirus, sandboxie won't let you get drive by downloaded viruses, and even if you did avast would detect them almost guaranteed.

Use Deep Freeze if you're browsing or to test programs out, or just messing around or to keep your system clean/not fragmented- you'll never get a virus or any junk building up and you won't ever have to mess around with annoying UAC. This is assuming you're a single user btw.

I've always wanted the most secure Windows system I can get, while running as fast as possible- and I've never once been infected by a virus or had any problems

 

[Layback Bear]

IMHO UAC is a little added security that is only one click away and should be kept on. I have seen people that don't like that one more click and they are still double clicking every thing else. My question; why one would turn off a little free security over a mouse click after reading all these post.

 

[DarkEnergy]

But it's not just an extra mouse click, if you have programs starting up when you turn on your PC you have to click then every time- you can't just leave it to all load up by itself. And every time you open programs you have to click then, it might not seem like much when you've got UAC enabled but when you disable it you realise how much easier and faster it is. I can't see one instance where UAC has protected me, which is why 99% of people all moan about how annoying it is and were happy to see that Windows 7 lets you disable it easily from the control panel

 

[Teerex]

Why the hell would you want to run CCleaner at every startup? :sarc:

 

[Petey7]

Why the hell would you want to run CCleaner at every startup? :sarc:

I can't say why someone would. Even the people on here that use say to use it once a month.

I can say that he does have a point about some startup programs. For some reason, at my school we have to download and install this weird Cisco Clean Access Agent program (I think its called something else now) that insist on trying to run at startup. You have to change settings is a few different places to get it to not run. Point is, the thing scans you computer to make sure you have an antivirus installed and checks some other stuff. Its really like malware in a way. Point is, it is annoying to see a pop up every time you login to windows. But I don't want the thing running unless I tell it to, so it is still helpful to me.

 

[Barman58]

If you absolutely have to have a program run at start-up that invokes the UAC then the best way to go is to use the task scheduler, you can set the application to run with highest credentials and have it start at user log-on or system start

If you want a pop up message you can have that too

 

[pparks1]

Comodo is the best free firewall, Avast is the best free antivirus, sandboxie won't let you get drive by downloaded viruses, and even if you did avast would detect them almost guaranteed.

I'm glad these products are working so well for you...however I think you would have trouble getting agreement that these products are without a doubt the best solutions.

For some reason, at my school we have to download and install this weird Cisco Clean Access Agent program (I think its called something else now) that insist on trying to run at startup. You have to change settings is a few different places to get it to not run. Point is, the thing scans you computer to make sure you have an antivirus installed and checks some other stuff. Its really like malware in a way.

When you plug into and use the schools network, or any other persons network, or a companies network you are sometimes going to be asked/forced/required to follow some rules. These places have a responsibility to try to keep the entire population safe using it. I for one would not want some unprotected and potentially unsafe computer plugging into any network that I maintain. If you don't want to abide by these rules, please choose to simply not use the network...don't take actions to shut off these applications and prevent them from not running...that's a really uncool thing to do.

 

[Petey7]

For some reason, at my school we have to download and install this weird Cisco Clean Access Agent program (I think its called something else now) that insist on trying to run at startup. You have to change settings is a few different places to get it to not run. Point is, the thing scans you computer to make sure you have an antivirus installed and checks some other stuff. Its really like malware in a way.

When you plug into and use the schools network, or any other persons network, or a companies network you are sometimes going to be asked/forced/required to follow some rules. These places have a responsibility to try to keep the entire population safe using it. I for one would not want some unprotected and potentially unsafe computer plugging into any network that I maintain. If you don't want to abide by these rules, please choose to simply not use the network...don't take actions to shut off these applications and prevent them from not running...that's a really uncool thing to do.

The software is required to run to connect to the schools network, but it is bloated (lot of RAM usage) and runs non-stop. As in, it uses 10% of my processing power non-stop and chooses to randomly start reading my hard drive. Would you want a program like that running 24/7? When your doing video editing/encoding? I only want it to not run when I'm not connected to schools network and to run when I decide to connect. I am a commuter, so on average I only need it to run for about an hour a day at most.

 

[pparks1]

The software is required to run to connect to the schools network, but it is bloated (lot of RAM usage) and runs non-stop. As in, it uses 10% of my processing power non-stop and chooses to randomly start reading my hard drive. Would you want a program like that running 24/7? When your doing video editing/encoding? I only want it to not run when I'm not connected to schools network and to run when I decide to connect. I am a commuter, so on average I only need it to run for about an hour a day at most.

No, I would not. And for that reason, I would never put certain computers onto their network. If I were you I would buy a netbook and use that for school.

For work, I can install our VPN software and such on my home computer...however that means I get a bunch of checkpoint garbage that I don't want installed. For that reason, i don't install it. Instead, I just go grab my work laptop and use that instead....it's got all that stuff on it already for being on our LAN. Is it convenient...not really....but then again I don't want that garbage on my personal computer so I don't connect it.

 

[HammerHead]

UAC Popups

Barman gives a good solution to some of the popups. Another one is run a docking program with elevated privleges and the apps you launch from there will not induce the popup warning. I use task scheduler and Rocket Dock (RocketDock does not support Win 7 X64 but I have it working just fine). There are other docks out there. I would not turn off UAC. Just an opinion.

 

[DarkEnergy]

Why the hell would you want to run CCleaner at every startup? :sarc:

Why wouldn't you? It empties the recycle bin for you, deletes all your temp files, and clears my custom folders that fill up quickly with junk e.g. uTorrent added torrents (which you don't need) and BF2 logo and server cache (makes it quicker to log in). It only takes a split second literally to run, but a lot longer with UAC enabled