Giving up on UAC

Anderson2 said:

After 10 days with Windows 7, I finally just had to give up on UAC and turned it off to get some work done. It was not the notifications that bothered me. I did not mind the notifications. In fact I could see their value. It was all the legacy programs that could not work correctly because they could not fully access their folders to modify their settings or whatever they needed to do that finally did it. I tried all the tricks recommended, took ownership, gave myself full control, ran exe files as administrator, etc.; nothing worked. Many programs still would not work correctly. When I finally gave up and turned UAC off everything finally worked correctly and I finally could get to doing some real work instead of futzing around with the OS.

My question now is the following. Is running W 7 with UAC turned off, firewall on, AV up-to-date, and malware checked and behind a router any more risky than when I ran XP? If not, that is the way I will go - just as I ran XP and preceding OSs for years. As long as I need to run programs that were not designed to run W 7's way this seems to be the only practical solution.

In answer to your specific question above the answer is possibly a tad less risky.
[FWIW - I leave my UAC on.]

pparks1 said:

What particular applications are you running which are causing all of these pop-ups?

There are several. One is PaintShopPro 9.1 which was written long before W 7 was created and is far superior to later editions. One solution someone just discovered that works for it required a registry edit is:

In Windows 7, double clicking on an image file that should open in PSP 9
will open the program with an error message but without the image on
most machines.
PSP 9 uses an old Windows system called DDE to pass the image to the
program. DDE is still part of Windows 7, but is prevented from working
by 7's tighter security.
One solution, though perhaps a risky one, is to disable UAC.

The other solution was posted by "bpark37" on the PSPUG forums
(PSPUG Message Board - PSPUG Message Board) -

"NEW SOLUTION! Tested on 2 PC's.

I have successfully applied this fix using Paint Shop Pro 9 (PSP 9) with
Windows 7 (win7) x64 on 2 different PCs.

(1) Open Regedit

(2) Go to the following string: HKEY_CLASSES_ROOT\Applications\Paint
Shop Pro 9.exe\shell\open\command

(3) Change the "Default" entry to
"C:\Program Files (x86)\Jasc Software Inc\Paint Shop Pro 9\Paint Shop
Pro 9.exe" "%1"

(4) Delete the following string (which is immediately below the string
you just edited):
HKEY_CLASSES_ROOT\Applications\Paint Shop Pro 9.exe\shell\open\ddexec

(5) Exit Regedit

(6) Open a picture file as you typically would from windows explorer and
it should open without error."

I've tested this on both 32 bit and 64 bit versions of Windows 7 and it
worked fine.

Another is TrueCrypt (latest version) which works but when I wish to dismount a file, I need to force the dismount which is not cool and worriesome.

I would like to use UAC for the added security but I can't be a debugging programmer just to get work done.

Jeff

Anderson2 said:

Another is TrueCrypt (latest version) which works but when I wish to dismount a file, I need to force the dismount which is not cool and worriesome.

I would like to use UAC for the added security but I can't be a debugging programmer just to get work done.

Jeff

I have UAC fully on and I don't have to force dismount on any true crypt volumes ?

You are correct. It has nothing to do with uac. Does the same with uac turned off.

I've turned uac back on but now need to figure out how to solve the truecrypt dismount problem. It has to be some setting that I need to change. I'm working in W7 64 bit. Are you 32 or 64 bit in case that makes a difference.

(Worked fine in xp which is why I thought it was the uac messing things up).

Anderson2 said:

After 10 days with Windows 7, I finally just had to give up on UAC and turned it off to get some work done. It was not the notifications that bothered me. I did not mind the notifications. In fact I could see their value. It was all the legacy programs that could not work correctly because they could not fully access their folders to modify their settings or whatever they needed to do that finally did it. I tried all the tricks recommended, took ownership, gave myself full control, ran exe files as administrator, etc.; nothing worked. Many programs still would not work correctly. When I finally gave up and turned UAC off everything finally worked correctly and I finally could get to doing some real work instead of futzing around with the OS.

My question now is the following. Is running W 7 with UAC turned off, firewall on, AV up-to-date, and malware checked and behind a router any more risky than when I ran XP? If not, that is the way I will go - just as I ran XP and preceding OSs for years. As long as I need to run programs that were not designed to run W 7's way this seems to be the only practical solution.

Some of the problems can be prevented by running the application's installer with admin privileges. I don't pretend to understand the effects on privileges of the installed software, but it may help.

I'm unsure how useful UAC is. People (me, at least) tend to click "accept" just to make the box go away, without paying much attention to what's happening. It's less annoying under Win7 than under Vista, but some have complained that it's also less secure. (That's at the default settings. The security can be increased, at the cost of getting as many UAC alerts as with Vista.)

Being new to W 7 I am giving uac the benefit of the doubt. I am guessing it's main value maybe if something asks to run that I did not initiate - which has not happened yet.

I think uac would be much friendlier and useful if one could give it a list of program files it should run without asking but that it would ask about *if* they changed in any way - the way many 3rd party firewalls work. This way you would get less notifications and therefore pay attention to them when they occur. ;-)

Seems pretty obvious to me. Modifying the file properties to "run as administrator" is a less secure way to do things because I am not sure if that permission persists if the file is modified by malware.

Using Process Explorer I discovered what process is keeping the file locked. I discovered that the drive that I mounted my file to remains still locked by "clmlSvc.exe" and preventing dismounting. I discovered "clmlSvc.exe" is owned by CyberLink MediaLibray Service. I believe that is the CD writing application pre-installed on this pc.

Armed with that knowledge what should I do? I do not want to have to manually stop "clmlSvc.exe" every time I want to unlock a TrueCrypt volume.

[Incidentally I tried to use "Unlocker.exe" to discover what was locking the file but it does not seem to work correctly in W 7. At least it does not appear on the right mouse click contents. Is there a trick to making it work in W 7?]

Thanks for any help.