Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: is it bad to turn off user account control?

20 Jun 2010   #41
Chris K

Vista Premium
 
 

Best security is a tip i picked up for any version Windows

Most people make themselves Administrator with full privileges and consequently most vulnerable people on the internet - that falls into the realm of totally obvious (and bit stupid) and so you've prolly just realised whats coming

Create Administrator account for installations only

Create Your own account as 'user' only - you can play anywhere you like with full knowledge that your PC is pretty bulletproof - nothing can be installed on your PC in the background - to install anything you will have to switch accounts

Dont need no UAC - never have done


My System SpecsSystem Spec
.
20 Jun 2010   #42
CarlTR6

Windows 7 Ultimate 32 bit
 
 

Quote   Quote: Originally Posted by Tepid View Post
The simple fact is,, UAC can and does prevent programs from running that require Admin rights.
Plain and simple,, stupid idea or not, it's a fact. You have said it yourself that, that is what it does.

So, to get back on full topic of,,,,
Should anyone turn off UAC or not?

As it works the way it is intended and it does work.
The answer is No, you should not.

What one does in reality is their own business. And not my problem, till they start complaining about getting infected or having other issues and you find out that it might have been preventable, but they disabled a tool that could have saved them the grief in the long run. My answer will always be,, plain and simple, because it does what it is supposed to do,, run as standard user with UAC enabled. Is it the best perfect all around wonderful god like utility that we hope and wish it would be? No. But, it's not a useless tool either as long as people pay attention to why it is popping.

This is a controversy that will go down in the annals of all that is MS, just as activating XP did back in the day, just as Run with no page file or what, still is today (even though it's has been proven time and again that it is best to run with MS recommended page file sizes regardless of how much ram you have installed).

So, why do I say run with UAC is my standard answer?

Because, I know people, and the largest majority of people asking this question, do not know what they are really doing, are not really all that safe of surfers or stewards of their own security. I also am not here to tell anyone how to run their own system or protect them from themselves. That's not my intention, nor my job, and frankly speaking, I don't want anyone forcing it on me. But, we also all (as techs, or more experienced users) provide the (not sure how to put this) ,, best answers, not always as we ourselves run our system but how a system is intended to run, to the best of our knowledge. Giving security advice that works for us, is not something that always works for everyone else. Spitting out some of the answers I have seen in this thread, many are well, irresponsible. Bad Advice.

Putting even more simply, and which may become my standard answer to this particular question is...

Q. Should one turn off UAC or not?

A. If you have to ask that question, then No, you Should not turn off UAC.

Actually, I'll make that part of my sig.
Excellent post; well stated.
My System SpecsSystem Spec
20 Jun 2010   #43
windows7theme

Windows 7
 
 

Quote   Quote: Originally Posted by Tepid View Post
You know. One of the things that people complained about the most was how Not Secure XP was.
Then they (MS) implement something that actually does make the OS more secure, and be more like linux in how is handles the way applications run, and people turn it off. It's not a smart move.

No, UAC should not be turned off
Yes, you should run as a user and not as an admin

Turning off UAC and running as admin are just not a smart thing to do.
Regardless of how safe you think you are when running Your system, blah blah blah.

It's just my opinion, yeah, but it's the right one.
++

I would also agree. Why would you remove UAC when it makes the system so secure. I personally believe that if you have UAC on then even a normal security suite like MSE is more than enough. Anyways if a person in running in admin mode then it takes just a second to click on the ok and that too for programs which gets access to core Windows files. I personally would also not recommend turning off UAC. A second used in clicking ok is not a big sacrifice for security. Windows tried to make nearly a complete operating system in all aspects with looks, features and security all included in Windows 7. But I still see a lot of people who are ready to change core system files and to to turn off safety features for small things. And when there are any security problems the people who mess up the system the most are normally the ones who makes the most noises too later on.
My System SpecsSystem Spec
.

20 Jun 2010   #44
malexous

Arch Linux 64-bit
 
 

Quote   Quote: Originally Posted by Chris K View Post
Create Your own account as 'user' only - you can play anywhere you like with full knowledge that your PC is pretty bulletproof - nothing can be installed on your PC in the background - to install anything you will have to switch accounts
LUA doesn't stop malware from running and stealing your data. It just prevents them from embedding into your system.
My System SpecsSystem Spec
20 Jun 2010   #45
Chris K

Vista Premium
 
 

Quote   Quote: Originally Posted by malexous View Post
Quote   Quote: Originally Posted by Chris K View Post
Create Your own account as 'user' only - you can play anywhere you like with full knowledge that your PC is pretty bulletproof - nothing can be installed on your PC in the background - to install anything you will have to switch accounts
LUA doesn't stop malware from running and stealing your data. It just prevents them from embedding into your system.
If you use it as I suggested then malware (or anything) cant install if you're using Standard User Account

It can only run if you've already installed it (via Admin account) - but UAC wont plug that either
My System SpecsSystem Spec
20 Jun 2010   #46
Tepid

Win 7 Ultimate 32bit
 
 

Quote:
but UAC wont plug that either
Not completely, no, but it can help. Again, UAC is not an end all be all security measure, but it is a layer.
Not a perfect layer, but, but it is a layer that does work.

Is it going to fully prevent everything from getting in? No.
But it is an early warning system in many cases. Which is what it was designed for.
My System SpecsSystem Spec
20 Jun 2010   #47
malexous

Arch Linux 64-bit
 
 

Re: LUA. What about exploits and drive-by downloads?

Drive-By Download Attacks NOT Deterred by Limited User Account (LUA)
My System SpecsSystem Spec
20 Jun 2010   #48
Chris K

Vista Premium
 
 

Quote   Quote: Originally Posted by Tepid View Post
Quote:
but UAC wont plug that either
Not completely, no, but it can help. .
As can using "User account" not Admin account - so we're back where i started - you dont need UAC at all - you just need User Account for day-2-day use and Admin account for installing ONLY
My System SpecsSystem Spec
20 Jun 2010   #49
zzz2496

Windows7 Ultimate 64bit
 
 

Whew, this thread is getting quite complicated...

LUA won't save you from infection, just like UAC. UAC will prompt you if something wants to install and appropriately an install will need administrative privilege, in a sense UAC will help you NOT get the infection... but by using LUA, you WON'T even be able to install... in a way it's MUCH SAFER than UAC. For those virus/malware that doesn't need "installation" process, if it successfully install it self to the computer, it will only be able to wreak havoc in the current user's files. It can't go deep into Windows's core system per-say (like to install a service, install rootkit, or anything needing admin privilege), so a quick scan from a separate account (preferably with admin privilege) will suffice.

All in all, LUA in a way is MUCH SAFER than UAC, IMHO. How many of Windows users do use LUA? UAC + LUA is moot (most of the time), since UAC strips admin off it's admin powers, LUA is not admin, so UAC isn't exactly working in LUA.

Short summary: LUA is better than UAC, UAC + LUA = moot.

zzz2496
My System SpecsSystem Spec
20 Jun 2010   #50
Tepid

Win 7 Ultimate 32bit
 
 

Quote   Quote: Originally Posted by Chris K View Post
Quote   Quote: Originally Posted by Tepid View Post
Quote:
but UAC wont plug that either
Not completely, no, but it can help. .
As can using "User account" not Admin account - so we're back where i started - you dont need UAC at all - you just need User Account for day-2-day use and Admin account for installing ONLY
Don't get me wrong, I do agree with that. Could UAC be disabled if you are using a LUA? Technically, Yes.

But,, keep in mind that LUA with UAC provides for Credentials prompting.
You must provide an admin password before the action that requires it will actually install or execute. This is a much more desirable action in all situations.

This is the exact reason why I state, use Standard User with UAC enabled.
Far better protection in my opinion. And the way Win 7 is meant to be used.
My System SpecsSystem Spec
Reply

 is it bad to turn off user account control?




Thread Tools




Similar help and support threads
Thread Forum
How to turn User Account Control setting to off?
How to turn User Account Control setting to off?
System Security
How do i control a user account?
Hi, I have many people using my computer and I want to stop them from being on my account. What I mean by this is,that I want to set up an account for everyone else to use with the following control: 1. I (as an administrator) get to control password creation, account pictures and all...
General Discussion
How To Turn Off User Account Control (UAC) For A Specific Application
How To Turn Off User Account Control (UAC) For A Specific Application i am using windows 7 and mcafee anti-virus i m geting tat question every time i use it....it s irritating!!!!
System Security
user account control
hey guys, everytime i try to open a application called steam this appears... http://img163.imageshack.us/img163/8574/werid.png i know this appears when something is going to install or change something but is there any way the user account control can still work but steam is an exception? thank...
System Security
User Account Control
Can I Disable User Account Control (UAC) for one Windows 7 application or program?
System Security
User Account Control
GM all, Does anyone know how you add a publisher so you stop getting the User Account Control dialog popup's? Thanking you in advance, Cliff
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:05.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App