is it bad to turn off user account control?

Page 5 of 10 FirstFirst ... 34567 ... LastLast

  1. Posts : 34
    Vista Premium
       #41

    Best security is a tip i picked up for any version Windows

    Most people make themselves Administrator with full privileges and consequently most vulnerable people on the internet - that falls into the realm of totally obvious (and bit stupid) and so you've prolly just realised whats coming

    Create Administrator account for installations only

    Create Your own account as 'user' only - you can play anywhere you like with full knowledge that your PC is pretty bulletproof - nothing can be installed on your PC in the background - to install anything you will have to switch accounts

    Dont need no UAC - never have done
      My Computer


  2. Posts : 11,990
    Windows 7 Ultimate 32 bit
       #42

    Tepid said:
    The simple fact is,, UAC can and does prevent programs from running that require Admin rights.
    Plain and simple,, stupid idea or not, it's a fact. You have said it yourself that, that is what it does.

    So, to get back on full topic of,,,,
    Should anyone turn off UAC or not?

    As it works the way it is intended and it does work.
    The answer is No, you should not.

    What one does in reality is their own business. And not my problem, till they start complaining about getting infected or having other issues and you find out that it might have been preventable, but they disabled a tool that could have saved them the grief in the long run. My answer will always be,, plain and simple, because it does what it is supposed to do,, run as standard user with UAC enabled. Is it the best perfect all around wonderful god like utility that we hope and wish it would be? No. But, it's not a useless tool either as long as people pay attention to why it is popping.

    This is a controversy that will go down in the annals of all that is MS, just as activating XP did back in the day, just as Run with no page file or what, still is today (even though it's has been proven time and again that it is best to run with MS recommended page file sizes regardless of how much ram you have installed).

    So, why do I say run with UAC is my standard answer?

    Because, I know people, and the largest majority of people asking this question, do not know what they are really doing, are not really all that safe of surfers or stewards of their own security. I also am not here to tell anyone how to run their own system or protect them from themselves. That's not my intention, nor my job, and frankly speaking, I don't want anyone forcing it on me. But, we also all (as techs, or more experienced users) provide the (not sure how to put this) ,, best answers, not always as we ourselves run our system but how a system is intended to run, to the best of our knowledge. Giving security advice that works for us, is not something that always works for everyone else. Spitting out some of the answers I have seen in this thread, many are well, irresponsible. Bad Advice.

    Putting even more simply, and which may become my standard answer to this particular question is...

    Q. Should one turn off UAC or not?

    A. If you have to ask that question, then No, you Should not turn off UAC.

    Actually, I'll make that part of my sig.
    Excellent post; well stated.
      My Computer


  3. Posts : 29
    Windows 7
       #43

    Tepid said:
    You know. One of the things that people complained about the most was how Not Secure XP was.
    Then they (MS) implement something that actually does make the OS more secure, and be more like linux in how is handles the way applications run, and people turn it off. It's not a smart move.

    No, UAC should not be turned off
    Yes, you should run as a user and not as an admin

    Turning off UAC and running as admin are just not a smart thing to do.
    Regardless of how safe you think you are when running Your system, blah blah blah.

    It's just my opinion, yeah, but it's the right one.
    ++

    I would also agree. Why would you remove UAC when it makes the system so secure. I personally believe that if you have UAC on then even a normal security suite like MSE is more than enough. Anyways if a person in running in admin mode then it takes just a second to click on the ok and that too for programs which gets access to core Windows files. I personally would also not recommend turning off UAC. A second used in clicking ok is not a big sacrifice for security. Windows tried to make nearly a complete operating system in all aspects with looks, features and security all included in Windows 7. But I still see a lot of people who are ready to change core system files and to to turn off safety features for small things. And when there are any security problems the people who mess up the system the most are normally the ones who makes the most noises too later on.
      My Computer


  4. Posts : 622
    Arch Linux 64-bit
       #44

    Chris K said:
    Create Your own account as 'user' only - you can play anywhere you like with full knowledge that your PC is pretty bulletproof - nothing can be installed on your PC in the background - to install anything you will have to switch accounts
    LUA doesn't stop malware from running and stealing your data. It just prevents them from embedding into your system.
      My Computer


  5. Posts : 34
    Vista Premium
       #45

    malexous said:
    Chris K said:
    Create Your own account as 'user' only - you can play anywhere you like with full knowledge that your PC is pretty bulletproof - nothing can be installed on your PC in the background - to install anything you will have to switch accounts
    LUA doesn't stop malware from running and stealing your data. It just prevents them from embedding into your system.
    If you use it as I suggested then malware (or anything) cant install if you're using Standard User Account

    It can only run if you've already installed it (via Admin account) - but UAC wont plug that either
      My Computer


  6. Posts : 1,403
    Win 7 Ultimate 32bit
       #46

    but UAC wont plug that either
    Not completely, no, but it can help. Again, UAC is not an end all be all security measure, but it is a layer.
    Not a perfect layer, but, but it is a layer that does work.

    Is it going to fully prevent everything from getting in? No.
    But it is an early warning system in many cases. Which is what it was designed for.
      My Computer


  7. Posts : 622
    Arch Linux 64-bit
       #47

    Re: LUA. What about exploits and drive-by downloads?

    Drive-By Download Attacks NOT Deterred by Limited User Account (LUA)
      My Computer


  8. Posts : 34
    Vista Premium
       #48

    Tepid said:
    but UAC wont plug that either
    Not completely, no, but it can help. .
    As can using "User account" not Admin account - so we're back where i started - you dont need UAC at all - you just need User Account for day-2-day use and Admin account for installing ONLY
      My Computer


  9. Posts : 1,325
    Windows7 Ultimate 64bit
       #49

    Whew, this thread is getting quite complicated...

    LUA won't save you from infection, just like UAC. UAC will prompt you if something wants to install and appropriately an install will need administrative privilege, in a sense UAC will help you NOT get the infection... but by using LUA, you WON'T even be able to install... in a way it's MUCH SAFER than UAC. For those virus/malware that doesn't need "installation" process, if it successfully install it self to the computer, it will only be able to wreak havoc in the current user's files. It can't go deep into Windows's core system per-say (like to install a service, install rootkit, or anything needing admin privilege), so a quick scan from a separate account (preferably with admin privilege) will suffice.

    All in all, LUA in a way is MUCH SAFER than UAC, IMHO. How many of Windows users do use LUA? UAC + LUA is moot (most of the time), since UAC strips admin off it's admin powers, LUA is not admin, so UAC isn't exactly working in LUA.

    Short summary: LUA is better than UAC, UAC + LUA = moot.

    zzz2496
      My Computer


  10. Posts : 1,403
    Win 7 Ultimate 32bit
       #50

    Chris K said:
    Tepid said:
    but UAC wont plug that either
    Not completely, no, but it can help. .
    As can using "User account" not Admin account - so we're back where i started - you dont need UAC at all - you just need User Account for day-2-day use and Admin account for installing ONLY
    Don't get me wrong, I do agree with that. Could UAC be disabled if you are using a LUA? Technically, Yes.

    But,, keep in mind that LUA with UAC provides for Credentials prompting.
    You must provide an admin password before the action that requires it will actually install or execute. This is a much more desirable action in all situations.

    This is the exact reason why I state, use Standard User with UAC enabled.
    Far better protection in my opinion. And the way Win 7 is meant to be used.
      My Computer


 
Page 5 of 10 FirstFirst ... 34567 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 14:10.
Find Us