Question about UAC warnings....

[CommonTater]

Hi Gang...
This is new... I have a mess of stuff on Win7. But I'm seeing some very inconsistent security behavior....

Some of my icons have the little security shield on them...



When I enable UAC I get a warning about these two programs every single time. Now, I have no problem about the system telling me I might be on the brink of screwing up. In fact I think that's a good thing...

So, my question... Is there a means to selectively disable UAC warnings for programs I know are ok while still leaving them active for others??? I.E. to bypass UAC on a program by program basis?

 

[polarbear]

I know little to you... but are you networked with other computers and sharing those folders? GL

 

[whs]

I found this - although it is for Vista: Selectively disable UAC for your trusted Vista applications | Microsoft Windows | TechRepublic.com

 

[CommonTater]

I know little to you... but are you networked with other computers and sharing those folders? GL

No... both are local to this machine, neither is shared.

Hey... it's not always how much you know that matters... the thing of the moment is do you know THIS? I don't, that's why I asked...

 

[CommonTater]

I found this - although it is for Vista: Selectively disable UAC for your trusted Vista applications | Microsoft Windows | TechRepublic.com

Very interesting but not exactly what I need... Thanks for the effort.

Problem is that I either run with UAC on and have to double run several programs, or turn the UAC off and risk something getting by me... Like maybe this should be a security/permissions setting that administrators can set?

 

[Lordbob75]

It is not possible by design.

Which is rather unfortunate, but it makes sense.

~Lordbob

 

[CommonTater]

It is not possible by design.

Which is rather unfortunate, but it makes sense.

~Lordbob

It may be by design but I really don't think it makes much sense. It's very intrusive.

Both of the example programs, in the image, are software I've been using for a long time and I trust them implicitly... so much so that I'm reluctant to go out looking for replacements. But I'm also into them each about 5 or 10 times a day and that UAC is going to be a major annoyance after about the 3rd time... I know I can turn it off, but I'd rather not as I need it to test compatibility with software I am developing... Again, several times a day.

The odd thing is that when I first installed Win7 as my primary it didn't do that... only now that it's my secondary (XP is primary ... long story, I'm sure you've seen) did it start doing this...

Oh well, if there's no way around it I'll just turn UAC off and enable it when I need to test...

Well, unless anyone has additional suggestions...

 

[whs]

It is already a lot less intrusive than it was in Vista. I guess you skipped Vista and are not used to the UAC. I am not really bothered by it, but you are right - They should allow a list of "trusted programs" like any good AV program does - even MSE. Maybe in /8 they will come around to it.

 

[Lordbob75]

It is not possible by design.

Which is rather unfortunate, but it makes sense.

~Lordbob

It may be by design but I really don't think it makes much sense. It's very intrusive.

Both of the example programs, in the image, are software I've been using for a long time and I trust them implicitly... so much so that I'm reluctant to go out looking for replacements. But I'm also into them each about 5 or 10 times a day and that UAC is going to be a major annoyance after about the 3rd time... I know I can turn it off, but I'd rather not as I need it to test compatibility with software I am developing... Again, several times a day.

The odd thing is that when I first installed Win7 as my primary it didn't do that... only now that it's my secondary (XP is primary ... long story, I'm sure you've seen) did it start doing this...

Oh well, if there's no way around it I'll just turn UAC off and enable it when I need to test...

Well, unless anyone has additional suggestions...

They have it set that way so a virus cannot add itself to the whitelist.

~Lordbob

 

[Phone Man]

Read This:

http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html

Jim

 

[CommonTater]

Read This:

http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html

Jim

Thank you Jim... much appreciated... But through task scheduler? Odd...

They have it set that way so a virus cannot add itself to the whitelist.
~Lordbob

I get the idea LordBob... I just don't agree with it.

A more secure and probably more successful approach would be to log in as the administrator and set a permission switch.

It is already a lot less intrusive than it was in Vista. I guess you skipped Vista and are not used to the UAC. I am not really bothered by it, but you are right - They should allow a list of "trusted programs" like any good AV program does - even MSE. Maybe in /8 they will come around to it.

Yep, whs, I'm aware of that much. I did skip Vista... it asked if I really wanted to do perfectly ordinary things once too often and found itself in the trashcan.

Anyway even more mysterious.... here are my two program icons this morning...



Note that except for reading all the provided insight, I did nothing to change them... All I did last night was turn off the computer and snuggle up in bed... Yet the little shield overlay is gone this morning and both programs now run without UAC interference.

I wonder what tomorror will bring...

 

[Thorsen]

Yes CT, the elevated shortcut is the easiest solution. I have a folder for the shortcuts called AdminShortcuts and each shortcut is named admin<program>. Each one points to the task as it states in the Tut and then I put those shortcuts wherever I want. things like GPUz and CCleaner require permission, but with the shortcut, it just loads.

I have never seen the sheild-icon thing....

 

[CommonTater]

Yes CT, the elevated shortcut is the easiest solution. I have a folder for the shortcuts called AdminShortcuts and each shortcut is named admin<program>. Each one points to the task as it states in the Tut and then I put those shortcuts wherever I want. things like GPUz and CCleaner require permission, but with the shortcut, it just loads.

I have never seen the sheild-icon thing....

First time I've seen it too...

Thanks for the help everyone... maybe next time the problem will stay around long enough for me to fix it...

 

[Lordbob75]

They have it set that way so a virus cannot add itself to the whitelist.
~Lordbob

I get the idea LordBob... I just don't agree with it.

A more secure and probably more successful approach would be to log in as the administrator and set a permission switch.

I agree it is not the most favourable solution from a user point of view.

There are somethings I run at startup that require a UAC prompt, and it is irritating, but ultimately harmless. I just live with it.

~Lordbob

 

[MSF4n]

Sorry for this off topic question, but do you really find this feature useful? I see you're sticking hard to UAC and even digging for answers - why just don't turn it off?

Because it tells you you're installing a software, just after you click on setup.exe?

Don't you think UAC is good mostly for inexperienced users?

 

[Lordbob75]

Sorry for this off topic question, but do you really find this feature useful? I see you're sticking hard to UAC and even digging for answers - why just don't turn it off?

Because it tells you you're installing a software, just after you click on setup.exe?

Don't you think UAC is good mostly for unexperienced users?

It is definitely good for inexperienced users.
It is good for experienced users too.

While it can be annoying, you will always know if something other than you triggers one.

~Lordbob

 

[severedsolo]

Sorry for this off topic question, but do you really find this feature useful? I see you're sticking hard to UAC and even digging for answers - why just don't turn it off?

Because it tells you you're installing a software, just after you click on setup.exe?

Don't you think UAC is good mostly for unexperienced users?

It is definitely good for inexperienced users.
It is good for experienced users too.

While it can be annoying, you will always know if something other than you triggers one.

~Lordbob

+1 the danger with UAC is you tend to become complacent, or i do anyway, UAC flashed up for something not initiated by me the other day, and i automatically clicked yes, cue "Oh S**T S**T S**T what was that?" luckily for me, it was just a java update, but still, a cautionary tale, remember to check what its asking you for.

 

[CommonTater]

Sorry for this off topic question, but do you really find this feature useful? I see you're sticking hard to UAC and even digging for answers - why just don't turn it off?

Because it tells you you're installing a software, just after you click on setup.exe?

Don't you think UAC is good mostly for inexperienced users?

Can't speak for the others... but in my case I am developing a couple of software packages and need the UAC running for testing it. It's no fun if you're working across a network and the UAC pops up on a machine you can't even see....

 

[CommonTater]

Incredible....

Go out for supper... come home fire up the computer and...



They're baaaaaack....



Here's the error message I'm getting....



The program is digitally signed.

WTF is going on????


EDIT:
This is interesting...

User Account Control

 

[iron2000]

Does the programs write stuff (maybe settings to some ini..etc) to protected areas (program files, windows folder, non-user areas)?

Don't really know UAC well enough but to me I think its to control changes in system areas.


OT:
Just re-enabled UAC yesterday, trying to get used to it.
So UAC even nag about deleting stuff in an external HDD!
Fixed it by giving "Everyone" full access.
Had to move my ChromePlus portable folder from Program Files cause of access rights.
Editing winapp2.ini needs an elevated notepad.

Being restricted is challenging