Running in User Mode vs Administrator Mode

[sandymay]

I'm using the trial version of Win 7 Enterprise and run in user mode.

When I installed Google Chrome, I was expecting a prompt requesting my admin ID password. This did not happen and Chrome just installed itself. The same was seen when I installed the Picnik extension for Chrome.

However, when I installed Flash 10.x, I was prompted for my admin password.

I'm just wondering if someone might know why I didn't get the admin password prompt for Chrome? It concerns me because I wonder what else could be installed while running in user mode.

Thank you

 

[richc46]

Administrative password is required for programs etc, that can effect the perfomance of the computer. Chrome a browser, just affects the one user. Quite a difference.
Delete that one account Chrome is history.

 

[logicearth]

Chrome does not install itself to Program Files or any portion of the system registry. It installs itself to the current users directory. No administrative power is required for a user to alter the user's data.

 

[sandymay]

I did not know that, this is quite interesting.

Couldn't malware take advantage of this trait by installing itself in the current user directory to capture/record all of the activity of that one user and thus bypass the requirement of an admin password?

Also, is there any way to strengthen Win 7 further so that all application installations (eg Chrome, etc) require an admin password?

 

[richc46]

Point one there is a friendly controversy over how much damage a virus can do from a users account. I am of the position that it is very little. I use only my regular users account, even though I am the only user. I use the adminstrative only when needed.

Question, two, I think not, except to increase security on the annoying UAC.

http://www.sevenforums.com/tutorial...l-uac-change-notification-settings.html?ltr=U

 

[sandymay]

I'm just reading the below quote from another knowledge base. Does that mean Microsoft maintains a white list of apps that "standard users" can install without admin access and if so, is the full list available somewhere to view or does Microsoft keep it secret?

"Modern applications/programs that run under UAC restrictions have their power to become “trusted”-apps. Programs like Google Chrome or other (e.g. Avast Antivirus, Mozilla FireFox or any other), are put into trusted directories"

 

[richc46]

I guess there is a computerized list somehere, but bottom line is that MS wrote the program anything that happens is either intentional or a bug. With UAC and security it is all intentional. MS requires approval for any change that can effect the computer and not just one user. I would guess with enough research there may be a list, I do not want it and never had the question before.

UAC can be adjusted and you can give permission to a program to run in any users account.

Go to any program, right click, properties and security. You can see what you are capable of doing.

 

[richc46]

Posted quite a bit of additional information above, be sure to read.

 

[arkhi]

I don't think there's a list. Last I've checked (pre-RC days), W7 auto-elevates any Microsoft Digitally Signed components.

 

[Toms]

Google install issues

Google Chrome installs without UAC intervention. This is a problem in secure network environments where Group Policies rules are used to lock down and secure Internet Explorer. If users can install Chrome on their own, then they will do so in order to bypass the restrictions you have applied to Internet Explorer. I created rules to prevent Chrome and all other non-IE browsers from running.