UAC is Useless in Windows 7

[kikloo]

Hi,

In my opinion UAC that comes in Windows 7 is totally useless and it really just slows your computing down. I just have to do more clicks to get things done in my opinion. And I don't know how it protects noobs. from viruses, malwares in anyway ?

For eg. I am noob, I see flashy mouse cursors banner on some site and I click on banner, it downloaded an exe (Remember IE is asking me whether I want to download or not),but Nooo, I just ignore IE and go ahead with the download becuase I want flashy cursors, then I run exe and UAC pop's up but again I allow it becuase those flashy cursors are so tempting and I must have the flashy cursor on my PC etc. In the end I ignore everything and still install malware on my PC etc.

So how did the UAC or adding more warning which noobs etc. don't even care to read, will protect them ? So putting in UAC is just bogus and waste of time, I know it can be disabled etc. but I don't see the point in putting it there in the first time.

Anyways my thumb rule is, that if my antivirus software etc. says that X file has virus, then I simply go with that, if that file is important for me then I try to clean it, if cleaning fails, I delete it. No point in keeping an infected file on my system. It will only make things worse.

So NOOBS here's a tip: When your antivirus says its a virus then don't ignore that. Just clean it if it can be else delete it. If you follow this practice I assure you that you will never get virus in your PC.

Thanks.

 

[DustSailor]

Well, the UAC is actually very useful, especially if you have an administrative account, but use a limited account. Don't know why you should use a limited user? Here is why: Why use a standard user account instead of an administrator account?

The UAC allows the limited user to enter an administrative password so that he can access things normally restricted to Administreator accounts (useful and very much more secure). It also prevents many changes a potential virus could try to make as it restricts the virus from making administrative changes. Believe me, it is a very good extra layer of security. In addition, IE(9) has a built in screening process (called Smartscreen filter) that can prevent known malware from downloading to the computer (it will let you know that the program is a known risk). On top of this, windows has a built in firewall and spyware scanner (windows defender). You can further download MSE for an integrated virus protection that runs quite well on windows 7.

This doesn't even mention other free security protections for use outside microsoft.

The best practice is common sense, but often common sense can be forgotten, even by the best of us. Any way to increase security can be very helpful in the event you receive a virus. It is the ever furious battle between security and convenience. You choose that which you care more for.

 

[HexDSL]

The UAC allows the limited user to enter an administrative password so that he can access things normally restricted to Administreator accounts (useful and very much more secure.

I have to say, i did now know this.

the moment I get home I'll make and admin account and convert my current login to a limited User. i assume this will work how my Linux (ubuntu) VM does. Once you get used to this its really no hardship.

Thanks for the tip.

 

[logicearth]

UAC is not antivirus software...Why would you even think it was? What UAC is, allows one to run their computer with limited power and only elevate to higher power (Administrator) when it is required. It is not going to stop you from running an application as administrator, that is not its purpose. The failing of installing malware lies on you.

 

[DustSailor]

The UAC allows the limited user to enter an administrative password so that he can access things normally restricted to Administreator [sic] accounts (useful and very much more secure).

I have to say, i did now know this.

the moment I get home I'll make and admin account and convert my current login to a limited User. i assume this will work how my Linux (ubuntu) VM does. Once you get used to this its really no hardship.

Thanks for the tip.

Glad I could help. So long as you do not do tasks requiring administrative permissions often (changing certain settings, installing, etc), then you should be fine. If you need to install anything, including add-ons for an internet browser, I recommend logging on to the administrative account to do it. That is what the administrative account was meant for. You can do simple tasks and have the added security through limited user accounts. It is what I use at work, and it works pretty well for me.

Cheers!

 

[pparks1]

Hi,

In my opinion UAC that comes in Windows 7 is totally useless and it really just slows your computing down.

I would disagree, and I don't feel it slows my computer down at all. Only once in a blue moon I try to do something and have to click on Allow.

And I don't know how it protects noobs. from viruses, malwares in anyway ?

Well, in most cases, if used properly, it allows you to run with a nonadmin account. It's your responsibility to decide whether you are going to push ok or not. Without UAC, these things would have just installed and not said anything. At least with UAC, after you get something bad, you might remember, and think "oh yeah, probably shouldn't have said ok to that".

I know it can be disabled etc. but I don't see the point in putting it there in the first time.

Because XP was a mess as everybody ran as an administrator. This was the smoothest way to run as a standard user and easily elevate when necessary.

 

[Alejandro85]

UAC surely has its uses and serves a particular purpose. It's not a life saver an doesn't relief you of the task of protecting your computer, but adds another layer of defense against viruses that want to run as admin, but have to ask the user first. I know it's a bit annoying and some operations are slowed down by the prompts, but it's worth having it enabled as long as you think twice before elevating.

Anyway, I think THE best protection is common sense. Some programs for sure need admin access, but many often don't, so when you see an UAC prompt for a simple program that isn't supposed to modify anything globally, you have a warning that something suspicious is happening.

Personally, I've once catched a virus trying to sneak in when an UAC prompt poped up out of nowhere, asking to elevate an executable in a temporary folder. Of course, it was a virus.

I have to agree with you in one aspect. The default UAC level in Windows 7 is actually totally useless, because it has two known bugs that let any program freely elevate without notifying the user. You should always move the slider to the top for UAC to be of some use, otherwise it's better to have it completely off.

 

[M1GU31]

I find UAC as a annoyance I believe i'm smart enough to handle my pc and can the majority of the time keep my pc clean from infections and if i get a infection then i'm more then capable to clean it but that's just me.

 

[pparks1]

I find UAC as a annoyance I believe i'm smart enough to handle my pc and can the majority of the time keep my pc clean from infections and if i get a infection then i'm more then capable to clean it but that's just me.

That's the beauty of the system, you can turn it on or turn it off. I feel that I too can keep my machine clean without it, but I leave it enabled.

 

[kikloo]

I find UAC as a annoyance I believe i'm smart enough to handle my pc and can the majority of the time keep my pc clean from infections and if i get a infection then i'm more then capable to clean it but that's just me.

Thats the thing I am saying, when you setup Windows 7 your account is created as Administrator and not a normal user. If a noob is using Windows 7 then most probably he's using an Admin account and then UAC will help him very little when he really wants flash mouse cursors to be installed on the system.

So if MS wanted to use UAC as suggested by other people (like admin / normal account) then why MS is creating Admin accounts in setup ? Why not setup a default admin account and let users create default Normal accounts ? Its like doing mistake to cover another mistake i guess.

Either you're dumb enough to get your pc infected or you're smart enough to not use UAC. Where its helping ? How many noob users are using accounts as normal and not administrator ? How many users find UAC annoying ? How many users have disabled it permanently. I really don't think people know this stratgey that they have to use normal account with UAC and not admin accounts.

So in theory this is good from MS, but it really fails at user end.

P.S: I love MS and Windows. Its just i am increasing my knowledge by debating this.

Thanks.

 

[mart44]

UAC's purpose is not to judge if a user's 'allow' action could be bad for the system. It is just a layer of security put in place to stop changes being made to the system without the user's knowledge and intervention. Other programs are installed on most computers that will hopefully detect, warn against or prevent bad moves being made.

The UAC alert still comes up whether running as Admin or a Limited User. A difference with a Limited User account in W.7 is that a password is needed to allow the process to run. Entering a password can be a nuisance for a person who is the only user of a computer because password or not, a conscious decision has already been made to run the process. For this reason, I prefer to run as Admin and not to be troubled by a password being needed.

However, I still think it best to have UAC operational purely because it does give an alert that a change to the Admin account is about to take place. Nothing unknown about is going to happen. An extra mouse-click seems a small price to pay for this layer of security.

 

[seavixen32]

The clue is in the wording: User Access Control.

In other words, UAC has little to do with virus protection, but everything to do with preventing unauthorised access to your computer.

Keeping away from dodgy sites (particularly porn), using a standard account with UAC switched on along with an effective anti-virus program such as Microsoft Security Essentials and using Windows/Microsoft updates should keep your computer relatively safe.

Windows forums everywhere are full of posts from supposedly computer-savvy folk who want advice on cleaning an infected computer. Chances are, they've clicked on a link because they were prompted to do so, which is so wrong.

After all, you wouldn't go into a burning building if you were asked to, so why click on a link that you know nothing about just because you were asked to?

Common sense, UAC and a good anti-virus program should keep most computers safe. Failure to use less is really saying you get what you deserve.

 

[kikloo]

Hi,

Having said that, I am single user on my laptop and I use admin account etc. If i switch to a limited account and leave the admin account alone, does it provides any speed benefits ?

Thanks.

 

[DustSailor]

No, it won't. It will only make your computer somewhat more secure without slowing it down at all.

If you are speaking in terms of UAC, the UAC itself will take time only because the prompt pops up and you will need to enter the admin password. But it will not slow down the computer, and this will only happen when you are changing administrative settings or doing a task that requires elevation. If you are worried about computer speed, here is a neat tutorial by Brink to http://www.sevenforums.com/tutorials/11728-optimize-windows-7-a.html