[jonmcc33]

First the links...

Wiki: http://en.wikipedia.org/wiki/User_Account_Control

It aims to improve the security of Microsoft Windows by limiting application software to standard user privileges until an administrator authorizes an increase in privilege level. In this way, only applications that the user trusts receive higher privileges, and malware is kept from receiving the privileges necessary to compromise the operating system. In other words, a user account may have administrator privileges assigned to it, but applications that the user runs do not also have those privileges unless they are approved beforehand or the user explicitly authorizes it to have higher privileges.

However, in Windows XP the first user created when installing the operating system is given administrative privileges by default. As such, most users would use this account for everyday use. This ensured that all software, including malware, was also running with administrator privileges as well, thereby giving it full access to the operating system.

Understanding and Configuring UAC: http://technet2.microsoft.com/Window...8c2811033.mspx

Step-by-Step UAC Guide: http://technet2.microsoft.com/Window...6c2d91033.mspx

I'm wondering who uses UAC and who does not here. I know many consider it an "annoyance" but when you read into the details you can see how much it really does protect your computer from malicious attacks. With UAC you can run IE7 in Protected Mode which prevents a lot of malware from attacking and running through your web browser.

There are many other details of UAC and Service Pack 1 for Windows Vista does make it less of an "annoyance" to have enabled.

BTW, yes I do run with UAC enabled.

[AKAJohnDoe]

I disabled UAC and I do not run IE7, in fact, I block it in my firewall.

[jonmcc33]

Originally Posted by akajohndoe

I disabled UAC and I do not run IE7, in fact, I block it in my firewall.

Understandable with IE7 as I use Firefox myself (see avatar) but the fact is that 53.2% of the people out there use Internet Explorer 6 or 7.

http://www.w3schools.com/browsers/browsers_stats.asp

[DaveA]

More NEW versions of Vista ready programs REQUIRE that the UAC be turned on, and I think we are going to see more requirements!

[Bob Cerelli]

Depending on the user, sometimes I have them use it and sometimes I don't.

[jonmcc33]

Once again, Bob, this poll is about whether YOU use it. You don't seem to understand that. Please don't go OT in yet another one of my polls. Thank you.

[AKAJohnDoe]

Originally Posted by jonmcc33

Understandable with IE7 as I use Firefox myself (see avatar) but the fact is that 53.2% of the people out there use Internet Explorer 6 or 7.

http://www.w3schools.com/browsers/browsers_stats.asp

As do I, use Firefox, that is. The stats off my website show sad, but true, similar numbers.


Apologies for straying off-topic ...

[skinnywhiteboy]

That's the first thing I disable after a Vista installation. I find it more annoying than anything else.

[Bob Cerelli]

Originally Posted by jonmcc33

Once again, Bob

This is the first time responded to this post.

Yes for me as well, on some of my computers it is on. Sometimes on those computers I turn it off.

[DanDini]

I don't use it in the default manner. I have only one administrative account that I don't log in to, and using gpedit.msc I disable heurisitc detection of programs that (might) need elevating. That way, only when something asks for the highest level of privilege do I get prompted. I then use right click run as administrator when I want to force something. It does have some caveats (e.g. explorer won't run administratively like this) but it's safe and doesn't bug me to run regedit as admin when I only want to edit something in the user registry that I can do as a user (quel surprise!).

Dan

ps You can get around the explorer issue by opening notepad (or other little prog) as administrator and then do file - open. That window has admin rights so you can do file operations from there.

[managed]

Don't use UAC it's a PITA, don't use IE7 either I prefer Opera.

[davehc]

Off on first installation. I use IE and Firefox but have other methods of controlling security than "protected" mode.

[good grief]

I had it on originally, but disabled it after a month or so because it was blocking installation of some programmes, and also because the frequency of requests for permission was annoying me. I have turned it back on just recently for three reasons. One, I noticed in the 'Notable Changes in Windows Vista SP1' that the instances of permissions popping up were going to be reduced from 4 to 1 in at least one instance. Two, the issues with installation are becoming less frequent as changes are being made to software to take UAC into account. Third, sometimes when it has popped up, I have changed my mind about whether to allow something to install an active X on my machine. In other words it made me more security conscious.

[DanDini]

I's naive to think that UAC is only about browsing the web and that by running firefox or opera all is well. The principle of least privilege has been around for a long time and is sound. Sure I can drive my car with the door open and my seat belt off giving me maximum freedom to leave the car at any time. But, there's a reason (or two) why at times this freedom isn't appropriate - especially when you consider that running programs (that you don't know and understand every line of code within) is analogous to letting someone else drive you around in your car.

A crucial thing on this subject is the wording of the UAC popup - 'Windows needs your permssion to continue'. In other words, withouth UAC (or the use of a restricted account as your standard login) Windows (and the programs/scripts/code/whatever that run within it) doesn't need your permission. With all the moaning you hear about 'M$' I can't believe that it's almost always the same people that effectively let 'M$' decide what can and can't happen on their PC. Take control of your PC - use least privilege in whatever way you prefer but still use it.

I step down and the orange box goes away now.

[rainforest123]

j33:
On some computers, I use UAC. On others, I do not use UAC.

g g:
I am concerned with "the issues with installation are becoming less frequent as changes are being made to software to take UAC into account.".

If the writers of non-malware are able to work with UAC, I suspect that the MALWARE writers are able to work with UAC.

If so, what protection does UAC provide?

RF123