1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Don't Turn off UAC, makes everything High Integrity

Discussion in 'General Security' started by lunarlander, Jan 20, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. lunarlander

    lunarlander Thread Starter

    Joined:
    Sep 21, 2007
    Messages:
    11,574
    In Vista and Windows 7, there is the option of turning off User Access Control (UAC). That is the prompt that asks for confirmation whenever you do an administrative task.

    Don't turn it off. It results in every process running at High Integrity. Windows has integrity levels for applications, marking them as trusted or not. Internet Explorer, by default, runs as Low Integrity. Because it is exposed to all manners of attacks when browsing the internet. A Low Integrity process cannot modify a higher integrity file or process. Thus setting IE as Low Integrity protects your system. The other name for this is Protected Mode.

    However, when you turn UAC off, IE runs at High Integrity. And any malicious web page that hits IE will have full access to your system.

    You can see this for yourself if you download MS SysInternal's Process Explorer. Go to View > Set Columns, and checkmark Integrity. You will now see an integrity column. Turn UAC on and off and see the difference.
     
  2. Ent

    Ent Trusted Advisor

    Joined:
    Apr 11, 2009
    Messages:
    5,467
    First Name:
    Josiah
  3. lunarlander

    lunarlander Thread Starter

    Joined:
    Sep 21, 2007
    Messages:
    11,574
    I clicked on the UAC link above, but I don't know how to edit the page.
     
  4. Ent

    Ent Trusted Advisor

    Joined:
    Apr 11, 2009
    Messages:
    5,467
    First Name:
    Josiah
    You have to log in with your TSG username and password, clicking Log in/Create account. Once you're logged in go back to the page and there should be a few more buttons at the top, including one labelled "edit".
     
  5. Stoner

    Stoner Banned

    Joined:
    Oct 26, 2002
    Messages:
    44,931
    Good advice (y)
     
  6. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/975868

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice