Vista Squad Home

Vista Squad


The Usergroup for Windows Vista and the .NET Framework 3.0 and 3.5.

Welcome to Vista Squad Sign in | Join | Help
in
Home Blogs Forums Photos Downloads

Love it or Hate it UAC is here to Stay!

Last post 03-21-2007, 12:57 by Ray Booysen. 6 replies.
Sort Posts: Previous Next
  •  03-14-2007, 17:00 43

    Love it or Hate it UAC is here to Stay!

    Love it or Hate UAC is here to Stay

     

     When setting up new computers for clients, that have large software install requirements, I find it much easer to turn off or disable the user account control during the installation process. But please remember that turning off UAC can have security implications – So please think VERY carefully before turning this off.

     

    NB: Remember to turn User Account Control back on before you let the User loose on there PC.

     

    Disabling or turning off User Account Control

     

    Follow the steps below to:-

     

    Disable or enable User Account Control

    (Must be logged in as local administrator)

     

    1. Click Start then click Control Panel
    2. In Control Panel, click User Accounts
    3. In the User Account window click User Accounts.
    4. In User Accounts window, click Turn user account control off or on
    5. If UAC is currently in admin approval mode, the UAC prompt will appear, click continue
    6. To disable UAC, clear the check box Use User Account Control to help protect your computer ‘or’ to enable UAC select the check box Use User Account Control to help protect your computer.

     

    To Disable Admin Approval Mode

    (Must be logged in as local administrator)

     

    1. Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.
    2. If UAC is currently active, a User Account Control dialog box will appear. Verify that the details presented match your request, and click Continue.
    3. In the Local Security Settings console tree, click Local Policies, and then click Security Options
    4. Scroll down and double-click User Account Control: Run all administrators in Admin Approval Mode
    5. From the User Account Control: Run all administrators in Admin Approval Mode Properties dialog box, click Disabled, and then click OK.
    6. Close the Local Security Settings window.

     

    Disable UAC prompting for credentials to install applications

    (Must be logged in as local administrator)

    1. Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.
    2. From the Local Security Settings console tree, click Local Policies, and then Security Options.
    3. Scroll down and double-click User Account Control: Detect application installations and prompt for elevation
    4. From the User Account Control: Detect application installations and prompt for elevation Properties dialog box, click Disabled, and then click OK.
    5. Close the Local Security Settings window.

     

     

    Changing the elevation prompt behavior

    (Must be logged in as local administrator)

    1.      Click Start, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.

    2.      From the Local Security Settings console tree, click Local Policies, and then Security Options.

    3.      Scroll down to and double-click User Account Control: Behavior of the elevation prompt for administrators or User Account Control: Behavior of the elevation prompt for standard users

    4.      From the drop-down menu, select one of the following settings

    : No prompt, Prompt for credentials (this setting requires user name and password input before an application or task will run as elevated, and is the default for standard users), Prompt for consent (this is the default setting for administrators only)

    5.      Click OK.

    6.      Close the Local Security Settings window.

     

    Have a play see how you get on with UAC it’s a great improvement for security within Windows Vista but it takes some real getting used to at first, let us know how you get on, problems etc.

     

    NB: to turn back on just reverse the above procedures.

     


    scottbelton@tiscali.co.uk
    Filed under:
  •  03-15-2007, 8:55 46 in reply to 43

    Re: Love it or Hate it UAC is here to Stay!

    Great Article! :)

    A nice set of information 


    Ray Booysen
    ray@vistasquad.co.uk
  •  03-20-2007, 5:51 58 in reply to 46

    Re: Love it or Hate it UAC is here to Stay!

    Excellent!

    UAC is ocasionally annoying but I think that for the average user it shouldn't appear very often.

    I do feel that my pc is much more secure. 

    Ontop of UAC, IE7's Protected Mode takes security to another level.  It does make some things harder though as an addon developer since the addon's are also running in low-rights (for example, trying to read a cookie using InternetGetCookie is banned now when running in low-rights.  Thankfully there is a workaround!)


    -james
    Ikanos Consulting
  •  03-20-2007, 12:57 62 in reply to 58

    Re: Love it or Hate it UAC is here to Stay!

    Thanks for you comments, you say you have a work around, would you mind posting it here in case others may need it.


    scottbelton@tiscali.co.uk
  •  03-21-2007, 12:29 75 in reply to 58

    Re: Love it or Hate it UAC is here to Stay!

    Have you seen that Mac ad about the UAC in Vista.  Pretty funny even though its mostly FUD.

    Ray Booysen
    ray@vistasquad.co.uk
  •  03-21-2007, 12:35 76 in reply to 75

    Re: Love it or Hate it UAC is here to Stay!

    No not seen it yet, were is it posted would be interested to take a look.

     Scott Belton

     


    scottbelton@tiscali.co.uk
    Filed under:
  •  03-21-2007, 12:57 78 in reply to 76

    Re: Love it or Hate it UAC is here to Stay!

    Filed under:
View as RSS news feed in XML
Powered by Community Server (Commercial Edition), by Telligent Systems Sign up for MSDN Flash Newsletter and win a Prize! Ineta
Sponsored By Dot Net Solutions Ltd