Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Vista General Discussion > UAC help anyone?

Reply
Thread Tools Display Modes

UAC help anyone?

 
 
splosher
Guest
Posts: n/a

 
      11-02-2008

H
Sorry if this is in the wrong section but can't decide where to pos
this thread
I run my Vista Ultimate x64 without the UAC on as it just annoys th
hell out of me when i'm trying to open something up and i'm bein
constantly asked to check the permissions before i can continue. I hav
NEVER had any problem at all with unwanted malware/ programs, etc aa
keep on top of my computer daily
However, for some reason i cannot fathom at the minute, my Vista's UA
has come on with this morning's boot-up, so i've gone to turn it off bu
the check box is still unchecked, indicating that UAC is OFF!?

Can anyone point me in the right direction in order to turn this menac
off via command prompt or through Windows folders

Many thank

--
splosher
 
Reply With Quote
 
 
 
 
splosher
Guest
Posts: n/a

 
      11-02-2008

Hi all

Sorry about this but have managed to sort this out myself - this is how
for anyone else:


- From start menu, press All Programs\ Accessories\ Run;
- Type msconfig into the empty section and press OK button;
- Click the last tab titled Tools, scroll down and you will see
Disable UAC;
- Highlight Disable UAC and press launch button;
- Reboot machine and UAC is now off.
Cheers.


--
splosher
 
Reply With Quote
 
Jack the Ripper
Guest
Posts: n/a

 
      11-02-2008
splosher wrote:
> Hi all
>
> Sorry about this but have managed to sort this out myself - this is how
> for anyone else:
>
>
> - From start menu, press All Programs\ Accessories\ Run;
> - Type msconfig into the empty section and press OK button;
> - Click the last tab titled Tools, scroll down and you will see
> Disable UAC;
> - Highlight Disable UAC and press launch button;
> - Reboot machine and UAC is now off.
> Cheers.
>
>


Another one of these I am so good that I must run on the Internet as
user/admin with no protection, wide-open to attack. Little did he know
that malware slipped by him in the past, slipped right past the security
blanket, and he didn't even know it.
 
Reply With Quote
 
Javier Bezos
Guest
Posts: n/a

 
      11-02-2008


"Jack the Ripper" <> escribió en el mensaje de
noticias:...

>> Another one of these I am so good that I must run on the Internet as
>> user/admin with no protection, wide-open to attack. Little did he know
>> that malware slipped by him in the past, slipped right past the security
>> blanket, and he didn't even know it.


UAC it's useless --too simple for advanced users, too complicated
for average users, too annoying for all. Security cannot rely on
the user decisions, particularly when he is asked systematically
for everything (which means after a couple of months he will
accept or reject systematically everything, ie, UAC becomes
just useless noise). The only real problem is IE, but the
solution for this flaw is easy.

Javier
-----------------------------
http://www.tex-tipografia.com


 
Reply With Quote
 
splosher
Guest
Posts: n/a

 
      11-02-2008

Another one of these I am so good that I must run on the Internet a
user/admin with no protection, wide-open to attack. Little did he kno
that malware slipped by him in the past, slipped right past th
securit
blanket, and he didn't even know it

Eh?! Nothing to do with being " I am so good", i just prefer to use a
operating system at my leisure and not be held-up with each click of m
mouse
And as for malware slipping past, well it doesn't mean anything t
rebuild my PC as i'm a computer technician and i just look at it as goo
practice in order to get an understanding on the operating system i'
using at the time - how else would i learn which SATA RAID drives t
install from my USB pen in order for my drives to work

--
splosher
 
Reply With Quote
 
Jack the Ripper
Guest
Posts: n/a

 
      11-02-2008
Javier Bezos wrote:
>
>
> "Jack the Ripper" <> escribió en el mensaje de
> noticias:...
>
>>> Another one of these I am so good that I must run on the Internet as
>>> user/admin with no protection, wide-open to attack. Little did he
>>> know that malware slipped by him in the past, slipped right past the
>>> security blanket, and he didn't even know it.

>
> UAC it's useless --too simple for advanced users, too complicated
> for average users, too annoying for all. Security cannot rel on
> the user decisions, particularly when he is asked systematically
> for everything (which means after a couple of months he will
> accept or reject systematically everything, ie, UAC becomes
> just useless noise). The only real problem is IE, but the
> solution for this flaw is easy.
>


I am an advanced user starting with Win NT 3.5 to Vista. The problem is
that you don't know the protection that UAC is providing the user who
must run on the Internet with admin rights. With UAC enabled, the
user/admin has two access tokens assigned. One token is for full admin
rights, and the other one is for Standard user rights, the default.

When full admin rights are needed, then the user/admin privileges are
escalated to use the full/admin token at the moment of escalation for
the task, and then the admin/user is returned to using the Standard user
token. Therefore user/admin is 99% of the time a Standard user.

I am not going to run on the Internet with full admin rights, because of
the possibility of attack that the previous versions of the NT based
O/S(s) could never deal with.

It's not bullet proof nothing is bullet proof, but I a not going to have
a loaded gun pointed at my foot while I surf the Internet.


http://technet.microsoft.com/en-us/l.../cc709691.aspx

When an administrator logs on to a computer running Windows Vista, the
user is assigned two separate access tokens. Access tokens, which
contain a user's group membership and authorization and access control
data, are used by Windows® to control what resources and tasks the user
can access. Before Windows Vista, an administrator account received only
one access token, which included data to grant the user access to all
Windows resources. This access control model did not include any
failsafe checks to ensure that users truly wanted to perform a task that
required their administrative access token. As a result, malicious
software could install on users' computers without notifying the users.
(This is sometimes referred to as "silent" installation.)


 
Reply With Quote
 
pooch
Guest
Posts: n/a

 
      11-02-2008

Hey Splosher,

Not to worry there are always some small minded people around. I fo
one agree with doing things how you want, it is after all a PERSONA
computer

And if we all thought like these people we would still be living in th
stoneag

My message Keep on doing what you believe as that is what makes yo
special

Pooc

--
pooch
 
Reply With Quote
 
Jack the Ripper
Guest
Posts: n/a

 
      11-02-2008
splosher wrote:
> Another one of these I am so good that I must run on the Internet as
> user/admin with no protection, wide-open to attack. Little did he know
> that malware slipped by him in the past, slipped right past the
> security
> blanket, and he didn't even know it.
>
> Eh?! Nothing to do with being " I am so good", i just prefer to use an
> operating system at my leisure and not be held-up with each click of my
> mouse.
> And as for malware slipping past, well it doesn't mean anything to
> rebuild my PC as i'm a computer technician and i just look at it as good
> practice in order to get an understanding on the operating system i'm
> using at the time - how else would i learn which SATA RAID drives to
> install from my USB pen in order for my drives to work?
>
>


And I tell you right now. Nothing has stopped me from doing anything on
Vista as admin with UAC enabled -- nothing. But it takes a little savvy
to see what is happening and know the conditions.

However, Vista does protect C:\Program Files and C:\Windows from the
admin even with UAC disabled, if one doesn't know how to come around the
restrictions.

There is also this user account, yes, the same one on XP that allows one
to use full admin rights, still have UAC enabled, but no UAC prompts.

<http://www.computerperformance.co.uk/vista/vista_administrator_activate.htm#Summary_of_Vista_ Administrator_-_Super_User_(Hidden_Account)>

But even that built-in Administrator account doesn't have full rights on
protected folders. However, one can come around that restriction. You'll
have to figure it out.





 
Reply With Quote
 
Jack the Ripper
Guest
Posts: n/a

 
      11-02-2008
pooch wrote:
> Hey Splosher,
>
> Not to worry there are always some small minded people around. I for
> one agree with doing things how you want, it is after all a PERSONAL
> computer.
>
> And if we all thought like these people we would still be living in the
> stoneage
>
> My message Keep on doing what you believe as that is what makes you
> special.
>
> Pooch
>
>


But in the meantime, Linux is doing the same thing:

1) The user on Linux does not run on the Internet as user/admin. They
run as non-user/admin.

2) The user on Linux must give the root/admin user-id/password to
escalate privileges to perform admin tasks.

3) This is why Linux is a better protected O/S, because the user doesn't
run as user/admin wide-open to attack.

4) Linux users are much more savvy than Windows users, as they must take
the time to figure things out in order to use the O/S effectively.


 
Reply With Quote
 
pooch
Guest
Posts: n/a

 
      11-02-2008

Thankyou for your invalable advice I will rember this next time I lo
into linu

Trouble is you are still missing the point and this conversation is a
far as I am concerned finished

Have a nice day
Pooc

--
pooch
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59