Lester Stiefel wrote:
> Brian Komar wrote:
>> On Wed, 09 May 2007 00:29:41 -0400, Lester Stiefel wrote:
>>
>>> Just installed Windows Vista. Upon trying to use windows update
>>> and Microsoft update, I get a 0x** error, claiming I do not have
>>> admin rights. I have disabled User account protection, and am
>>> proceeding to down load these manually.
>>>
>>> Is this your answer to security. Keep this up and I'll defect to
>>> Linux. At least I know what to expect there!!
>>
>> So you run as root on Linux???
>> You would get the same behavior
>> Brian
>
> In no way. In linux you are required to use a totally different user
> account,
No. You can log in as root all the time - there is no requirement to
ever use or create a normal user account.
> which cannot be accessed from a standard users account, aside
> from the traditional log out of standard user, and log on to
> administrative (root) to perform this function.
Err... the normal, traditional, way to do things is to use sudo. You
should *never* log in as root on a Linux box (unless you're
exceptionally lazy). It took Microsoft almost 30 years to copy sudo but
it seems they got there in the end. The result is UAC.
> In my case the UAC said I had Administrative rights, when the account
> was actually a 'standard user' type. This is an apparent glitch In uac.
> I would prefer that the admin rights not be able to be accessed from the
> standard user account.
Then set it in your group policy.
> It was only after I created a second account, and made it the admin
> (root) type, that I had access to update service. Check that out.
> Normally the user, if they are the only one on the PC running VISTA,
> should NOT have to use dual accounts... All kinds of leaks and errors
> can result from the access through standard UI account.
I think you need a better understanding of how Windows works internally,
and how windows messages are processed in Vista, to make that assessment.
Alun Harford
|