DON'T DISABLE the UAC or you'll loose file and registry virtualiza

[Guest]

if you disable the UAC you're stupid because the first virus-trojan you get
will be able to destroy your computer just like happens in Windows XP.
if you disable the UAC, you'll loose also the file and
registry virtualization needed to work bad designed applications as standard
user.
PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
Vista as a Standard user

 

[Mike Hall - MS MVP Windows Shell/User]

I have to wonder what your purpose would be in life were it not for UAC..

 

[Kurt Harriger]

if you disable the UAC you're stupid because the first virus-trojan you
get
will be able to destroy your computer just like happens in Windows XP.
if you disable the UAC, you'll loose also the file and
registry virtualization needed to work bad designed applications as
standard
user.
PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
Vista as a Standard user

I also disabled file/registry virtualization! Bud did reenable UAC because
IE protected mode didn't work, otherwise I woudl have left it disabled.

- Kurt

 

[Gerry Hickman]

Hi Mik,

This is incorrect; it would only apply if you were running as an
Administrator. If you know something about computers, and you _were_
running as an Administrator, you DESERVE to be hacked.

There's also a good reason to get rid of the file and registry
virtualization; can you imagine the nightmare of trying to troubleshoot
a program when none of it's files and registry keys are in the right
places, and how will you cope with MSI installs when the profiles no
longer exist on the local machine? This will lead to a registry mess the
likes of which has never been seen before! If you know all about
NTUSER.DAT and how installers enum "User Shell Folders" you'll probably
be OK, otherwise...

 

[Mike C.]

I have yet to experience any problems running my machine as an Administrator
with UAC disabled. Of course, I've never had any problems in previous
versions of Windows either. I think the last time I got a virus
was.....maybe 8 years ago?

I have seen IIS5 get smacked around a bit but that was a quick fix (switched
to apache!).

Keep in mind there are people that do know how to use computers.

 

[Jimmy Brush]

Hello,

what is the big deal about this
UAC for true network admins?

Immediate benefits for admins:

- Programs that you run that don't need admin privs, don't get it. Do you
really want notepad running around with privileges to format all of the hard
drives in your entire domain?

- Programs that NEED admin privs will automatically ask you for this
privilege - this means you now know exactly which programs you are running
that use admin privs, and which ones don't.

- You can easily force a program to use admin privs that doesn't ask for it
by right-clicking and clicking Run As Administrator (for those times when
you want to use notepad to modify system files, or format hard drives)

There's really no sense in allowing all programs you run to have complete
control of your domain when they don't need such power. You are still a
full-fledged administrator; but Windows now realizes that programs don't
need all of your rights and privileges all of the time. YOU now control how
programs can use them.

Benefits for the users you administer:

- The compatability features of UAC (virtualization for example) will help
applications that assume they are an administrator to run properly under
their standard user account.

- When users attempt to do an action that requires administrator privileges
in a Vista-designed application, you can set up their workstation so that it
tells the user this and asks for an admin login, instead of just "access
denied". This should make it easier for your users to understand why they
can't do something (it needs admin approval) and easier for you to approve
the action (you can just walk to the machine and authenticate - the prompt
is up and waiting for you).

Long-term benefits of UAC:

- Programs will be re-designed so that they will work correctly when running
as a standard user, because if they don't, they won't work correctly in
Vista, even under an administrator account. This means if your company has
standard users running as true standard users, Vista-designed software
should "just work" in this environment, instead of you having to hope that
the application was properly designed.

This should result in better designed software that follows Microsoft's
recommendations, which should end up creating an environment that is easier
to administer and much more secure.