UAC Execptions?

[Wes]

I have two programs that all of the sudden have the UAC pop up every time
the program is executed. Never used to happen. I tried the run as
administrator setting but no change. Don't really want to disable UAC. Can
I add the programs to some type of exception list ? Thanks....
Board: NF-MCP61
Bus Clock: 201 megahertz
BIOS: Phoenix Technologies, LTD 6.00 PG 05/28/2007
Slot 'A0' has 1024 MB
Slot 'A1' has 1024 MB
2.20 gigahertz AMD Athlon 64 X2 Dual Core
256 kilobyte primary memory cache
1024 kilobyte secondary memory cache
NVIDIA GeForce 6100 nForce 405 [Display adapter]
WDE LCM-19v1 [Monitor] (19.1"vis, July 2005)
Windows Vista Home Premium (build 6000)
660.14 Gigabytes Usable Hard Drive Capacity
489.93 Gigabytes Hard Drive Free Space

 

[bamsan]

My sugestion sill, turn off uac. Since it is a new stuff, majority of
program wasn't written with uac in mind. Also I don't see any strong reason
to use uac

 

[Rick Rogers]

Hi Wes,

No, there is no exception list (if there was, it would immediately be
targeted by malware). If they are prompting suddenly, and didn't previously,
then something has changed about the system or the program. Have you done
any updating (either the program or windows) or changed permissions? A UAC
prompt indicates the program is trying to write to or change a file in a
protected system folder instead of the programs' virtual appfolder.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

 

[Jon]

I have two programs that all of the sudden have the UAC pop up every time
the program is executed. Never used to happen. I tried the run as
administrator setting but no change. Don't really want to disable UAC. Can
I add the programs to some type of exception list ? Thanks....

Possibly a case of the attempted solution being the cause of the problem.

Try unchecking any 'Run as administrator' option that you checked
previously.

 

[Adam Leinss]

Hi Wes,

No, there is no exception list (if there was, it would immediately
be targeted by malware). If they are prompting suddenly, and
didn't previously, then something has changed about the system or
the program. Have you done any updating (either the program or
windows) or changed permissions? A UAC prompt indicates the
program is trying to write to or change a file in a protected
system folder instead of the programs' virtual appfolder.

Is there a reason Microsoft cannot do UAC exceptions based on hash
rules?

If the executable changes (updated, infection, etc), the user gets a
prompt to reauthorize the program. This should present a red flag to
the end user.

The system is some what broken the way it is. This encourages people
to turn UAC off which is not the desired method that Microsoft would
suggest.

Adam

 

[Adam Albright]

Is there a reason Microsoft cannot do UAC exceptions based on hash
rules?

Of course not. UAC while good in concept is poor in implementation. It
also is badly broken. As I've said before Vista is so dumb after I
made changes in policy settings following advice on a Microsoft web
page to the letter Vista at the same time now shows that UAC is on if
you look in Control Panel and also nags to TURN IT ON, meaning it also
thinks it is off with an annoying pop up in the lower right corner of
the desktop.

Microsoft should hire some software engineers that know what they're
doing. Don't hold your breath waiting.

If the executable changes (updated, infection, etc), the user gets a
prompt to reauthorize the program. This should present a red flag to
the end user.

Yes, a safe and often used method employed by software based firewall
applications.

The system is some what broken the way it is. This encourages people
to turn UAC off which is not the desired method that Microsoft would
suggest.

Exactly. Now watch the fanboy mob squeal it isn't so and say we don't
know what we're talking about.

 

[John]

I had the same issue. All of a sudden a previously functioning program
mysteriously started being blocked by UAC. And of course it was listed as
being blocked. I unchecked the Run As Admin and the weird UAC popup
stopped. Another Run as Admin quirk with word 2000. Click on a .doc file and
Explorer says can't find the file, check the path. Once I removed the Run as
Admin from winword.exe, all worked fine. I don't fully understand what Run
as Admin does (or is supposed to do), but it does weird things from what I
have experienced and read here.

 

[Rick Rogers]

Hi,

The solution is for software to run where it should, in the virtual folder
created for it in the user profile. Software will catch up eventually to the
new requirements.

If there were some method of creating exceptions, you can rest assured that
malware writers would keep at it until they found a workaround. I would have
to side with Microsoft on this one on locking it down without exception,
there is just too many risks in allowing any sort of avenue for exception.
In truth, this is not a new concept, as any long time linux user can tell
you. Certain actions simply will require root privilege, and that it
shouldn't be invoked without the user's consent.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

 

[Rick Rogers]

And easily infected by malware that no longer needs to get your permission
to install itself on your system.

Weak security was fine in the early mass computing days (Win's 3.x to 98),
but by the time XP came out (2001), it was well proven that users will get
themselves infected without proper protection. Recommending that it be
circumvented is irresponsible and doing the masses of users a great
disservice.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

 

[Wes]

Thanks for all your input. Just kind of strange it started out of the blue...

 

[Jupiter Jones [MVP]]

"And have 10 of my my systems running in this fashion."
Are you fairly experienced with computers?
Are you comfortable with your ability to keep your computer safe?
How about everyone that may take your suggestion without realizing
there is a possible downside?
Are you aware of their individual capabilities that taking such advice
needs no further information about the lower security they now have?

"Overkill is for noobs"
Perhaps, but disabling security is not good "noobs".

You did not clarify and many "noobs" may take your suggestion not
realizing you have had them lower their security greatly.
Your 5 year old daughters is irrelevant since it seems you maintain
her computer.

"...they do "not" replace..."
No one suggested any of it did.

Security is also not achieved by suggesting to everyone they disable
security without knowing a little more of the specific situation or at
least providing appropriate warning.
Rick is aware of the pitfalls and he did "know before responding".
But other readers may not know.

Security needs to be tailored for each situation.
anything that lowers security needs to be measured carefully with the
user being aware of the benefits and especially consequences.
Simply turning off security for the benefit with no regard for
possible consequences is not an option.

 

[dennis@home]

Security is not acchived by adding unnesasary steps to routine actions.
Overkill is for noobs who dont know how to properly use their rigs.
Regardless of the overzelous security in Vista they do "not" replace
Antivirus, Firewwall and spware protection that should already be in
place before setting your system as described. I have used these
settings since first setting Vista up back in November 2006. And have 10
of my my systems running in this fashion. Including my 5 year old
daughters computer and she has never been infected or botted ever.
All systems run fantastic.

Security is always intrusive.
If it isn't it isn't security.

It should also be layered so multiple things have to fail before a problem
becomes a disaster.

What you suggest removes a layer of security just to avoid the odd prompt.
If its more than the odd prompt then you are not an average user and if you
are not a developer there is probably something wrong with what you do.

 

[Jon]

Security is not acchived by adding unnesasary steps to routine actions.
Overkill is for noobs who dont know how to properly use their rigs.
Regardless of the overzelous security in Vista they do "not" replace
Antivirus, Firewwall and spware protection that should already be in
place before setting your system as described. I have used these
settings since first setting Vista up back in November 2006. And have 10
of my my systems running in this fashion. Including my 5 year old
daughters computer and she has never been infected or botted ever.
All systems run fantastic.

Please know before responding.

The value of UAC is that it would also flag up any attempted changes to your
'Antivirus, Firewall and spyware protection'. So it's an additional security
measure, which when mastered can also be used to your advantage.

 

[Jupiter Jones [MVP]]

"UAC. Needs more work"
Possibly and few if any have ever denied that.

"90% of the users in the world will do this."
Please cite the source for this statistic.

Even if true, that means 10% have the advantage of the information
offered by UAC.
the 10% that otherwise could have become a casualty without it.
10% may seem small, but not everyone will discount a 10% raise in pay
as "useless".
Very few if any safety/security implementations have 100% and most
chisel away at a small % adding to the strength of the layered
protection.
Those expecting UAC to be the end all of problems will be disappointed
because NOTHING will ever accomplish that.
Instead of chiseling away at items that add protection to a small %,
educate the others so more may benefit.

"When I use the term average user I am referring to everyone here."
Are you sure the participants of these newsgroups represent average
users.
I am sure the average user has no idea these newsgroups exist but your
source could prove me incorrect.

 

[Wes]

Well, Uninstalled and reinstalled the programs and the problem went away. I
did change the program install path form my E: drive to C: Not sure exactly
what the problem was but at least it now works w/o the prompt every
time..Thanks to all again...