Vista UAC.

[Guest]

The Vista UAC reminds me of firewall software. It is the same principal. So
why wasn’t it designed around leading firewall software? When a new program
attempts to access the internet the firewall asks if it should block it,
allow it this time or always allow it.

It is very annoying having to click ‘allow’ to run software and some
programs every time you open them. How about having an always allow option
like firewalls have. Imagine if every time an application attempted to
access the internet the firewall asked for permission to do so? It is the
same principal.

A UAC application for creating rules so you can edit the settings, for
example so that certain programs can run with administrator privileges
without asking every time they are started would be good etc.

Also Vista blocks some programs at start up that I want to run. I have to
manually allow them to run, where is the “always allow this to run at start
up†option?

Half the reason Vista is unpopular and customers are unhappy is because it
is an annoying OS.


----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.

http://windowshelp.microsoft.com/co...7df&dg=microsoft.public.windows.vista.general

 

[Bistey Csaba]

The Vista UAC reminds me of firewall software. It is the same principal. So
why wasn’t it designed around leading firewall software? When a new program
attempts to access the internet the firewall asks if it should block it,
allow it this time or always allow it.

Because it is a different thing, UAC is much more like Unix sudo command
on Vista even Administrator does not have Administrator priviledges when
UAC on, so if some program want to do something that needs Administrator
priviledges comes UAC and asks you if you want to Allow it or deny it
while Firewalls control incomming/outgoing network traffic.

It is very annoying having to click ‘allow’ to run software and some
programs every time you open them. How about having an always allow option
like firewalls have. Imagine if every time an application attempted to
access the internet the firewall asked for permission to do so? It is the
same principal.

A UAC application for creating rules so you can edit the settings, for
example so that certain programs can run with administrator privileges
without asking every time they are started would be good etc.

Right click on application shortcut->Properties->Advanced->Run as
administrator
After that UAC will not warn you every time (for that application).

 

[Guest]

I know there not exactly the same, I was speaking figuratively, What I am
trying to get across is that firewall software asks once, Vista asks every
time. I think this isn’t necessary. And that perhaps application features
and design for UAC could be based on leading firewall software.

 

[Richard Urban]

One of the tricks of malware is to duplicate a process that is known to run
on the majority of computers. So, you now get something that manages to
replace one of these programs. In the past you somehow managed to give this
program blanket approval to start - bypassing UAC. Guess what is going to
happen when this malware attempts to run? There will be no prompt and you
will be compromised.

No matter what type of protection you have on your computer (antivirus and
anti malware), if you go to a website and it contains some sort of new
malware, and you get a drive-by download without your knowledge, the program
will activate and run.

UAC is just another layer in the defense mechanism of Vista. I, for one,
will leave it on - always!



--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

 

[John Barnes]

While I agree with leaving it on, I disagree about the duplication. Any
decently programmed detection program can tell if there have been changes to
the executable and request reauthorization due to the change.

 

[Sooner Al [MVP]]

One of the tricks of malware is to duplicate a process that is known to
run on the majority of computers. So, you now get something that manages
to replace one of these programs. In the past you somehow managed to give
this program blanket approval to start - bypassing UAC. Guess what is
going to happen when this malware attempts to run? There will be no prompt
and you will be compromised.

No matter what type of protection you have on your computer (antivirus and
anti malware), if you go to a website and it contains some sort of new
malware, and you get a drive-by download without your knowledge, the
program will activate and run.

UAC is just another layer in the defense mechanism of Vista. I, for one,
will leave it on - always!



--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

I might add that I also leave UAC enabled all the time and run as a
"Standard" user. If I need to run as an admin user I either logon as that
user or use "Run as administrator". I have a sister-in-law that does the
same on her Vista Home Basic laptop that I setup for her. She only logs on
as an administrator or uses run as if she has to. Normally she runs as a
standard user.

FWIW, I have my wife setup as a "Limited" user on her XP Pro desktop. If she
needs admin help I logon to her PC using Remote Desktop using her
credentials and use run as or I sneaker net over to her PC and logon with an
administrator account.

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

 

[Saucy]

One of the tricks of malware is to duplicate a process that is known to
run on the majority of computers. So, you now get something that manages
to replace one of these programs. In the past you somehow managed to give
this program blanket approval to start - bypassing UAC. Guess what is
going to happen when this malware attempts to run? There will be no prompt
and you will be compromised.

No matter what type of protection you have on your computer (antivirus and
anti malware), if you go to a website and it contains some sort of new
malware, and you get a drive-by download without your knowledge, the
program will activate and run.

UAC is just another layer in the defense mechanism of Vista. I, for one,
will leave it on - always!

Always? Hnh.

Saucy

 

[Kerry Brown]

The Vista UAC reminds me of firewall software. It is the same principal.
So
why wasn’t it designed around leading firewall software? When a new
program
attempts to access the internet the firewall asks if it should block it,
allow it this time or always allow it.

It is very annoying having to click ‘allow’ to run software and some
programs every time you open them. How about having an always allow
option
like firewalls have. Imagine if every time an application attempted to
access the internet the firewall asked for permission to do so? It is the
same principal.

A UAC application for creating rules so you can edit the settings, for
example so that certain programs can run with administrator privileges
without asking every time they are started would be good etc.

Also Vista blocks some programs at start up that I want to run. I have to
manually allow them to run, where is the “always allow this to run at
start
up†option?

Half the reason Vista is unpopular and customers are unhappy is because it
is an annoying OS.

UAC is not doing what you think it is. It is not asking you if the program
is safe to run. It is asking you if you started the program. Windows has no
way of knowing if you, or a process running on the computer initiated an
action. When something is happening that may cause a system wide change UAC
interrupts the process and asks you if you started it. UAC makes no attempt
to figure out if it's a good or bad program. It only wants to know if you
started it.

 

[mayayana]

I know there not exactly the same, I was speaking figuratively, What I am
trying to get across is that firewall software asks once, Vista asks every
time. I think this isnâ?Tt necessary. And that perhaps application features
and design for UAC could be based on leading firewall software.

It's not really designed to protect you. The assumption
is that you're a corporate employee and that the only need
of system access on your PC is for the IT dept. person who
stops by occasionally to tweak your PC. The security is
*primarily* protecting your PC *from* you, not protecting
it *for* you.

The problem with that, of course, is that hundreds of
millions of people are using Windows in a home or small office
setup. For them Vista has expanded Microsoft's role into that
of IT dept. As it turns out, the current focus on better
security dovetails with Microsoft's new focus on making
money via DRM'ed media and on-PC advertising. Once MS
gets people used to having limited rights on their own PCs,
and their customers accept that Microsoft is really the
system administrator on their PC, the way is clear to turn
Windows into interactive TV.

Lots of people will bristle at that explanation and claim
that it's irresponsible to suggest running as admin, etc.
But isn't it odd that they didn't feel that way a few months
ago while using 9x, 2000, or XP?

 

[David]

Guys,

Try www.syfort.com