Thread: Editing UAC
View Single Post
Old 02-22-2007   #7 (permalink)
DevilsPGD


 
 

Re: Editing UAC

In message <F1B76247-DC53-47F8-A143-9E19FF9EAD61@microsoft.com> Jesper
<Jesper@discussions.microsoft.com> wrote:

>> >I'm trying to disable UAC on certain folders that I access frequently

>(inside
>> >Program Files), so I don't have to confirm the action every time I add new
>> >files into my web page folder or any programs I might be working on.

>>
>> Check the NTFS permissions, explicitly include yourself, rather then
>> just the "Administrators" group.

>
>That will work, but making wholesale changes to ACLs on OS binaries is
>generally not a very good idea. See KB 885409
>(http://support.microsoft.com/kb/885409) for more details. I've seen
>customers destroy tens of thousands of systems that way.
>
>Pin-point ACL changes on specific files is usually fine though, as long as
>you realize the risk you are creating by doing so.
>
>Good idea in general.


True -- If you're not really careful this could open a hole in UAC too.

I'm just pointing out that there is nothing special about the "Program
Files" directory which kicks off UAC, but rather, simply the elevation
required to write as a member of the "Administrators" group.
--
Insert something clever here.
My System SpecsSystem Spec