|
 |  |  |  |  |  |  |
| Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks. |
| |||||||
 |
| |
01-02-2009
| #1 (permalink) |
| | Re: Cannot run "Contig" (defrag tool) as Admin on Vista "Sam Hobbs" <Gateremovethis@xxxxxx> wrote in message news:uftp94PbJHA.6036@xxxxxx Quote: > You seem to be saying that it is necessary to use "run as administrator" > eventhough the account being used is an Administrator. account. The administrative level token is available through a consent prompt. This use is similar to that of any other limited privilege account except that the other accounts prompt for credentials rather than just the consent to use those already available via Vista's Admin Approval Mode. Still, it is not recommended to use the administrator account for everyday usage because Vista's implementation of UAC's AAM is not a security boundary. |
My System Specs |
|
01-02-2009
| #2 (permalink) |
| | Re: Cannot run "Contig" (defrag tool) as Admin on Vista "FromTheRafters" <erratic@xxxxxx> wrote in message news:OPVOJGUbJHA.4072@xxxxxx Quote: > > This use is similar to that of any other limited > privilege account versions of Windows. I was not aware of that before I saw this thread earlier today. Quote: > Still, it is not recommended to use the administrator account > for everyday usage because Vista's implementation of UAC's > AAM is not a security boundary. period, end of advice. Much of Vista security attempts to reduce the vulnerabilities caused by violation of that excellent policy. I support use of limited accounts for everyday usage and have complied with that advice since my first use of NT, eventhough I am a developer and the only user of my systems. This Vista security stuff evidently is the result of Microsoft not emphasizing and supporting use of limited accounts in the past. |
| My System Specs |
|
01-02-2009
| #3 (permalink) |
| | Re: Cannot run "Contig" (defrag tool) as Admin on Vista http://technet.microsoft.com/en-us/m...07.06.uac.aspx "Sam Hobbs" <Gateremovethis@xxxxxx> wrote in message news:uvSo%23oUbJHA.1704@xxxxxx Quote: > > "FromTheRafters" <erratic@xxxxxx> wrote in message > news:OPVOJGUbJHA.4072@xxxxxx Quote: >> >> This use is similar to that of any other limited >> privilege account > It is substantially different from the way security works in previous > versions of Windows. I was not aware of that before I saw this thread > earlier today. > Quote: >> Still, it is not recommended to use the administrator account >> for everyday usage because Vista's implementation of UAC's >> AAM is not a security boundary. > It is not recommended to use the administrator account for everyday usage; > period, end of advice. > > Much of Vista security attempts to reduce the vulnerabilities caused by > violation of that excellent policy. I support use of limited accounts for > everyday usage and have complied with that advice since my first use of > NT, eventhough I am a developer and the only user of my systems. This > Vista security stuff evidently is the result of Microsoft not emphasizing > and supporting use of limited accounts in the past. |
| My System Specs |
|
01-02-2009
| #4 (permalink) |
| | Re: Cannot run "Contig" (defrag tool) as Admin on Vista "Sam Hobbs" <Gateremovethis@xxxxxx> wrote in message news:uvSo%23oUbJHA.1704@xxxxxx Quote: > > "FromTheRafters" <erratic@xxxxxx> wrote in message > news:OPVOJGUbJHA.4072@xxxxxx Quote: >> >> This use is similar to that of any other limited >> privilege account > It is substantially different from the way security works in previous > versions of Windows. I was not aware of that before I saw this thread > earlier today. > Quote: >> Still, it is not recommended to use the administrator account >> for everyday usage because Vista's implementation of UAC's >> AAM is not a security boundary. > It is not recommended to use the administrator account for everyday usage; > period, end of advice. But Vista installs and hides and disables that account and gives you a limited account that you think is Administrator -but really isn't. That way most people won't actually be using the full admin account even though they think they are. Still, one shouldn't be fooled into thinking it is OK to use this 'not really admin' account as an everyday account because it may be possible to get around the consent prompt and make it act more like the real adimin account. Quote: > Much of Vista security attempts to reduce the vulnerabilities caused by > violation of that excellent policy. full admin. Vista's default is different while allowing the user to believe they are the only and highest privileged account. Quote: > I support use of limited accounts for everyday usage and have complied > with that advice since my first use of NT, eventhough I am a developer and > the only user of my systems. This Vista security stuff evidently is the > result of Microsoft not emphasizing and supporting use of limited accounts > in the past. even less so. |
| My System Specs |
|
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Forum | |||
| Defrag increases "used space" as reported by command-line defrag - | Vista performance & maintenance | |||
| No "accounts" name in the "Tool" drop down menu. | Vista mail | |||
| Cannot run "Contig" (defrag tool) as Admin on Vista | Vista security | |||
| "O&O Defrag" compared to "DiskKeeper" - Opinions? | Vista performance & maintenance | |||
| Defrag, the annoying Vista "feature" | Vista General | |||
