Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - DON'T DISABLE the UAC or you'll loose file and registry virtualiza

Reply
 
Old 11-25-2006   #1 (permalink)
mik


 
 

DON'T DISABLE the UAC or you'll loose file and registry virtualiza

if you disable the UAC you're stupid because the first virus-trojan you get
will be able to destroy your computer just like happens in Windows XP.
if you disable the UAC, you'll loose also the file and
registry virtualization needed to work bad designed applications as standard
user.
PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
Vista as a Standard user

My System SpecsSystem Spec
Old 11-25-2006   #2 (permalink)
Mike Hall - MS MVP Windows Shell/User


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtualiza

I have to wonder what your purpose would be in life were it not for UAC..


"mik" <mik@discussions.microsoft.com> wrote in message
news:9E821E99-2DFB-45EE-8A1B-842E7B7B1AD7@microsoft.com...
> if you disable the UAC you're stupid because the first virus-trojan you
> get
> will be able to destroy your computer just like happens in Windows XP.
> if you disable the UAC, you'll loose also the file and
> registry virtualization needed to work bad designed applications as
> standard
> user.
> PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
> Vista as a Standard user


My System SpecsSystem Spec
Old 11-25-2006   #3 (permalink)
Kurt Harriger


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtualiza


"mik" <mik@discussions.microsoft.com> wrote in message
news:9E821E99-2DFB-45EE-8A1B-842E7B7B1AD7@microsoft.com...
> if you disable the UAC you're stupid because the first virus-trojan you
> get
> will be able to destroy your computer just like happens in Windows XP.
> if you disable the UAC, you'll loose also the file and
> registry virtualization needed to work bad designed applications as
> standard
> user.
> PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
> Vista as a Standard user


I also disabled file/registry virtualization! Bud did reenable UAC because
IE protected mode didn't work, otherwise I woudl have left it disabled.

- Kurt

My System SpecsSystem Spec
Old 11-26-2006   #4 (permalink)
Gerry Hickman


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtualiza

Hi Mik,

This is incorrect; it would only apply if you were running as an
Administrator. If you know something about computers, and you _were_
running as an Administrator, you DESERVE to be hacked.

There's also a good reason to get rid of the file and registry
virtualization; can you imagine the nightmare of trying to troubleshoot
a program when none of it's files and registry keys are in the right
places, and how will you cope with MSI installs when the profiles no
longer exist on the local machine? This will lead to a registry mess the
likes of which has never been seen before! If you know all about
NTUSER.DAT and how installers enum "User Shell Folders" you'll probably
be OK, otherwise...

mik wrote:
> if you disable the UAC you're stupid because the first virus-trojan you get
> will be able to destroy your computer just like happens in Windows XP.
> if you disable the UAC, you'll loose also the file and
> registry virtualization needed to work bad designed applications as standard
> user.
> PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
> Vista as a Standard user



--
Gerry Hickman (London UK)
My System SpecsSystem Spec
Old 11-28-2006   #5 (permalink)
Mike C.


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtualiza

I have yet to experience any problems running my machine as an Administrator
with UAC disabled. Of course, I've never had any problems in previous
versions of Windows either. I think the last time I got a virus
was.....maybe 8 years ago?

I have seen IIS5 get smacked around a bit but that was a quick fix (switched
to apache!).

Keep in mind there are people that do know how to use computers.



"mik" <mik@discussions.microsoft.com> wrote in message
news:9E821E99-2DFB-45EE-8A1B-842E7B7B1AD7@microsoft.com...
> if you disable the UAC you're stupid because the first virus-trojan you
> get
> will be able to destroy your computer just like happens in Windows XP.
> if you disable the UAC, you'll loose also the file and
> registry virtualization needed to work bad designed applications as
> standard
> user.
> PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
> Vista as a Standard user


My System SpecsSystem Spec
Old 12-05-2006   #6 (permalink)
mik


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtua



"Gerry Hickman" wrote:

> There's also a good reason to get rid of the file and registry
> virtualization; can you imagine the nightmare of trying to troubleshoot
> a program when none of it's files and registry keys are in the right
> places,


Everything is transparent for the applications, so you're ignorant. Study
how file and registry virtualization works!

My System SpecsSystem Spec
Old 12-07-2006   #7 (permalink)
Dionte


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtua

Wow, Interesting replies, the stupid and ignorant comments, come on everyone,
we are all working the systems differently.

I must admit I have not too fond of the UAC but based on what I have been
reading you all of your posts I think I'd better get to it. Now, Microsoft
always promotes the priv vs. non-priv accounts and how you should operate as
an administrator, introduced the "run as" and to be quit honest as an
administrator of various networks, its a royal pain. SAFER yes, but too much
of a headache.

I personally have disabled UAC because there is no way I could continue to
see that pop up as if I wasn't an administratore. I think its geared more for
home users. BUT just in case, I'll read up.

Just as others, I too have not encountered a virus in YEARS. BUT if I did, I
wouldnt care much, it's a 20 min. re-image job. None of my workers keep valid
data locally, doesn't make good sense.

I have also just installed Vista only recently and have had little problems
installing applications of various kinds. With all of that being said, please
tell me the more educated Vista experts here, what is the big deal about this
UAC for true network admins?

"Mike C." wrote:

> I have yet to experience any problems running my machine as an Administrator
> with UAC disabled. Of course, I've never had any problems in previous
> versions of Windows either. I think the last time I got a virus
> was.....maybe 8 years ago?
>
> I have seen IIS5 get smacked around a bit but that was a quick fix (switched
> to apache!).
>
> Keep in mind there are people that do know how to use computers.
>
>
>
> "mik" <mik@discussions.microsoft.com> wrote in message
> news:9E821E99-2DFB-45EE-8A1B-842E7B7B1AD7@microsoft.com...
> > if you disable the UAC you're stupid because the first virus-trojan you
> > get
> > will be able to destroy your computer just like happens in Windows XP.
> > if you disable the UAC, you'll loose also the file and
> > registry virtualization needed to work bad designed applications as
> > standard
> > user.
> > PLEASE don't be stupid, don't disable the UAC and be happy to run Windows
> > Vista as a Standard user

>
>

My System SpecsSystem Spec
Old 12-07-2006   #8 (permalink)
Jimmy Brush


 
 

Re: DON'T DISABLE the UAC or you'll loose file and registry virtua

Hello,

<snip>
> what is the big deal about this
> UAC for true network admins?


Immediate benefits for admins:

- Programs that you run that don't need admin privs, don't get it. Do you
really want notepad running around with privileges to format all of the hard
drives in your entire domain?

- Programs that NEED admin privs will automatically ask you for this
privilege - this means you now know exactly which programs you are running
that use admin privs, and which ones don't.

- You can easily force a program to use admin privs that doesn't ask for it
by right-clicking and clicking Run As Administrator (for those times when
you want to use notepad to modify system files, or format hard drives)

There's really no sense in allowing all programs you run to have complete
control of your domain when they don't need such power. You are still a
full-fledged administrator; but Windows now realizes that programs don't
need all of your rights and privileges all of the time. YOU now control how
programs can use them.

Benefits for the users you administer:

- The compatability features of UAC (virtualization for example) will help
applications that assume they are an administrator to run properly under
their standard user account.

- When users attempt to do an action that requires administrator privileges
in a Vista-designed application, you can set up their workstation so that it
tells the user this and asks for an admin login, instead of just "access
denied". This should make it easier for your users to understand why they
can't do something (it needs admin approval) and easier for you to approve
the action (you can just walk to the machine and authenticate - the prompt
is up and waiting for you).

Long-term benefits of UAC:

- Programs will be re-designed so that they will work correctly when running
as a standard user, because if they don't, they won't work correctly in
Vista, even under an administrator account. This means if your company has
standard users running as true standard users, Vista-designed software
should "just work" in this environment, instead of you having to hope that
the application was properly designed.

This should result in better designed software that follows Microsoft's
recommendations, which should end up creating an environment that is easier
to administer and much more secure.


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
disable file audit? Vista file management
Disable/re-enable or hide/unhide Start Menu in Windows Vista via registry, using VB6 General Discussion
UAC file & registry virtualiztation Vista security
Can't Disable File Sharing Vista networking & sharing
Disable zip file support Vista file management


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46