UAC by Steve Wiseman - Recommend you Read Vista News Discuss UAC by Steve Wiseman - Recommend you Read in the Windows Vista forums; Windows Vista User Account Control (UAC) I have written in the past about the things I do not like about Vista, but the Windows UAC (User Account Control) prompt is ...

[Snuffy]

Windows Vista User Account Control (UAC)
I have written in the past about the things I do not like about Vista, but the Windows UAC (User Account Control) prompt is not one of them.

You may be surprised about that, since most people will list this as their #1 annoyance. I don't because I know it is only temporary.

Many people mistakenly think that its purpose is to thwart Spyware, Viruses, Etc. I could tell the minute I started using Vista with UAC enabled it had nothing to do with directly (Yes it does indirectly) stopping bad programs from running on your computer.

Its primary purpose was to change the behavior of programmers. It was a way to force them to start writing their applications so they work properly in a limited user environment. I can tell you right now, as a developer I wanted to do everything I could to avoid the UAC prompt from showing when my applications ran. I can bet other developers feel the same. (Side note...we are still working on getting all of our apps to not require admin access in Vista )

This means that during the initial release of Vista the UAC prompt would be popping up for almost every application. Why? Because the majority of applications were written to require administrative access. Over time if applications are updated to the new model...the UAC prompts for the user will be reduced over time.

That is the second phase of this process. Once a majority of applications are updated, the number of times the UAC prompt will be shown will be very small. In this second phase is where the benefit is finally reaches the user.

When we are in that environment (Where most applications have been updated to handle a limited user account)...The user will expect that 99% of the applications will not require administrative access. If they do see the prompt, they will think long and hard before clicking that continue prompt.

Until then we will be barraged by prompts while working in Vista. I wouldn't have it any other way. I would much rather be the one to make the decision to take an administrative action, instead of an unknown software vendor making that decision for me.

There is an excellent article over at Microsoft that describes what I am talking about in detail. It is worth the read:

The long term impact of user account control = http://www.microsoft.com/technet/tec...SecurityWatch/


Posted By: Steve Wiseman on Friday, September 14, 2007



http://www.intelliadmin.com/downloads.htm

[JoshW02@hotmail.co.uk]

I know of a prog which will allow IE "protected mode" while turning off the rest of UAC surly this is best and MS should add it to SP1? I would guess IE "protected mode" would be the main + of UAC as most user know what they are doing with regards to system settings?

[Vistanoob]

Those facts put a whole new perspective on UAC. I never realised that it would have that kind of impact on programming. It's very good news. I have mine on full and I agree, I would rather make the administrative decisions myself.
As I've said before, the prompts don't bug me. It takes only an extra second or two,

[felix8406]

The one time for sure where UAC can be annoyed is during initial PC setup where user is installing and updating software. That's the only time I use the Administrator Account with full privilege, as I could be asked permission for elevation many times in just a few minutes. Once the PC is setup, I disable the administrator account and begin using the standard account.

[Vistanoob]

Yes I can see how it could be annoying under those circumstances and that's an excellent idea.