User Account Control Vista Security Discuss User Account Control in the Windows Vista forums; The Name Changes, But Goal Remains the Same What is User Account Control (UAC)? User Account Control (UAC) has gone through several names until settling on its final title. Originally ...

[ultralexy]

The Name Changes, But Goal Remains the Same
What is User Account Control (UAC)?

User Account Control (UAC) has gone through several names until settling on its final title. Originally known as Limited User Accounts and then User Account Protection, User Account Control is a core security feature in Vista. It is intended to be the progression of Windows Administrator privileges and a huge hike up in their overall concept of desktop security, as we know it.

The concept of user permissions has been around since Windows NT, but most applications fail to run in a non-administrator capacity. The UAC aims to change all that, making standard mode the default, and an easy option for everyone to utilize.

User Account Control will run your computer in standard user mode allowing you to do most common actions, but require permission to install applications or make changes to your system. Running your system in standard user mode greatly decreases the probabilities of security breaches to you computer. When you want to install a program, or make changes to the settings, you’ll be required to enter the Administrator’s password.

So when you go to install a program on your system, the Consent Dialog will pop up. The Consent Dialog box tells you when you’re going to do something that requires Administrator privileges. You’ll have to grant or deny permission at this point. If this box appears unexpectedly, it may signal a hackers attempt to access your system or an installation of spyware.

For one, this is a good step towards preventing unwanted malware being installed on your computer without the end user knowing it, however, I’m interested to see how difficult it may make using your system in practical ways. I have high hopes that Microsoft can tweak the final version of UAC to make both worlds mesh nicely.

And while the UAC’s intentions are good, Microsoft warns it may take users awhile adjust to this new protocol and to fully appreciate its long-term benefits. MSDN likens the experience to seatbelts in automobiles. Sounds like a major inconvenience to sysadmins, and a confusing concept for support techs to explain to novices. Should prove interesting to see how the general public receives this “feature”.

[ninikins]

ok...I can already sort of feel the annoyance with consent boxes popping up rising as we speak ewwwww. Will there be a way to sort of ermmm 'switch them off?

[sopaman]

From what I've heard you will be able to switch if off in some cases, if you are running as an admin user, but not in all cases.

Users will eventually get used to it - and anyway, in a corporate environment, what are users doing installing software anyway

[ninikins]

true, didnt think of that. I just hate anything that pops up in general though

[MigXp]

I would like to know how to shut the security off in order to install software, and I notice that if you had software that has self updater its not good and will not be allowed to update within the running program.

[Oktober Maniak]

I have only begun to use Vista myself, although while searching through some forums I found instructions on how to change various security settings thorughout the system to prevent most of the pop-ups. I printed the posting, however it was only some babble that actually printed. I've been searching since for the posting place and post and will repost here when I find it.

Oktober

[Znod]

It was Vista Babble that printed.

[Znod]

It has been annoying to me on both 5384 and 5472. I just turn it off, but, yes, how will it perform in the final product? The concept is good, but can it be executed in such a way that it is not overly intrusive?

[crabby]

Security has to be intrusive to be secure A PC isn't smart enough to make decisions for itself so asks the user - I think it's a good feature (as long as it is adaptable)

crabby

[marcio]

Found a tool which enables you to configure UAC prompts. Check out Vista Companion. Select UAC tab, configure UAC Administrator prompt or UAC User Prompt to "No Prompt". That will get rid of the messages.

http://www.vistacompanion.com