To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: Microsoft Windows and User accounts
"Ok how do you run a program out of the box that will not run without admin rights?"
Uh, Gee, I don't know, you get the idiots who wrote it to use non-privileged locations for installation, data storage and registry entries?
"You just contradicted yourself, this is not to be blamed on just software writers it is a flaw of the Windows Operating System."
Oh, so the Windows Operating System makes it impossible to create an application that doesn't require administrative rights? Do tell.
"I am not going to argue with someone who read a report on Windows NT years ago, you are incorrect and you have never worked in an Enterprise environment."
I am not wrong. I have worked in an Enterprise environment. I was merely stating that Windows NT 3.x, the first versions of the Windows kernel that had much of a concept of user rights and privileges could support programs that didn't require Administrative rights to run.
"Theory and Hype is what Windows is built on, if it is so wonderful why is constantly exploited on the desktop/server?"
What?
"Why do you need to install Anti-Virus/Spyware just to keep it halfway operational?"
I don't run anti-virus or anti-spyware. Besides, this has nothing whatsoever to do with whose at fault for the mess of programs that require administrative rights.
"Microsoft does not share the code to enable software writers to make the programs behave in a correct fashion."
Ummm. Yes they do. It's quite simple.
"I believe in a free Republic however I do not believe in selling software that mis-represents and has blatant security flaws that are inherit in all versions of Windows period."
Wow, you really aren't capable of forming a coherent argument are you?
"It is the same code base, just rehashed with pretty graphics and some extra bloat ware to make people think who this is neat. Then after using it for 3 months the performance has deteriorated which requires reboots, defrag, and so on."
Uh, sure.
"I know what I am talking about and you are incorrect."
No you don't, and no, I'm not.
The problems with Windows programs that require admin access for no apparent reason was a problem with the writers of those programs, lazily installing in places that require admin access, or lazily storing settings in the wrong registry locations.
The problem with such statements is that you are most probably not a software developer for Windows (neither am I).
Just blaming developers is far too easy. As a software architect, I can assure you that developers are not joyfully going to restrict their own apps with installation requirement like "Admin Rights Needed": There are normally good reasons for harming the field of application of your own app (spending 20% of your time / budget or so just to make the software run under restrictions is a good reason, believe it or not!).
I knew of a case where "no apparent reason" was the dependency on a certain MS system DLL (needed because of bugs in other versions).
I guess that MS (once again) harmed one of the golden rules of software framework APIs "Make simple things simple and hard things possible" (developing for restricted accounts should be "simple" but seems to be so "hard" that developers don't do it unless forced to).
And talking about sloppy programming: Just have a look at a default Windows installation (preferably a non-English one) to see what sloppy programming means. It's not that MS itself is a good example ..
The problem with worrying about user accounts in windows is its easy to look back in history and say... gosh... how could they design this crap. However, back when it was being designed, it probably made sense. The improvements they made on it and backwards compatibility probably made sense too. Heck, their changes and move to Vista UAC is also evolutionary and make sense.
The best example we have to day is the WWW. It started out as HTML the simple markup language. Then it morphed into some screwed up web applications using AJAX. Toss in some screwed up ActiveX and other attempts in there as well. Looking back now, the whole AJAX/HTML structure is mentally ill. No one would design something like that. If you were going to design it today, you would probably think of something like MS Silverlight or Adobe Flash. Yet, can we just throw out the entire WWW and demand everything be redone in Silverlight or Flash? No. So we deal with it.
It's the nature of development. It's a jungle out there and always will be. Somehow we get by with all the hiccups.
As a former Windows software developer (no, it's not something I want to do again. Ever) I have to say something here.
They dont do it joyfully, they do it out of cluelessness. Face it, up until very recently the majority of Windows developers did not understand or care about security concerns. Although some of this blame must go to framework and toolkit developers too, they didnt care or understand much either.
This is painfully illustrated by the many, many games who for, God knows what reason, don't work unless you're an Administrator.
That's not how DLL's work. If a dev told you that he was either lying or didn't know how to do the task properly.
That's no excuse.
"Just blaming developers is far too easy."
It's where the blame lies. MS provides simple and easy methods for installing and running apps that do not need Administrative rights. If developers can't figure out how to use them, it's not Microsoft's fault.
" As a software architect, I can assure you that developers are not joyfully going to restrict their own apps with installation requirement like "Admin Rights Needed": There are normally good reasons for harming the field of application of your own app (spending 20% of your time / budget or so just to make the software run under restrictions is a good reason, believe it or not!)."
I have no idea what you are saying "There are normally good reasons for harming the field of application of your own app" doesn't make any sense.
"I knew of a case where "no apparent reason" was the dependency on a certain MS system DLL (needed because of bugs in other versions)."
You don't need Admin rights to load a DLL.
"I guess that MS (once again) harmed one of the golden rules of software framework APIs "Make simple things simple and hard things possible" (developing for restricted accounts should be "simple" but seems to be so "hard" that developers don't do it unless forced to)."
Most of the problem is the result of installing in privileged locations, or writing files/registry settings to privileged locations. Are you telling me that changing a few file paths and registry locations is just to difficult for the average developer? If so - what do you suggest MS do to correct the problem?
"And talking about sloppy programming: Just have a look at a default Windows installation (preferably a non-English one) to see what sloppy programming means. It's not that MS itself is a good example"
Guess I will just have to take your word for that - have no idea what it has to do with the topic at hand.
is it now. maby there are bad devs that follows bad habits but microsoft do sent try very hard to discourage this behavior.
if they did they would go the osx wqay and just say this is our new secure api use that and make new applications, oh you whish to use our old and un secure api well the you will be run in a secure vm sandbox





Member since:
2006-03-18
"I find it amazing how Microsoft can spend millions on an Operating System that cannot allow a 'regular user account' to run programs without administrator or power user rights. "
I stopped reading your comment right there, as this statement alone demonstrates that you have absolutely no idea what you are talking about.
Windows, since NT, has supported programs that install and run under a non-admin user account. There have, and always will be certain actions that require higher authorization to execute. It is up to the makers of Windows programs to avoid taking those actions unless absolutely necessary for their program's functioning.
The problems with Windows programs that require admin access for no apparent reason was a problem with the writers of those programs, lazily installing in places that require admin access, or lazily storing settings in the wrong registry locations.