Linked by Thom Holwerda on Fri 12th Dec 2008 23:44 UTC, submitted by google_ninja
Thread beginning with comment 340199
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: Microsoft Windows and User accounts
by UltraZelda64 on Sat 13th Dec 2008 16:17
in reply to "RE: Microsoft Windows and User accounts"
"I find it amazing how Microsoft can spend millions on an Operating System that cannot allow a 'regular user account' to run programs without administrator or power user rights.
UAC in Vista does it. Have you ever tried Vista? "
It's probably been argued to death as to whether UAC actually does anything at all. I'm on the side of those who believe that it doesn't. It's nothing more than a false sense of security in my view; a band-aid in typical Microsoft fashion to alleviate a boo-boo instead of actually tearing it apart and fixing the underlying problem. Not to mention that it just trains users to click "OK" (which they're likely already used to from previous Windows versions).
Edited 2008-12-13 16:18 UTC
RE[3]: Microsoft Windows and User accounts
by centos_user on Sat 13th Dec 2008 16:33
in reply to "RE[2]: Microsoft Windows and User accounts"
This is what I was trying to say, however I am modded down because it is not politically correct and people know this is true and it is not a layer of security it is nothing more than pop up boxes....
It is amazing how I GET modded down for saying the same thing but whole well...
RE[3]: Microsoft Windows and User accounts
by jbauer on Sat 13th Dec 2008 17:15
in reply to "RE[2]: Microsoft Windows and User accounts"
It's probably been argued to death as to whether UAC actually does anything at all. I'm on the side of those who believe that it doesn't.
The following is quoted from http://blogs.msdn.com/e7/archive/2008/10/08/user-account-control.as...
Impact on the software ecosystem
UAC has resulted in a radical reduction in the number of applications that unnecessarily require admin privileges, which is something we think improves the overall quality of software and reduces the risks inherent in software on a machine which requires full administrative access to the system.
You can believe what you want, it's just maybe a bit unsupported by facts. UAC has made developers aware of unnecessary privileges, whether you admit it or not. And that is enough to say that it has accomplished something
Edited 2008-12-13 17:16 UTC
RE[3]: Microsoft Windows and User accounts
by google_ninja on Sat 13th Dec 2008 20:32
in reply to "RE[2]: Microsoft Windows and User accounts"
If you run as an administrator, you need to click OK to have the admin tolken get passed to the executable. If you are in a non administrator group, you need to provide the username and password of someone who is to elevate.
if you only have to press "Ok" to elevate, you are doing the equivalent of running as root in linux.
RE[3]: Microsoft Windows and User accounts
by soonerproud on Sat 13th Dec 2008 22:15
in reply to "RE[2]: Microsoft Windows and User accounts"
It's probably been argued to death as to whether UAC actually does anything at all. I'm on the side of those who believe that it doesn't. It's nothing more than a false sense of security in my view; a band-aid in typical Microsoft fashion to alleviate a boo-boo instead of actually tearing it apart and fixing the underlying problem. Not to mention that it just trains users to click "OK" (which they're likely already used to from previous Windows versions).
As configured out of the box, maybe. But if you are willing to lock all users but the admin out of the admin account and force them to run as a standard user, UAC is quite effective at preventing infections. UAC also makes setting up a standard user account very simple with none of the tweaking required to make standard user accounts work flawlessly. All Microsoft really needs to do is make the standard user account default in the first place to solve the issue you just brought up.
One more thing, those prompts are not the whole of UAC. UAC is a collection of features that help to harden Windows against attacks. DEP, Protected Mode on IE, improved user accounts and registry virtualization are all features of UAC. Those are the parts you don't see that work in the background to improve security. Even users that mindlessly click ok to the prompts are still better protected under Vista than XP because of those features.
(XP does include DEP since SP2 for those who wish to enable it for all programs for better security.)





Member since:
2007-02-27
UAC in Vista does it. Have you ever tried Vista?