PDA

View Full Version : Project "UAC Tool"


tsilo
October 5th, 2008, 03:26 PM
Replace your Vista UAC; add security and user-friendliness.
more about it: http://www.nortonlabs.com/inthelab/uac.php
I like it....

sukarof
October 5th, 2008, 03:39 PM
I have long been a fan of UAC but I must agree there are a couple of things that are a bit unnecessary annoying.
1. Sometimes a software that has been cleared to install it still needs the UAC prompt when started the first time (after a reboot for example)
Why cant the UAC appear only when the program has changed for example?
2. Some software UAC prompts doesnt take over the screen, instead the UAC prompt is in the background so you have to open the UAC window from the task bar...


-{ Quote: "The net effect is that many users find the UAC security clearance and prompting process annoying, especially those who are a computer’s only user and have all the latest Norton Internet Security software installed and updated." }-


Sounds like interesting concept since SuRun doesnt work well on my machine for some reason.
Is this software only for Norton users?

tsilo
October 5th, 2008, 04:32 PM
nop, everyone can use it... not only Norton users :)

sukarof
October 5th, 2008, 05:01 PM
Thanks. Quickest install I´ve ever encountered, didnt even have time to blink :)
And they are planning for the future (64bit version too) :thumb:
I have some software that I start frequently and it is actually nice to be able to tell UAC to remember my decision, much like in SuRun.
Hopefully it will react if the executable changes.

Now all we need is a tool that doesnt automatically give total admin rights to every single software install, ie just enough rights to get it installed, nothing more.

Thanks tsilo!

tsilo
October 5th, 2008, 05:05 PM
They already made it for x64.. I installed it on my Vista Ultimate x64

Kees1958
October 6th, 2008, 01:56 AM
Thx installed on the Vista64 gaming box also

Franklin
October 6th, 2008, 04:57 AM
Doesn't sound too intrusive?
-{ Quote: "Q: What does Norton Labs get out of my testing?

A: DATA! Each time you see a prompt, the Norton Labs UAC Replacement sends meta information about what caused the prompt, and why, to our server. This data will be used, in aggregate, to help Norton Labs build a white list that can be shipped with the UAC replacement and LiveUpdated as needed.

Q: What do you mean by "meta information"?

A: The meta information contains file name and file hashes for the EXE that caused the prompt and the EXE that is to be the recipient of the elevated privileges. In addition, the meta information contains file name and file hashes for DLLs that were active in either of the two EXEs, response information (what option did the user choose, how quickly, and did they choose "do not ask me again"), and date/time info." }-

lordpake
October 6th, 2008, 05:23 AM
-{ Quote: "Doesn't sound too intrusive?" }-
Sounds like the community functions in other software, for example PrevX (at least it had something like that in the past).

I don't see any issues in that myself.

Cerxes
October 6th, 2008, 11:25 AM
Hmm, could I run it on my XP box as well? or is it exclusive for Vista alone? Just wondering if some XP user here have already tried it...

/C.

sukarof
October 6th, 2008, 01:21 PM
-{ Quote: "Hmm, could I run it on my XP box as well? or is it exclusive for Vista alone? Just wondering if some XP user here have already tried it...

/C." }-

I think this is for Vista only since XP doesnt have UAC. If I´d still use XP and wanted something like this I´d use SuRun in a limited account.
The effects are somewhat similar to my knowledge.

-{ Quote: "-{ Quote: "Doesn't sound too intrusive?" }- " }-
As lordpake states about all community based software does this already. Unless someone finds sensitive information (anything else than a IP that could identify the user) in the packets I see no problem.

djohn
October 6th, 2008, 01:52 PM
Hey thanks for this little tool,This helped with my CCleaner that prompts every time I go to use it which is often.:thumb:Also noted that when prompt it much smoother on the system another words seems less load on system and minus the dam donk sound if I choose not remember the prompt.

Cerxes
October 6th, 2008, 03:19 PM
-{ Quote: "I think this is for Vista only since XP doesnt have UAC. If IŽd still use XP and wanted something like this IŽd use SuRun in a limited account. The effects are somewhat similar to my knowledge..." }-

O.k, IŽm already using SuRun, I was just curious about this new tool.

/C.

BG
October 6th, 2008, 04:07 PM
Sweet ...thanks tsilo!

Kees1958
October 11th, 2008, 02:59 PM
Tsilo,

Thx it works great until now on Vista64.

Regards Kees

Trespasser
October 12th, 2008, 01:30 AM
I agree with Kees, this works great...at least so far in Vista 32 bit. Nice.

Cloudcroft
October 12th, 2008, 02:01 AM
I've got TweakUAC installed and running in the quiet mode. Would I be more secure using the Norton UAC Tool? Since I don't totally understand how TweakUAC suppresses alerts, I'm wondering how these two tools compare.

Kees1958
October 12th, 2008, 07:03 AM
As far as I know

UAC = limited user
UAC in quiet mode = file and registry virtualisation only plus IE in protected mode, other limited user triggers are auto (quietely without prompt) elevated
Norton's tool = limited user + remember for the executable triggering the action

In this context
UAC OFF = a bad choice
UAC in quiet mode = better than UAC off, but auto elevation provides an open door, my second choice
UAC tool = good balance between security and useability, my first choice
UAC ON = best in theory, but in practise user are trained to auto allow everything reducing the security effect to (in my opinion) near zero.

Cloudcroft
October 12th, 2008, 01:12 PM
Thanks Kees, I think I'll give the Norton UAC Tool a try.

Kees1958
October 12th, 2008, 02:52 PM
Seems we beta users are building up a whitelist for them. I hope it stays free after the final release. I can imagine a free version with no support and a paid version withe whitelist and whitelist updates.

sukarof
October 21st, 2008, 04:57 PM
IŽve been running it for more than two weeks now and no problems. Everything just works fine (on their forum some have found on glitch/bug or two though)
IŽd definitely would pay a moderate one time sum for this tool.
It blows my mind that MS didnt include this kind of option in the first place. If they were afraid that novice users might misuse it (as if turning off UAC wouldnt fit into that category :D ) they couldŽve hidden it in policies or something.
UAC Tool is a perfect example of something I didnt know I wanted :)

deanmartin
October 21st, 2008, 07:40 PM
This is nice, Thanks for the find tsilo.

dja2k
October 23rd, 2008, 07:03 PM
So is this tool still working fine for you guys? Does it dial out to symantec to let them know what you allowed and blocked?

dja2k

deanmartin
October 23rd, 2008, 10:30 PM
When i had PCtools firewall a few days ago, yes it dialed out.

Sportscubs1272
October 24th, 2008, 04:52 AM
Is there an updated version of this software in the past week?

sukarof
October 24th, 2008, 01:07 PM
No. i guess there is no need? it seems to work as advertised and I guess Symantec is using this time to collect information on what people allow and not (which they clearly state so it can not be a surprise to anyone). But you can keep you self updated here (http://community.norton.com/norton/board?board.id=uact)

jerrypc1
February 2nd, 2009, 06:13 PM
-{ Quote: "Replace your Vista UAC; add security and user-friendliness.
more about it: http://www.nortonlabs.com/inthelab/uac.php
I like it...." }-
tsilo, I have windows vista 32 bit I clicked on the link and downloaded the norton uac and it installed according to my control panel programs but it doesn't show up anywhere else on my pc I clicked on several programs including ccleaner and I didn't get any response from norton uac ????Thanks for any help.jerrypc1

TechOutsider
February 2nd, 2009, 07:18 PM
Don't use ccleaner, messed up my norton installation more than once. Run as administrator. And Norton UAC is designed to be more silent than what Vista offers.

And I don't see the point in Vista, where you can login as an Admin. and only have standard rights. Why not just login with restricted rights and elevate priv. as needed via the Run As... command. Even with restricted rights, another step down from power users, I can easily infected my system with malware.

jerrypc1
February 2nd, 2009, 08:15 PM
-{ Quote: "Don't use ccleaner, messed up my norton installation more than once. Run as administrator. And Norton UAC is designed to be more silent than what Vista offers.

And I don't see the point in Vista, where you can login as an Admin. and only have standard rights. Why not just login with restricted rights and elevate priv. as needed via the Run As... command. Even with restricted rights, another step down from power users, I can easily infected my system with malware." }-
Thanks for the reply Techoutsider but my problem is I Had no clue that norton uac was even on my pc I opened several programs before ccleaner and the norton uac never responded acording to some of the other post I read the norton would ask you the first time you tried to open certian programs and if you okayed them then norton didn't do anything the next time they tried it but on mine I have no clue that it is on my pc .Jerry

Kees1958
February 3rd, 2009, 02:14 AM
-{ Quote: "Thanks for the reply Techoutsider but my problem is I Had no clue that norton uac was even on my pc I opened several programs before ccleaner and the norton uac never responded acording to some of the other post I read the norton would ask you the first time you tried to open certian programs and if you okayed them then norton didn't do anything the next time they tried it but on mine I have no clue that it is on my pc .Jerry" }-

First check whether you have UAC on or disabled?

Look at your control panel http://www.howtogeek.com/howto/windows-vista/disable-user-account-control-uac-the-easy-way-on-windows-vista/

Cheers

Kingy
February 3rd, 2009, 03:59 AM
I have the same problem, I have UAC disabled and norton uac installed but nothing is showing at all not even a process running in task manager.

jerrypc1
February 3rd, 2009, 07:07 AM
-{ Quote: "I have the same problem, I have UAC disabled and norton uac installed but nothing is showing at all not even a process running in task manager." }-
Thanks Kingy I thought I was the only one experiencing this
Thanks for responding.Jerrypc1

jerrypc1
February 3rd, 2009, 07:17 AM
-{ Quote: "First check whether you have UAC on or disabled?

Look at your control panel http://www.howtogeek.com/howto/windows-vista/disable-user-account-control-uac-the-easy-way-on-windows-vista/

Cheers" }-
Hi kees1058 yes I have had the vista UAC disabled for several weeks .so I downloaded the Norton UAC and when I got through with the download it told me the download was succesful but nothing ever happens to show me that it is performing I look in the control panel in my programs and it is there .and it is in my c drive programs but nothing ever happens to let me know it is working .Jerrypc1

adam.mt
February 3rd, 2009, 08:18 AM
I'd be very cautious of using this tool. I read about it soon after release and intrigued suggested it to Paul Thurrott over at WinSupersite. It appeared on his blog, and also over at ZDNet. Seems it opens a security hole: privilege elevation.

Details here (reads the comments near the end): http://community.winsupersite.com/blogs/paul/archive/2008/10/10/norton-takes-on-vista-s-user-account-control.aspx

Consequently, decided just to stick with the standard UAC until Windows 7 is released (and even then seems the Microsoft 'default setting' may be a less secure one, unless they change it from the beta; user-friendliness has apparently won over security, doh!).

jerrypc1
February 3rd, 2009, 08:33 AM
-{ Quote: "I'd be very cautious of using this tool. I read about it soon after release and intrigued suggested it to Paul Thurrott over at WinSupersite. It appeared on his blog, and also over at ZDNet. Seems it opens a security hole: privilege elevation.

Details here (reads the comments near the end): http://community.winsupersite.com/blogs/paul/archive/2008/10/10/norton-takes-on-vista-s-user-account-control.aspx

Consequently, decided just to stick with the standard UAC until Windows 7 is released (and even then seems the Microsoft 'default setting' may be a less secure one, unless they change it from the beta; user-friendliness has apparently won over security, doh!)." }-
Thanks Adam.mt.for the link and for your input but on that link the first post at the end said thanks to adam and Josh for the tip and that he was going to give it a try.Jerrypc1

Kingy
February 3rd, 2009, 08:37 AM
@jerrypc1, I think this might be the answer. Uninstall norton uac completely, switch on vista uac, restart, run the norton uac .exe as administrator. To test it run some small program that you know windows uac usually alerts for and it should be the norton uac that appears instead.

jerrypc1
February 3rd, 2009, 09:19 AM
-{ Quote: "@jerrypc1, I think this might be the answer. Uninstall norton uac completely, switch on vista uac, restart, run the norton uac .exe as administrator. To test it run some small program that you know windows uac usually alerts for and it should be the norton uac that appears instead." }-
Kingy THANK YOU,THANK YOU very much that worked ,that was it I did Exalty as you suggested and now the Norton UAC works and I like it much better.you did it Kingy you figured it out.Thanks...Jerrypc1

Kees1958
February 3rd, 2009, 11:29 AM
Hi,


Norton only works when you have UAC on. That is what I asked. Sorry I should have told you that the link showed how to set it of, but with teh procedure you can select it to work (UAC ON).

:D

jerrypc1
February 3rd, 2009, 05:18 PM
-{ Quote: "Hi,


Norton only works when you have UAC on. That is what I asked. Sorry I should have told you that the link showed how to set it of, but with teh procedure you can select it to work (UAC ON).

:D" }-
Thats okay Kees1958 all of you pitched in and helped and I got something from each post and I think you all for your help .it's good to know that everyone helps when someone on the board has a problem.Jerrypc1

adam.mt
February 20th, 2009, 05:53 AM
-{ Quote: "Thanks Adam.mt.for the link and for your input but on that link the first post at the end said thanks to adam and Josh for the tip and that he was going to give it a try.Jerrypc1" }-

It was not Paul Thurrott criticizing the tool. Have you not read the comments at that link, following the story, and made from other readers? There are some very valid drawbacks to the tool, that I think you should be aware of, and that was my point.