Do you disable UAC?

Mit Linux wär das nicht passiert.
Haha....

 

Only true if you are using an administrator account for day to day computing. If you are using a limited account, it won't whether UAC is enabled or not.

 

Then again, who'd want to use a standard account without UAC (if your the computer owner)? I certainly wouldn't want to switch to an admin account that often.

 

A standard account without UAC is way more inconvenient then having it on. I can't see any situation where having it off is a win.

 

UAC does make a standard account more convenient but I could easily live without it. I do already in the Xp systems I'm still using and I started with Windows NT 4, way before UAC. It is also a good warning system even in a LUA so I never disable it.

 

But you don't have to. For instance, I use a non-Administrative account with UAC at max, so every change to the OS require me to type the admin password

 

Nope on all my PC's I have set UAC to MAX with a EXTRA BLOCK elevation of unsigned Programs. I switch this ON and OFF by executing a REG file.

**** Default: ALLOW UNSIGNED elevation, just save text below as ALLOW_unsigned_elevation.reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ValidateAdminCodeSignatures"=dword:00000000


**** Protect: BLOCK UNSIGNED elevation, just save text below as BLOCK_unsigned_elevation.reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ValidateAdminCodeSignatures"=dword:00000001

You are still able to run unsigned programs, only when they try to elevate, you will get this message
(no idea why Microsoft made it such a stupid message).



When you need to install an unsigned program, just double click on the ALLOW_unsigned_elevation.reg file.

Less than 10 percent of the malware is signed (the growth of signed malware is Android and SSL certificate related, on Windows it is less than 4%), so it is an easy attack surface reduction.

 

Does someone has a tip/trick to run Chrome updater with elevated rights on a NON-admin account?

I changed tasks Google Update TaskMachine Core and UA to run with Admin account in stead of System (entered password), but that does not seem to work.

 

I never disable UAC.

I always have UAC on max and do all daily work from a standard user account.

 

When you install chrome with no admin rights you can update chrome with no admin rights: https://www.reddit.com/r/programming/comments/3ikthc/how_is_it_possible_to_install_google_chrome/
Works fine on my work laptop
Back on topic... I've set UAC to the max.

 

I have never disabled UAC. it doesn't get in my way.

 

No – always set to Max. The prompts don't bother me at all.

 

I actually like being prompted for a password

 

No I do not disable UAC, keeping set to Max. Anyone disabling is clueless how it works.

 

@wat0114 I'm not clueless. I just find the UAC prompts to be very annoying.

I install new software just about every day. If I left UAC enabled I would get a lot of prompts.

I choose to be less secure so that I'm not annoyed.

 

Have I ever disabled UAC in the past? Yes.

Do I have UAC currently disabled? No.
I actually have it on max setting(always notify) since it's more secure and I feel the pop-ups don't bother me.

 

I usually have things locked down to the point that a full log on to the administrator account is required to install any software. UAC actually allows me to bypass this for any software that is simple enough to be portable and not require an installer. I can simply copy it to the program files directory with Windows Explorer by entering the password at the UAC prompt. If I disable UAC, that option is no longer available and the system is even more locked down. I don't do this because I prefer to see the prompt and it could warn me if there was a script or program trying to copy executable files somewhere it shouldn't.

 

UAC disabled on both Win 7 computers.

 

Yes. On all computers. It annoys me.

I don't have any security or malware issues.
I am not sure how people get infected. Just novices, I guess.
I have 2 sons, and I have never had to remove malware off their computers either.

 

UAC MAX + Uac whitelist via taskschd.msc.

 

UAC disabled here (annoying). 2 years ago I installed Voodooshield which initially was developed to replace UAC and VS used to ask to disable it on install, although that doesn't happen now.

 

Thanks, but installing it in user space, does not work nicely with my Software Restriction Policies.

 

Thought about that, but it's the only way to be able to update chrome as non admin. Maybe you can add some exceptions only for appdata local google?

 

I have it on (Win 7) but have it set to 'Do not dim my desktop'.

 

I set it to max (Always notify).