UAC

Discussion in 'other software & services' started by Yash Khan, Mar 10, 2015.

  1. Yash Khan

    Yash Khan Registered Member

    Joined:
    Apr 4, 2011
    Posts:
    1,835
    Win 7 64

    Is UAC tied to any other applications?
    i.e disabling UAC reduces the protection of any other applications.
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,010
    Location:
    The Netherlands
    No, not that I know of, security tools should be able to function just fine with UAC turned off.
     
  3. Yash Khan

    Yash Khan Registered Member

    Joined:
    Apr 4, 2011
    Posts:
    1,835
    Should I disable it on my family system?
    Coz they just sometimes click YES & Sometimes NO without checking the alert.
    And they are average users. Dont know anything about security & neither want to learn.
     
  4. SLE

    SLE Registered Member

    Joined:
    Jun 30, 2011
    Posts:
    361
    It affects IEs protected mode, and some types of windows virtualisation.

    The alerts only say "xy needs administrative rights", so often hard to understand for average users. But the other way: Most applications shouldn't need those rights nowadays. At least I would turn it to high and leave it on.
     
  5. Windows_Security

    Windows_Security Registered Member

    Joined:
    Mar 2, 2013
    Posts:
    3,060
    Location:
    Netherlands
    What I do when people are click happy

    a) Set UAC to silently elevate (you still keep the goodies of UAC)
    b) Set UAC to deny elevation of unsigned executables

    Regards Kees
     
  6. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,983
    Location:
    Canada
    In this case I definitely recommend Kees' suggestion

     
  7. Yash Khan

    Yash Khan Registered Member

    Joined:
    Apr 4, 2011
    Posts:
    1,835
    But then they will not be able to install apps as many are unsigned.
    And there are 3 users on this system.
    And they do uninstall/install quite a few apps.

    I think keeping UAC enabled on default would be better.
     
  8. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,983
    Location:
    Canada
    Sure, as long as they install safe applications. My daughter's laptop recently had a malware fiesta going on it because of some EA games-recommended downloads she installed on it. At least that's what she figured it was.
     
  9. safeguy

    safeguy Registered Member

    Joined:
    Jun 14, 2010
    Posts:
    1,709
    The best bet would be to prevent them from being able to install programs but this is not feasible in most cases.

    Some "average users" can still keep their systems free from malware (for the most part) without any hand-holding, so there is still hope. Some of them still install junk and ad-ware programs but that is usually because they do not know any better. You might want to just point it out and teach them a thing or 2.

    As for UAC, please keep it ON. Disabling it would not make things any better than it is. It just makes things worse.
     
  10. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    4,046
    Location:
    USA
    As stated here, if you have a program that has been running under UAC virtualization and you turn of UAC, you will lose data and settings that apply to that program. Plus you may no longer be able to run said program without setting directory or file level permissions for that program. I just leave it on, it doesn't stop you from being able to do anything you should be doing.
     
  11. Yash Khan

    Yash Khan Registered Member

    Joined:
    Apr 4, 2011
    Posts:
    1,835
    I have kept UAC ON with default settings.
    Eset AV
    Unchecky
    Ublock for Google Chrome
    Adblock Plus for IE
    Win Fw default settings
     
  12. clubhouse1

    clubhouse1 Registered Member

    Joined:
    Sep 26, 2013
    Posts:
    533
    Location:
    UK
    How do you set UAC to :

    a) Set UAC to silently elevate (you still keep the goodies of UAC)
    b) Set UAC to deny elevation of unsigned executables

    as per Kees?
     
  13. Windows_Security

    Windows_Security Registered Member

    Joined:
    Mar 2, 2013
    Posts:
    3,060
    Location:
    Netherlands
    Run REGEDIT and navigate to the key
    HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

    "ConsentPromptBehaviorAdmin"
    User Account Control: Behavior of the Elevation Prompt For Administrators in Admin Approval Mode
    0 = run in quite mode (keep UAC on, but silently elevate to Admin)
    1 = run UAC, when an elevation request occurs, your are asked to enter the admin password on sacure desktop(my current setting)


    "ValidateAdminCodeSignatures"
    User Account Control: Only elevate executables that are signed and validated 1 = ON 0=OFF (default)

    See picture
    Untitled.png
     
  14. clubhouse1

    clubhouse1 Registered Member

    Joined:
    Sep 26, 2013
    Posts:
    533
    Location:
    UK
    Thank you....That will be useful for some of my family's computers.
     
Loading...