Do You UAC?

[raskren 0]

@Brandon Live

How can I turn off "Secure Desktop" without turning off "UAC"?

The setting is in Security Policy for the local computer. Type "secpol.msc" to run.

[Brandon Live 232]

Yeah, "secpol.msc" - then go to "Security Options" and scroll down.

[TGD 0]

I have to leave it on, or else my backed up DVDs won't play in Media Center off my external hard drive. I have NO idea why, but there you go.

Also, I can't turn off Secure Desktop, because Home Premium doesn't let me edit group policies. I'm praying for a workaround if anybody knows one.

[Orien 1]

I just leave it on. It's just like most Linux distros.

[TGD 0]

Does anybody know the reg key for Secure Desktop? I'm happy with UAC, but the screen effect bugs me.

*Edit* Just found it, thought I'd post it here in case anybody ever finds the post and needs the info :) It's the PromptOnSecureDesktop DWORD, in LocalMachine\Software\Microsoft\Windows\CurrentVersion\Policies\System

Edited January 26, 2007 by TGD

[RaisinCain 0]

Stupid thread. Hell no! I turn it off.

[franzon 7]

I can't belive there're a lot of stupid users which disable it! Viruses, Trojans, future security flaws and exploits will fire these stupid users and I'll be happy! Good luck stupid users!

I love the UAC, I love the Secure Desktop, I'm not a stupid user

Edited January 26, 2007 by franzon

[stockwiz 7]

I'm glad UAC is in vista and overall think it's a good thing, but for power users or people who know what they are doing it's safe to turn off. Just like some people feel they need 3 anti-spywares and 2 anti-viruses on their computers and are a bit paranoid, there are others who don't surf porn sites or download strange files or who just plain know what they are doing and know what something is out of the ordinary and may not need it. NOD32 will catch the virus... and the firewall will catch the trojan or I will just by spotting something out of the ordinary running in the process list.

[majortom1981 241]

I keep it on and I am a power user. i like knowing what is accessing my stuff.

[Stetson 180]

I also leave it on.

Yes, you do just get in the habit of clicking it, but that's because you know its coming when you do certain things.

Its value is when it pops up in an abnormal place, like when just browsing a website. Since you haven't just clicked a button to perform a command you'll know that something is going on. :yes:

[Rob 20]

When you're first setting up Vista it's extremely annoying.

But once you're running it for a week or two, you don't get so many prompts and it's just something you should learn to live with for security's sake.

Few of us can say that we haven't been caught out by a piece of malware, even though we may be power users. We get caught out once, learn to remember the signs, and it doesn't happen again. Think of this just as an added layer of protection. I, for one, will be keeping it switched on.

My name's Rob Wright and I approve this message.

[Malisk 142]

I agree to proceed posting this message.

I am really enjoy been annoyed!

But once you're running it for a week or two, you don't get so many prompts and it's just something you should learn to live with for security's sake.

Agreed about dat. I also nowadays try to work more in my home/user folder than before so it's not so annoying at all to work with personal documents, media, etc.

[JaredFrost 303]

I find that the so called -power users- will turn it off, but the more advanced users will keep it on.

[Rob 20]

I find that the so called -power users- will turn it off, but the more advanced users will keep it on.

Nice... so true! Children, disabling UAC doesn't make you l33t.

[brlmedia 1]

I leave it on, since i have been using vista since beta 2 i have gotten so used to it

[ev0| 2]

When you first set up the computer, installing apps etc, turn it off. Then turn it on and disable secure desktop. I'm not really worried about someone spoofing the UAC prompt.

[anonymous_user 0]

i just disable the blasted thing.

i can keep my computer secure just fine w/o it.

[freak_power 0]

Here is the list of things i disabled on my Windows Business Edition:

Automatic Defragmentation - I do manually

Windows Firewall - I use hardware firewall/router

Removed PC Tablet Components - Don't need it

Error Reporting Service - Useless

Windows Update - I do manually

Security Center - Don't need it

Windows Defender - annoying - I run AVG antivirus only

Windows Media Network Sharing - I don't plan to do it

Offline Explorer (OMG by default is set to use 24% of hard drive) - Useless

System Restore - Crap...Windows Backup is just fine...I did a full backup of fresh install

Windows Search and Indexing - Useless

UAC - Annoying

Sidebar - Fun, get's boring

Windows Fax and Scan removed - Don't need it

ReadyBoost - useless

Windows Aero - disabled - Switched to classic view (Win 95 look and feel)

Now system is pretty much Windows 2000 with DX10.0 in it...what i actually need it :)

I wish Microsoft saved me of this work, because they could make an optional to install or not the described components above....during Windows Setup.

Edited January 27, 2007 by freak_power

[franzon 7]

I wish Microsoft saved me of this work, because they could make an optional to install or not the described components above....during Windows Setup.

Windows Vista DVD is a WIM image and so you can modify it easily as you like:

Windows Imaging Format

Windows Vista is distributed in WIM, the new hardware-independent image-file format. This format has the following advantages:

* It enables you to store multiple images in one file.

* Microsoft can ship a single worldwide binary to its customers (one each for 32-bit and 64-bit architectures).

* This format reduces file sizes significantly by using a compressed file format and single-instance storage techniques (the image file contains one physical copy of a file for each instance of it in the image file, which significantly reduces the size of image files that contain multiple images).

* You can service the image offline, including adding and deleting optional components, updates, and drivers, without fundamentally creating a new image.

* You can mount images as folders, making it easier to update files within images, using interfaces as common as Windows Explorer.

These advantages dramatically reduce the number of images you need to maintain.

http://technet.microsoft.com/en-us/windows...a/aa905119.aspx

Edited January 27, 2007 by franzon

[stockwiz 7]

I find that the so called -power users- will turn it off, but the more advanced users will keep it on.

To each their own. I can see the benefit of turning it back on after installing and tweaking, but I don't do anything that would warrant needing it as I'm pretty careful and meticulous to begin with. Plus using firefox there won't really be any surprises.

Now turning it on and uninstalling the anti-virus.. that might be an idea worth pondering too... as NOD32 although it's good causes obvious lag at times when browsing files on my vista setup.

[freak_power 0]

Windows Vista DVD is a WIM image and so you can modify it easily as you like:

Windows Imaging Format

Windows Vista is distributed in WIM, the new hardware-independent image-file format. This format has the following advantages:

* It enables you to store multiple images in one file.

* Microsoft can ship a single worldwide binary to its customers (one each for 32-bit and 64-bit architectures).

* This format reduces file sizes significantly by using a compressed file format and single-instance storage techniques (the image file contains one physical copy of a file for each instance of it in the image file, which significantly reduces the size of image files that contain multiple images).

* You can service the image offline, including adding and deleting optional components, updates, and drivers, without fundamentally creating a new image.

* You can mount images as folders, making it easier to update files within images, using interfaces as common as Windows Explorer.

These advantages dramatically reduce the number of images you need to maintain.

http://technet.microsoft.com/en-us/windows...a/aa905119.aspx

Yap. I was lazy to extract my copy of Vista and make another. But what Microsoft offered with new tool is great...

[Malisk 142]

I find that the so called -power users- will turn it off, but the more advanced users will keep it on.

Haha, that so reminds me of the people turning of the System Recovery points to save something like 5 GB on a 250 GB drive.

Then they come to a forum asking about some weird problem they just got from a driver, StarForce, a busted codec install or whatever, and the system isn't restored well by an uninstall.

Then you ask them to do a system restore to yesterday and they tell you they disabled that feature. :pinch:

Yes, yes, this is actual experiences too. They think they'll do nothing wrong anyway, but forget that automated software can do things wrong even if the *user* made the right decisions. I've used that feature a few times during the years and it's worked every single time with pretty much not bad impact to the system. Last time it was about a Sony Ericsson PC/USB driver that collided with some software. Totally unpredictable to even an experienced user, but solved within minutes with that feature.

[Max 50]

Its a pain in the ass. I turn it off. I've done fine for 11 years of internet use.

[franzon 7]

Heard of a program called AutoIT. This program CAN move your mouse.....

malicious programs like AutoIT can't work because UAC has the Secure Desktop (secure desktop is to prevent spoofing of the UI or the mouse by the application requesting elevation; secure desktop protects against shatter attacks, which intercept Windows inter-process messages to run malicious code or spoof the user interface, by preventing unauthorized processes from sending messages to high privilege processes)

malicious programs like AutoIT work only if a stupid user disabled the Secure Desktop :rolleyes:

[Sam 22]

AutoIT isn't malicious ;) Its just a scripting language.