The Great UAC Debate!


UAC  

1412 members have voted

  1. 1. Do You Use UAC?

    • Yes
      477
    • Yes, On "Silent Mode"
      91
    • No (I use an Admin Account)
      496
    • No (I use a Standard Account)
      39
    • I don't use Windows Vista
      118
  2. 2. Have You Ever Been Saved By UAC?

    • Yes
      226
    • No
      932
    • I don't use Windows Vista
      106


Recommended Posts

UAC doesn't do all that much, but I don't find it annoying enough to make me turn it off. Vista just bugs me.

So you basically revived an old thread only to say that you didn't read anything in it, and don't know what UAC actually does ?

I have never disabled UAC on my own machine, and the only time I suggested anyone to do it was when it got corrupted on their system (running Windows 7, that is). Basically, they couldn't do any admin tasks that caused a prompt to appear because they never got the prompt and therefore couldn't elevate any actions. The only thing they could do was disable UAC since it uses the auto-elevation in Windows 7 to elevate the user to allow changing the setting.

Before that, they couldn't even run a Windows repair from Windows because they couldn't elevate the setup process to initiate the repair. Instead of spending time trying to talk them through booting on the CD and attempting a rollback or anything, I simply had them disable UAC and warned them that they would be more prone to viruses, so they need to be more careful. As they were unwilling to reinstall the system or anything, disabling UAC was IMO the best course of action. Other then that though, I have never suggested anyone disable UAC. When its working properly, it will not get in your way and will help protect you from viruses, so why not leave it enabled?

I have never disabled UAC on my own machine, and the only time I suggested anyone to do it was when it got corrupted on their system (running Windows 7, that is). Basically, they couldn't do any admin tasks that caused a prompt to appear because they never got the prompt and therefore couldn't elevate any actions. The only thing they could do was disable UAC since it uses the auto-elevation in Windows 7 to elevate the user to allow changing the setting.

Before that, they couldn't even run a Windows repair from Windows because they couldn't elevate the setup process to initiate the repair. Instead of spending time trying to talk them through booting on the CD and attempting a rollback or anything, I simply had them disable UAC and warned them that they would be more prone to viruses, so they need to be more careful. As they were unwilling to reinstall the system or anything, disabling UAC was IMO the best course of action. Other then that though, I have never suggested anyone disable UAC. When its working properly, it will not get in your way and will help protect you from viruses, so why not leave it enabled?

Agreed. There is no reason to turn of UAC on Windows 7 Completely. I have mine turned down so it doesn't pop up all the time and I seldom see it, maybe 2 or 3 times a week. Not counting installing things. Also I don't ever see how people can say it's annoying on windows 7. They stopped having the completely greyed-out screen where you had to chose yes or no then you could get back to whatever you were doing.
  • 2 weeks later...

No, it feels far too obtrusive. I can download a file, get prompted by UAC, then get warned that it's a downloaded file (not UAC but just explorer).

It's been a few years since I had a Mac but I think they got this sort of thing right. If you want to install something, you simply type your user password right before it installs.

If you want to modify system files, you get prompted for a user password. You get checked out when it really matters, not for every little change you make.

Oh and there are even occasions that somehow, the UAC prompt doesn't get promoted on top of all other windows and you can access nothing else but it's taskbar entry until you've accepted the UAC prompt. A major bug imo.

Enabled it on my own machine, but disabled it on our family desktop for usability. They seem to short-circuit with UAC nags. :pinch:

I would have done it the other way around personally @_@

Especially if they're not that (I hate the term) tech savvy...

No, it feels far too obtrusive. I can download a file, get prompted by UAC, then get warned that it's a downloaded file (not UAC but just explorer).

It's been a few years since I had a Mac but I think they got this sort of thing right. If you want to install something, you simply type your user password right before it installs.

If you want to modify system files, you get prompted for a user password. You get checked out when it really matters, not for every little change you make.

I would have done it the other way around personally @_@

Especially if they're not that (I hate the term) tech savvy...

I guess thats where ubuntu got their idea. Microsoft should follow Ubuntu's path on user control.

Silenced it on my Windows 7 installation. It's just as secure, since I personally happen to be aware of when I am executing a program or installer. I really don't need Windows to confirm it.

Except that one time a rogue virus attempts to run itself and has full admin privs on your machine while it doesn't have any privs on a default configured Win7 machine.

Honestly, saying you are aware of every executing program and installer on your machine without Windows confirming it is just stupid. Sure, you are aware of every program or installer YOU initiate, but what if one gets started without your knowledge? Not exactly aware of that one now are you?

UAC doesn't replace AV and common sense, it replaces those few times where something does catch you off guard and saves you from having to remove a potentially nasty virus. I can understand disabling it when you do a lot of installs, such as when you just reinstalled Windows and what not, but leaving it disabled for day-to-day activity is pretty careless. Unless you install software on a daily basis or change your system files just as often, you shouldn't see more than a popup or two a week at the most (likely even less than that), is the 3 seconds it takes to click yes/no too much out of your day to risk the hours it could take to recover from an infection?

There a Wrong way and a right way to use and configure UAC

First the wrong way to configure it

capture2jy0.jpg

and the Right way

captureyx.jpg

and then there thes best way

Disable it altogether...

but if you really have to use it.. Fine tweak it useing the Local policey editor...

Both of those look like the the idiots guide to configuring UAC.

in the second one you've pretty much allowed ANYTHING full access to your computer. and it shows you have no clue what UAC actually does, outside of giving you a prompt.

it's amazing that after such a huge thread, we still have people coming in that don't understand that the prompt and access control is only a small part of UAC.

It's amazing that some people still don't grasp the concept of UAC. It's not about telling you if you want to run a program or not. It's about asking you if you want the program or action to effect your whole system. Even the dialogs tell you that. Is it really that hard to understand?

Also, _DP, the way you describe how OS X does "UAC" from a users perspective is the same way it's done on Vista/7. The only difference is Vista/7 gives you a Yes/No prompt. Though, you can change it to ask for your credentials, instead. I've never known UAC to prompt me for user level changes.

On a day to day basis, you will never see the prompt on OSX, unless you install something which isn't true on windows.

Also, you're being quite arrogant in saying that we don't understand the purpose of UAC, I realize that I disable it at my own risk, but babes, it's working out a treat wink.gif

Actually, no I'm not, I'm fairly sure you DON'T understand the purpose. Just like I'm fairly sure you think it only affects the prompts.

and have no idea that disabling it also disables shadow/virtual folders, disables safe mode in IE and a few other apps that use the safe mode function. And several other safety functions that run in the background as well. And I have never seen a UAC prompt form normal usage. heck on new software today you won't even see it during installs. unless you chose to install for all users, or the install does something stupid like what FF likes to do, and set itself as default for all users when you tell it to be "your" default browser.

And maybe we shouldn't compare windows to an known insecure OS like OSX. The reason you don't see prompts on that is because it has a horrible security system.

On a day to day basis, you will never see the prompt on OSX, unless you install something which isn't true on windows.

I don't get prompted on a daily basis on Windows, either. Different people, different habits.

Also, you're being quite arrogant in saying that we don't understand the purpose of UAC, I realize that I disable it at my own risk, but babes, it's working out a treat wink.gif

How am I being arrogant? Have you actually read this thread or even the recent comments? It's quite obvious people STILL don't understand it. Also, what's with calling me "babes"?

And the arrogant comment relates to you stating that anyone who disables UAC doesn't understand it. You could go ahead and disable it. Now you magically have forgotten what it's function is. Alakazam!

Hush babes, hush, it's all ok.

Pot calling the kettle black, I see.

the way I have it setup mean nothing aobut the wrong or right way...

I ment useing the User Contral Sider bar is the wrong way to set it up..

if you really need to use UAC, Then set it up useing the Local Policy editor.. You get way more contral over how UAC acts

I perosnly jsut disable it due to the fact I think its annoying nt needed... after all I been useing pc ever since dos/win 1. So old habbits die hard.

the way I have it setup mean nothing aobut the wrong or right way...

I ment useing the User Contral Sider bar is the wrong way to set it up..

if you really need to use UAC, Then set it up useing the Local Policy editor.. You get way more contral over how UAC acts

I perosnly jsut disable it due to the fact I think its annoying nt needed... after all I been useing pc ever since dos/win 1. So old habbits die hard.

While you may get more control over how UAC behaves through policies, neither are the right or wrong way to configure UAC.

Except that one time a rogue virus attempts to run itself and has full admin privs on your machine while it doesn't have any privs on a default configured Win7 machine.

Honestly, saying you are aware of every executing program and installer on your machine without Windows confirming it is just stupid. Sure, you are aware of every program or installer YOU initiate, but what if one gets started without your knowledge? Not exactly aware of that one now are you?

UAC doesn't replace AV and common sense, it replaces those few times where something does catch you off guard and saves you from having to remove a potentially nasty virus. I can understand disabling it when you do a lot of installs, such as when you just reinstalled Windows and what not, but leaving it disabled for day-to-day activity is pretty careless. Unless you install software on a daily basis or change your system files just as often, you shouldn't see more than a popup or two a week at the most (likely even less than that), is the 3 seconds it takes to click yes/no too much out of your day to risk the hours it could take to recover from an infection?

If you get a virus, the UAC won't help you one bit, I promise you. The UAC responds to user-started tasks. It is nothing more then to make sure and ask, "Do you really want to do that?". Do you realize how many UAC prompts you would be getting if background processes had to prompt you for every system change they made?

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Just pull a 4Chan and ignore the UK gov, or better troll them. It's not like they can enforce the fine across border.
    • It has NEVER been shown that all these overreaching creepy methods of surveillance have ever saved a child or prevented a terrorist attack. Not a single one. It's the kind of people like you who just wave it away as "paranoid conspiracy" that makes big tech and governments this creepy mass data hoarding entities. Not only that, 3/4 of these surveillance ideas undermine the very foundations of safe online communication because they always want to have a backdoor in everything "just in case" they might need it to... checks the notes "save the children". If you put a backdoor into encryption chain there is no encryption chain anymore. You know what encryption keeps safe? Your medical records, your online shopping and credit card during payment, your photos in the cloud, your emails, your passwords, everything. There is ZERO guarantee only the good guys will use it. And if you think police suddenly can't apprehend child abusers because of encryption, Epstein was running his entire sex trafficking ring using GMail which is not even encrypted end to end. Or to make matters even worse, USA has a **** and a good buddy of Epstein as a president. Absolutely NOTHING has been done to address it. Maxwell just got a better "hotel" room as a reward. This clearly shows how they absolutely don't really care about the children but they care about the absolute control over all of us. And you're defending them here. Good grief. On top of constant attempts to insert backdoors into encryption chain, the entire age verification nonsense is again entirely over reaching, creepy, invades everyone's privacy with premise of yet again "protecting the children" instead of demanding device makers to provide simple and powerful tools for PARENTS to control how their children use devices and what they do on them. THIS would be the way, not the stupid age verification for everyone. Imagine if government would be dictating companies how their phones work and not the company's IT department. The parents should be the IT department to their children. And for everyone excusing "they are not knowledgeable enough" buuuuuulsheat. We live in a digital age, if you have children now, you absolutely are well versed in digital everything at least to basic extent. If you're not, how do you even function in these times then? Reality is that parents are just lazy and don't want to deal with this. They want government to raise their kids because they are too busy scrolling stupid Instagram and Tiktok or some bs.
    • You could make the argument that K should not be included, but FC, the fried chicken, is not the framework, it's the product. It's the Paint in Paint.NET. A closer analogy is if KFC included the name of the deep fryer they used. HennyPennyFC.
    • Flying as the central point eh... As a massive Spyro fan who has replayed the Reignited Trilogy three times and the originals 4 times... I have some doubts, but maybe...
    • Apple is expanding Private Cloud Compute beyond its own data centers by Pradeep Viswanathan At WWDC 2026, as part of the improved Apple Intelligence capabilities, Apple today announced that it is expanding Private Cloud Compute (PCC), its privacy-focused cloud infrastructure for Apple Intelligence, beyond its own data centers for the first time. Private Cloud Compute was designed to handle Apple Intelligence requests that are too complex to run fully on-device. The PCC system does not store user data and does not allow Apple or anyone else to access user requests. Last year, Apple also expanded its Security Bounty program with rewards of up to $1 million for researchers who could find serious vulnerabilities in PCC. Until now, Apple's PCC data centers were using Apple's own silicon. As part of the expansion, Apple is working with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud systems powered by NVIDIA GPUs. Apple will be using this new infrastructure to execute more demanding AI tasks while maintaining the same privacy and security guarantees of PCC. The new implementation uses NVIDIA Confidential Computing with NVIDIA GPUs, Intel CPUs with TDX, and Google’s Titan chip. Apple says it has worked with Google to build additional protections beyond a traditional confidential computing deployment. Despite the expansion to third-party data centers, Apple claims that its core PCC requirements remain unchanged, including stateless computation, no privileged runtime access, non-targetability, and verifiable transparency. The company highlighted that it will continue to control the PCC software stack, and Apple devices will only trust PCC software that has been cryptographically approved by Apple. To take security to the next level, Apple mentioned that it is maintaining an append-only ledger of Google Cloud hardware that is part of the PCC fleet. The company claims this will help reduce the risk of supply chain attacks. In addition to AI infrastructure, Apple also worked with Google to use technologies behind the Gemini family of models to build the next generation of Apple Foundation Models to power Apple Intelligence features across on-device and cloud workloads. As expected, for more demanding AI tasks like agentic tool use and complex reasoning, Apple will rely on the expanded PCC infrastructure running on Google Cloud. The expansion of PCC on Google Cloud will gradually ramp toward the full set of protections during the summer preview period. As before, Apple will also publish binaries for public inspection, provide research tooling, and give researchers access to live PCC nodes in research mode through the Apple Security Bounty Program.
  • Recent Achievements

    • Very Popular
      Captain_Eric earned a badge
      Very Popular
    • One Month Later
      amusc earned a badge
      One Month Later
    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
  • Popular Contributors

    1. 1
      +primortal
      506
    2. 2
      PsYcHoKiLLa
      222
    3. 3
      ATLien_0
      92
    4. 4
      +Edouard
      86
    5. 5
      Steven P.
      81
  • Tell a friend

    Love Neowin? Tell a friend!