Comments on: Windows Vista UAC Effective Defense Against Rootkits

By: SomeCrazyStuff

SomeCrazyStuff — Fri, 16 Jan 2009 15:53:57 +0000

[quote]Finally, grant the ability to set a timeframe for elevated privileges. If a user is going to be testing network settings or installing a bunch of software, they should be able to tell UAC to promote them for the next fifteen minutes, or half hour.[/quote]

Um... would seem to me if you gave a certain timeframe that would decrease security. Say you allow 1 hour to do all of your setting up and such, which will include driver installs and registering products and software over the internet.. but with only and hours time on the internet you will no doubt start getting hit by AV2008/2009 along with a variety of other malware instances. So leaving a user with admin rights just allows for something to turn around and bite them in the butt. it would be better for there not to be a time period and have to answer a message for everytime you need admin rights. That way you can go as long as you like without av2009 finding you and saying oh look he has admin rights for the next 10 minutes.. lets have a party and play hide and seek.

Just my thoughts though...

Yes i know this is and old post.. im just now seeing it though...

By: GaMt

GaMt — Fri, 02 Jan 2009 22:25:14 +0000

I agree that if Microsoft did update the way the UAC worked, it would be far more appealing.

For now I'll stick with it, because right now it's not annoying enough for me..I rather be secured & annoyed instead of infected and annoyed.

By: Tom Rogers

Tom Rogers — Sun, 29 Jun 2008 17:52:07 +0000

I am primary a mac user but have examined Vista in detail. I think the answer to the problems with UAC lies less in when it prompts people but more in how.

By: PaulT

PaulT — Fri, 20 Jun 2008 22:03:11 +0000

I remember having many issues with UAC while testing games, including many online, at Vivendi Games' Sierra Online.

There were so many issues (and I experienced more in my newest PC when I upgraded to Vista last fall) that it convinced me to turn off UAC from the very beginning with my new PC.

After having many issues with a huge amount of Vista features, I found a guide online and disabled a vast and large amount of unneeded services to enable my computer to run better, also enabling my L2 cache that Microsoft seems to purposely turn off to force people into upgrading hardware that would otherwise perform far better.

As the last user said, UAC is both poorly implemented and poorly supported by third-parties.

By: sarahw

sarahw — Thu, 12 Jun 2008 18:42:08 +0000

Some non-Microsoft programs will not update unless you have UAC turned off.

While UAC is a good idea, it can certainly be improved.

Some programs should be able to preform basic tasks without a user prompt.

By: WindowsObserver.com » Blog Archive » Windows Vista Google Alerts for 01 June 2008

Mon, 02 Jun 2008 09:21:33 +0000

[...] Windows Vista UAC Effective Defence Against RootkitsBy ScHwErV Considering turning off UAC on your Windows Vista computer? You might want to think again. UAC is Microsoft’s User Account Control. It’sa sometimes nagging interface that can help to… [[ This is a content summary only. ...Geeks to Go! - Tech experts answer... - http://www.geekstogo.com [...]

By: SpuD

SpuD — Sun, 01 Jun 2008 13:28:38 +0000

[quote] There are a lot of things that Microsoft can do to improve UAC for your typical consumer. First, rethink what things require administrative permissions. Many things that UAC asks for permission for should not require those permissions. Next, place a time limit on the elevated privileges. Right now UAC promotes the user until the action is over, thus making it necessary to ask multiple times if the first action initiates a second or third action that requires the elevated privileges. Finally, grant the ability to set a timeframe for elevated privileges. If a user is going to be testing network settings or installing a bunch of software, they should be able to tell UAC to promote them for the next fifteen minutes, or half hour.

[/quote]

Yeap if they did this i would definatley have it on permantley!

It's a great idea and as proven can stop you getting infected but it is definatley really anoying, before the SP1 i had it every time i tried to open up any program say itunes and had to accept more than 2 - 3 times!

Microsoft should defintaley consider adding some of these feature to it!

SpuD

By: Ubuntu User

Ubuntu User — Sun, 01 Jun 2008 12:20:08 +0000

This is so old news in ubuntu. These types of policies are success stories for Microsoft, but just a walk in the park for Linux users around.