Educause Security Discussion mailing list archives

Re: User Account Control in Windows Vista


From: Mike Wiseman <mike.wiseman () UTORONTO CA>
Date: Thu, 29 May 2008 09:47:51 -0400

My understanding of UAC is that it was designed to add protection for users running with admin rights regularly: users 
not in a domain environment or those who own their computers. I'm not experienced running a domain but if all aspects 
of desktop operation are under the control of the domain admin, then UAC seems redundant.

Mike

Mike Wiseman
Computing and Networking Services
University of Toronto


  Matt,
  UAC does seem to be very troublesome.  You could split the difference with your desktop guys.  Disable UAC, but make 
sure that everyday users are not Administrators of their machines...

  Aaron

  Jenkins, Matthew wrote: 
    How is everyone handling UAC in Vista these days?  Many of our remote management applications will not work with it 
turned on.  I am getting more pressure from our desktop support folks to turn UAC off across most of our domain 
computers.  I disagree, as my opinion is that we might as well use Windows XP if we disable UAC across the domain.  
However, when we can't push various software packages including antivirus, UAC is making Vista almost impossible to 
manage.  Any thoughts would be appreciated.  Thanks,



    Matt



    Matthew Jenkins
    Network/Server Administrator
    Fairmont State University
    Visit us online at www.fairmontstate.edu





-- 
Aaron Bliss
Systems Administrator
SUNY Brockport
(585) 395-2417

Current thread: