Re: UAC in Windows 7 more trouble then its worth?

[Josh More <jmore () starmind org>]

Before this discussion goes too far off into the weeds, I think it should be
pointed out that UAC is not a security feature.  Read the post at
http://windowsteamblog.com/windows/archive/b/windowsvista/archive/2007/01/23/security-features-vs-convenience.aspxto
learn more.  (When I read it, I learned that my assumptions were
wrong.)

I am not a Windows expert, but I would suggest digging into Windows
permissions and UAC configurations before disabling it entirely.  All the
UAC discussions I see these days look an awful lot like the SELinux
discussions I saw five years ago.  Odds are you can make the system work to
everyone's satisfaction if you just take a little to time to jump up the
learning curve.

-Josh More



On Mon, May 16, 2011 at 1:40 PM, Michael Lubinski <
michael.lubinski () gmail com> wrote:

> +1 for the easier on support. I see alot of DEP + UAC bypass
> vulnerabilities so I'm not fully convinced on the overall increased
> security.
>
> On Mon, May 16, 2011 at 1:12 PM, Ty Purcell <TPurcell () ffin com> wrote:
>
> >  I see it as making things easier for support (if you are running your
> > users as users only, not local admins.) I experimented with no UAC and no
> > admin rights, it was a big pain to support. With UAC on, it was easy.
> >
> > We had a vendor that had a couple of products that did not work with UAC
> > on. We told them to fix it, they cried about it, took 3+ months, but finally
> > fixed it.
> >
> > I agree that it will be more secure, but what do others think??
> >
> > Ty
> >
> >
> >
> > ----- Original Message -----
> > From: pauldotcom-bounces () mail pauldotcom com <
> > pauldotcom-bounces () mail pauldotcom com>
> > To: pauldotcom () mail pauldotcom com <pauldotcom () mail pauldotcom com>
> > Sent: Mon May 16 12:22:12 2011
> > Subject: [Pauldotcom] UAC in Windows 7 more trouble then its worth?
> >
> > Hi everyone,
> >
> > We are upgrading from xp to 7 in the next few months. At the minute there
> > is a few areas that concern me but I only want to voice my opinions at the
> > right time and only for the fights worth fighting. In my personal opinion
> > UAC will help make our systems more secure and is worth having even if it
> > makes our jobs that bit harder.
> >
> > At the minute most stuff seems to work fine but there are a few pieces of
> > legacy software that are causing minor issues. The guy that does our third
> > line says it will create us a massive head and should be turned off. Can I
> > ask do you have it turned on? is it worth having?? any other advise?
> >
> > Many Thanks
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> >
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com