Re: User Account Control in Windows Vista

["Brian K. Doré" <bkd () LOUISIANA EDU>]

With Group Policy you have a lot more granular control of UAC than just turning it on or off.   Depending on what 
exactly is causing you problems you may be able to tweak it so that you still get some of the benefits like the 
Protected Mode of Internet Explorer or registry/folder virtualization.

Unfortunately my practical experience is limited as we've stuck with XP here.  There just hasn't been any compelling 
reason (or demand) for Vista.

Brian

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jenkins, 
Matthew
Sent: Thursday, May 29, 2008 7:57 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: User Account Control in Windows Vista

How is everyone handling UAC in Vista these days?  Many of our remote management applications will not work with it 
turned on.  I am getting more pressure from our desktop support folks to turn UAC off across most of our domain 
computers.  I disagree, as my opinion is that we might as well use Windows XP if we disable UAC across the domain.  
However, when we can't push various software packages including antivirus, UAC is making Vista almost impossible to 
manage.  Any thoughts would be appreciated.  Thanks,

Matt

Matthew Jenkins
Network/Server Administrator
Fairmont State University
Visit us online at www.fairmontstate.edu<http://www.fairmontstate.edu/>