User Access Control. Love it. Hate it. Tolerate it. Don't see it. As a poster in the Vista security newsgroup said today, that after they've set up Vista they don't see it. I agree. Yes I got it when Adobe updated (and I hope you did too), but I see it when I expect to see it, when I'm doing administrative functions.
A while back I blogged about a workaround for those that just HAD to turn it off because they were being driven to drink. I blogged about how this could even be done in Vista Home versions that had no secpol MMC -- http://msmvps.com/blogs/bradley/archive/2007/11/29/there-s-no-secpol-in-vista-home-premium-so-now-what.aspx so today when someone in the newsgroup stated in Vista the following:
How to disable UAC prompts and retain UAC security:
Run Regedit and navigate to
Change the value of ConsentPromptBehaviorAdmin from "2" to "0".
They missed an important point... disabling the UAC prompt by adjusting it to silently elevate does NOT retain all the goodness of UAC. If you hit a place that would normally say "are you sure you want me to do administrative action", you won't get that window anymore. So if you hit an email that wants to do something horrific like something wanting to silently elevate and launch a malware attack through your email client, it will do so and be just like it was in XP where we were all used to running as Administrator.
User Account Control with the ConsentPromptBehaviorAdmin mode set to silently elevate is like being on a beach in Sydney, Australia wearing an "Untied String Bikini". Not exactly a mode that is the safest in the world should the tide come up and surprise you suddenly.
Oh, you aren't completely nude, you still have some protection. But you are in a somewhat precarious position to be so if you aren't careful. Now then the one advantage of running User Account Control in Untied String Bikini Mode (UAC in "USB" mode for short), is that Internet Explorer is still in Protected Mode On. Something that you don't get when you turn UAC completely off. UAC with UAC turned fully off is like walking fully unclothed not only down a beach in Australia, but pretty much anywhere in the Rocks and Circular Quay area as well.
Keeping UAC in UBS mode means that you are that much closer to bad guys possibly tricking you into doing bad things. Clicking on an email that launches something is an example of the 'bad thing'.
Having your bikini already untied means the bad guys have a better chance of getting it off of you.
In the future I'm sure they will want to find ways to untie your bikini.
But I don't find that it annoys me to the level that I want to turn it off like some say they do.
So while ... if you ABSOLUTELY MUST untie your bikini, that's the information on how to do so, remember that you aren't getting all the goodness you would be getting if the bikini was properly tied.
Promise me you'll keep your bikini properly tied will ya?
(credit goes to Dr. Jesper Johansson for the visual analogy of the untied string bikini when describing adjusting UAC to silently elevate. And sorry ..couldn't find an image of Alicia Keys wearing a bikini to illustrate the blog post for those that requested that. Cartoon purchased from www.cartoonstock.com)