Printable View
How are you getting on with this UAC?
I`m doing a lot of reading and see lots of people totally cheesed off with the UAC "question and answer test". Also being unable to open/move/delete files and folders or run programs.
Don`t like the sound of this much. :( Has MS not gone over the top with security this time?
What are the downsides of disabling UAC?
Has anyone disabled it?
Elaine
I really, really, don't get the issue.
For the initial setup phase of a PC it's a complete pain in the butt. Almost enough to make me want to turn it off, but not quite yet. :) Maybe one build I will, but only for that initial setup.
In normal use, I really don't trip over it that often. It only comes up when you need to do something that requires those administrator rights.
The file system stuff shouldn't be that much of an issue on a clean install unless you're routinely poking around in whole-system areas like the Windows and Program Files directories. And if you are, why? On an upgrade, though, I can see the potential for issues. Looking through all the data directories I've built up on my XP machine over the last few years, they're all set to full control for Administrators and read only for Users. Guess what? In Vista you're basically a user. :) Nothing that a change in NTFS permissions couldn't fix.
I turned it off. Set up an Admin account (with UAC off) for program installations, moving folders, etc.. But I use a User account for net surfing, working apps, etc.
I have been running Vista Ultimate for a couple of weeks. I find all of these permissions that are needed including the UAC to be a real pain in the butt. You can't even view certain folders in the Windows Tree unless you right click on the folder and set the correct permissions as the Administrator.
I just networked a Vista machine with a XP Pro machine and unless the Vista machine is password protected and you know the user name and password you can't even access a shared file from the Vista machine.
Not only that, setting up Vista to print to a shared XP Printer was no fun. I wrote a whole other thread on that problem that I finally resolved. You would think by all the security on Vista you were running a server with a 1000clients hooked up to it. XP is much more user friendly.
Well ginky4, you are not alone in having these opinions, just as you were not alone with your printer problem (I followed that with you :) )
As I said I have been all over the net reading about Vista and lots of people are saying the very same things. Forums are full of permission-related problems. People are not happy at all.
Does Vista not "learn"? Does it not improve with more usage? Do you have to keep telling it the same things over and over again? It certainly does not appear to be User friendly at all.
I can see the sense of all this security for businesses or people with sensitive information, but why do ordinary people like us need all this hassle when is is only one User or a family using the machine? :(
I`m beginning to dread it.:)
Nobody has answered my question
What are the downsides of disabling UAC?
Elaine
Hi, well lets take adobe readerV8 written for XP and also to run on vista, if UAC is disabled you will get a permissions error and a disk is full. You have to enable UAC or right click the properties of the program and select run as administrator, however this does't work since you cannot install the program SO back to having to have UAC turned on. Problems in the workshop our tech's are loving the look and feel of Vista the UAC and MRD are another thing. Printer sharing with XP (or file sharing) not too bad, one thing we are noticing is slow downs on many systems, after a month or two, yet to pin this down.
I have the UAC Box unchecked under user Accounts and It clearly says Administrator under my name,yet I still get all these question and answer boxes and telling me I need Administartor permission to move a file or make registry changes, Is there another way to turn this crap (uac) off? thanx in advance
Is the following of any help?
Source: Windows Vista User Account Control Step by Step Guide
http://technet2.microsoft.com/Window...6c2d91033.mspxQuote:
Scenario 3: Configure User Account Control
Scenario 3 outlines three common tasks that local administrators perform during the set up and configuration of client computers running Windows Vista. The following procedures step you through the tasks of disabling Admin Approval Mode, disabling UAC from prompting for credentials to install applications, and changing the elevation prompt behavior.
Disable Admin Approval Mode
Use the following procedure to disable Admin Approval Mode.
Note: To perform the following procedure, you must be logged into a client computer as a local administrator.
To disable Admin Approval Mode
- Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.
- If UAC is currently active, a User Account Control dialog box will appear. If so, verify that the details presented match the request you initiated, and click Continue.
- From the Local Security Settings console tree, click Local Policies, and then click Security Options.
- Scroll down and double-click User Account Control: Run all administrators in Admin Approval Mode.
- From the User Account Control: Run all administrators in Admin Approval Mode Properties dialog box, click Disabled, and then click OK.
- Close the Local Security Settings window.
Disable User Account Control from prompting for credentials to install applications
Use the following procedure to disable UAC from prompting for credentials to install applications.
Note: To perform the following procedure, you must be logged into a client computer as a local administrator.
To disable UAC from prompting for credentials to install applications
- Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.
- From the Local Security Settings console tree, click Local Policies, and then Security Options.
- Scroll down and double-click User Account Control: Detect application installations and prompt for elevation.
- From the User Account Control: Detect application installations and prompt for elevation Properties dialog box, click Disabled, and then click OK.
- Close the Local Security Settings window.
Change the elevation prompt behavior
Use the following procedure to change the elevation prompt behavior for UAC.
Note: To perform the following procedure, you must be logged into a client computer as a local administrator.
To change the elevation prompt behavior
- Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.
- From the Local Security Settings console tree, click Local Policies, and then Security Options.
- Scroll down to and double-click User Account Control: Behavior of the elevation prompt for administrators or User Account Control: Behavior of the elevation prompt for standard users.
- From the drop-down menu, select one of the following settings:
- No prompt
- Prompt for credentials (this setting requires user name and password input before an application or task will run as elevated, and is the default for standard users)
- Prompt for consent (this is the default setting for administrators only)
- Click OK.
- Close the Local Security Settings window.
thank you very much spyware Dr, that got rid of all the question and answer boxes, but I still have a problem that alot of people are having, when trying to move a file into a folder I get (Destination Folder Access Denied) you need permission to perform this action!
You're welcome. :)
http://forums.techarena.in/showthrea...=669259&page=2Quote:
skydalimit - Member - Join Date: Feb 2007 - Posts: 1
Okay guys, I've been having the same problem, but I finally figured it out. I registered here just to help you guys out. Hopefully your problem with access being denied is the same as mine.
Here is the fix:
Go to control panel
go to folder options
go to the view tab
click "Do not show hidden files and folders"
This fixed my issue with access being denied to folders. Hopefully that will help you guys out as well.
http://www.vista64.net/forums/showth...t=37107&page=2Quote:
ryanduryATgmail.com
Re: Copying files from XP to Vista via shared network drive - 02-10-2007, 09:38 PM
For anyone that may be having the same issue, it is related to having Kaspersky Virus Software 5.x installed on the XP Machine. Kaspersky binds isrtreams to each file under the XP machine and that for some reason screws up the file transfer.
Uninstalling Kaspersky, or REMOVING the istream tags on each file with the following: http://www.kaspersky.com/faq?qid=170...&qtype=3594740 will solve your problem.
http://www.eggheadcafe.com/software/...copy-file.aspxQuote:
Re: Vista can't copy files from network share on XPPro - Gerb
08-Feb-07 03:32:00
Your a genious MDaniel. I too have Kaspersky 5.0 running on my network. There is a setting under the realtime protection and computer scan tasks that enables iStream. You need to shut this off and then run the ADS removal tool. Works great. Here is the email from Kaspersky
The problem:
Users can't copy from a network share from a Vista machine when the share machine has KAV running on the PC.
The fix:
We succeeded in reproducing the problem by ourselves and added this into bugs base. Unfortunately we're not sure that it will be fixed in near future. The problem is connected with iStreams feature in our 5.x version.
Workaround:
1. Disable iStreams. (both real-time and on-demand scanning)
2. Clear already created streams using klstreamremover utility: http://www.kaspersky.com/faq?qid=170...&qtype=3594740
This should not be an issue with version 6.0 as it does not use iStreams.
I think Microsoft forgot that the majority of computers sold with Vista in retail stores will be going to home users who will have only one computer. Most of these home users won't have a clue how to enable and disable all of these unnecessary permissions. I know that the Microsoft tech support phones will be ringing off the hook.
Yess.....I can just hear those phones ringing in India as I type this....Quote:
Originally Posted by ginky4
nope, checking (do not show hidden files and folders) did not help,Im still receiving ( Destination Folder Access Denied) when trying to move a file into a folder.Also The security tab says I have full control.
Are you running Kaspersky?
Have you tried copying the file to a FAT device (such as a USB key/Thumb Drive) and then copying it from there into a Vista folder?
just copied to usb flash drive and tried copying to folder,still get (Destination Folder Access Denied) thanx for suggestions!
Hmmm... running out of ideas here.
Zip the file (on the other machine), copy the zip into the Vista folder, then extract the zip (on the Vista machine)?
Which folder are you trying to copy into?
Is the file one that you created and is the folder one that you created? If the folder you are trying to move the file to falls under the Windows Tree you need to first enable the permissions for that folder. This has already been mentioned but just in case you missed it.
Right click onto the folder in Windows Explorer. Left click onto Properties. Select the Security Tab and then the Advanced Tab. Make sure that everything under the Column called Type is set to Allow. If it is set to Deny then click the Edit button and then the Edit button again and set your permissions to Full Control under the Allow column.
I have been trying to duplicate your problem on my copy of Vista Ultimate and I have been unable to do so. Now when I first started using Vista I was having alot of the problems similar to what you are experiencing until I changed all of these rediculous permissions.
I have went through all the security tabs Everything is set to allow, Im trying to move a file from my desktop to webroot under program files,Its the only folder that has denied me . after making sure the security settings are correct. Just dont know why or like it at all.
Try disabling the folder, reboot and re-enable it.
train, thanx for the reply, but just how do I disable the folder without deleting? Dont see an option anywhere to disable
Right click onto the folder in Windows Explorer. Left click onto Properties. Select the Security Tab and then the Advanced Tab. Make sure that everything under the Column called Type is set to Allow. If it is set to Deny then click the Edit button and then the Edit button again and set your permissions to Full Control under the Allow column.
Set it to deny, reboot then enable it. Had stuck item like you have get repaired doing that most of the time.
Train
still denying me,It seems to be just the webroot folder,I have moved files in and out of other folders okay, I give up on this one,been trying 2 days or better,thanx to everyone who tried to help me!
Do you have Microsoft IIS installed?
http://arstechnica.com/journals/micr...006/12/21/6376
no I dont!
Beats me then. :(
UAC is a good feature. But it is poorly designed. Countless times UAC has popped up. And I though to myself why? All I want to do is change this or view that. And nothing I wanted to change would affect the integrity of my PC. Instead of Microsoft having UAC asking for permission when you lets say need read/write access or changing drivers or deleting files etc. They have it asking permission for everything. Its very intrusive. There is no reason it should hold your hand from doing simple things (that doesn't affect security or integrity of your PC.) Anyone who used Vista more than an hour knows what I am talking about. UAC is intrusive and "tacky". All it needs to be is a simple dialog asking for permission. It doesn't have to darken the screen and block access to the desktop til you make a decision. Microsoft just went overboard with it.
You can get rid of the secure desktop and make UAC act like every other window if you want:What's the risk in doing that? There's no longer any guarantee that the thing approving UAC requests is you; any program can send a keystroke to the window and hit Confirm. Expect malware to start attempting that sooner rather than later.
- Run gpedit.msc.
- Browse to Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Options.
- Disable "User Account Control: Switch to the secure desktop when prompting for elevation".
I'm also a bit curious -- what simple things that don't affect the security or integrity of your PC are you noticing it with?
Some interesting links to other user's experiences and thoughts.
http://blogs.zdnet.com/Berlind/?p=355
http://blogs.zdnet.com/Berlind/?p=360&tag=nl.e539
Note: If the Webroot folder is one created by thrie software, they may have done somthing tricy to it to prevent normal access.
jdc2000
your right,Webroot has done something to there software, just tried to move a file to webroot on another PC running XP Pro, and got access denied also!!
You might try contacting WebRoot on this, although I'm not sure why you'd want to move any files to one of their folders. You could try shutting down Webroot software and stopping any of their services that might be running(possibly in Safe Mode) and see what happens.
I cannot copy anything into or out of my Michael>Music folder (Michael being my user name) and I'm logged in as an administrator.
I thought that maybe vista was preventing me copying my MP3 library (which is completely legal ripped copies of CDs that I own for mixing my own compilations) due to DRM or some other digital protection... but it seems I cannot copy ANYTHING into the folder.
Any help is GREATLY appreciated.
Thanks!
Mike
You bring your security down to the level of what XP was. UAC is designed for people who don't follow common sense when working with the computer. UAC is an un-needed layer for people that use their computer properly, keep their software up to date, and subscribe to a healthy, and maintained system.Quote:
Originally Posted by dunedin
For people who open every email, don't know how AV or firewall software works, don't understand activeX, UAC is a good thing.
I want full control of my OS, and full access to all files and folders. Yes i do poke around in MY program files, i like to tweak.
greyeyezz,
Yes, I know that the security level drops like that. :)
It is in my head that I once read somewhere that there is "something" which you cannot do if UAC is switched off.
I wish I had paid more attention at the time. Maybe that`s not true.
I`ve taken the plunge and ordered Vista at last, so I`ll find out for myself next week. :)
Elaine
Good for you Elaine. What Vista did you get?
I was holding my breath, counting day after day, reading this thread: curious to see how long you could hold off buying Vista:D
Oh, you weren`t were you? :D
I have resisted temptation for a WHOLE MONTH. Haven`t I done well?
You will have read that I have done a lot of reading and learning about Vista.
Apart from criticism by the usual handful of people who will never be pleased I haven`t seen anything to stop me getting it now.
I have ordered Ultimate OEM which is so much cheaper than the retail version. This is a new machine with XP Pro OEM already. I am going to dual boot them and have just partitioned the drive. It`s just sitting here waiting........ and so am I. Can`t wait now :D
Keep your fingers crossed that I`m not back here next week looking for help!
How are you getting on with it? What version did you buy?
Elaine
You will not regret:) The Vista turns out to be way better than XP (my opinion)
I had my home premium. That's all my machine can handle:)
I had to sacrify a few freebees Vista does not like, eg: EasyCleaner from TonyArt ...
So, you still have to wait, heuh:D
PS: you have such a patience I lack( I was smiling to myself reading each post from this thread, betting one cent for each one I read: finally you gave up at the 33th post:D )
I wish I had known you were betting on me.
I`d have tried to hold out longer especially if you were going to send me the money. :D You might have made it $1 per post!!
I`m losing some freebies too and as you say we will just have to wait until some appear for Vista. Just keep checking their websites looking for a "Vista support" notice.
Elaine
I know the setup is ludicrously long, and there are a few things I'm not keen on.
Ludicrously long? :confused: :confused: :confused:Quote:
Originally Posted by Phil K
It took me about 25 minutes from inserting the DVD to being at the desktop and running. And that was the same for all the late betas as well as RTM.
Suppose it depends on the speed of the system it's being installed on. An old notebook with: 800 MHz CPU, 512MB RAM, onboard 32MB graphics, 20GB 4200-RPM hard disk and an external USB DVD drive ... could take a while. :)