1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

disable permission dialogs

Discussion in 'Windows Security' started by John A Grandy, May 19, 2009.

  1. Bob

    Bob Guest

    FromTheRafters wrote:

    "It looks to me like the registry edit does not defeat UAC entirely, only
    makes the protected admin consent prompts automatically answered."


    Exactly!

    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > "Gordon" <gordonbparker@yahoo.com> wrote in message
    > news:u8HVMFR2JHA.1716@TK2MSFTNGP03.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
    >> "Bob" <nowhere@nowhere et> wrote in message
    >> news:O78ZnkN2JHA.4744@TK2MSFTNGP04.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> To disable UAC prompts (aka "Quiet Mode") NOT UAC.
    >>> Run Regedit and navigate to
    >>> [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem]
    >>> Change the value of ConsentPromptBehaviorAdmin from "2" to "0".<!--colorc--><!--/colorc-->
    >> So you advise to turn off a security feature without even asking what
    >> the OP is doing to cause all these popups?<!--colorc--><!--/colorc-->
    >
    > This so-called security feature is circumvented anyways. The real reason
    > for UAC is to help migrate users toward existing within the restricted
    > account. If a user refuses to work within these boundaries - UAC becomes
    > meaningless. UAC is there to make it easier to work within restricted
    > user accounts (provides access to the admin token part). If a user can't
    > bring himself to accept the limited powers of the non-admin account for
    > day-to-day use, then he may as well not be bothered with (or by) it.
    >
    > It looks to me like the registry edit does not defeat UAC entirely, only
    > makes the protected admin consent prompts automatically answered. The
    > user still has to deal with any other split token effects that may
    > arise. The "Administrator" account has a full token.
    >
    > <!--colorc--><!--/colorc-->
     
  2. Gordon

    Gordon Guest

    "Bob" <nowhere@nowhere et> wrote in message
    news:epv$9C22JHA.1380@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > No.
    > The UAC prompts provide insignificant security.
    >
    > They are primarily a pain in the ass.
    >
    ><!--colorc--><!--/colorc-->
    Which is PRECISELY why I asked the OP what he was doing to get them "all the
    time". I get them maybe once a week, when I do something that requires admin
    status.
    In normal use no-one should get them "all the time"....

    --
    Asking a question?
    Please tell us the version of the application you are asking about,
    your OS, Service Pack level
    and the FULL contents of any error message(s)
     

Share This Page