Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

[Guide] UAC "Cancel or Allow" prompts

- - - - -

  • Please log in to reply
7 replies to this topic

#1
DigeratiPrime

DigeratiPrime

    MSFN Junkie

  • Patrons
  • 3,550 posts
  • Joined 18-August 04
  • OS:Windows 7 x64
  • Country: Country Flag
Most people new to Vista want to disable the UAC, User Account Control, prompts completely. Others will want to configure it to behave differently.

This guide will show you:
  • An easy way to turn it on or off.
  • How to configure the advanced settings.

1. An easy way to turn it on or off.
Open the Run window. Either Start>Run or press winkey+r
Goto the 'Tools' tab, Select Disable UAC, press Launch, Reboot.
Posted Image
Posted Image



2. If you want to configure the advanced settings:
Open Local Group Policy as Administrator, by creating a shortcut to 'gpedit.msc', then right click on it and select 'Run as Administrator'.
Expand 'Computer Configuration', 'Windows Settings', 'Security Settings', 'Local Policies', 'Security Options'. Scroll to the bottom.
Posted Image
Recommended Software: KeePass | Microsoft ICE | VisualWget | Vitamin D Video |


How to remove advertisement from MSFN

#2
noguru

noguru

    Advanced Member

  • Member
  • PipPipPip
  • 307 posts
  • Joined 24-February 06
Downside of method 2 is that it's not available for Vista Home users (basic and premium), these versions don't have a gpedit.msc. This leaves only option 1, to disable UAC. Not recommended I think. But there is a third option, Smart UAC:

http://www.replaceuac.com/

This is a UAC replacement, it works exactly the same as the original but offers more options including remembering your preferences. So now you only have to allow an application only once instead of every time again and again and...
It also has the option to scan for malware but this can be disabled in case you already have other software for that. It's free too. So use this, don't turn UAC off.

#3
Railman5

Railman5

    Member

  • Member
  • PipPip
  • 154 posts
  • Joined 25-May 05
i too was constantly annoyed by the incessent interuptions of User Account Control so i downloaded and installed the http://www.replaceuac.com/ utility recommended by noguru.

however i have uninstalled this as it was interfeering more than M$ UAC!!

:wacko:

#4
bledd

bledd

    msfn is a friend of mine!

  • MSFN Sponsor
  • 1,733 posts
  • Joined 24-March 04
use this instead

http://www.tweak-uac.com/download/

keeps the protection, but 'allows' most tasks in silent mode, safer than disabling

#5
Railman5

Railman5

    Member

  • Member
  • PipPip
  • 154 posts
  • Joined 25-May 05
Thanks Bledd

I'll give that a try

:thumbup :thumbup

#6
DigeratiPrime

DigeratiPrime

    MSFN Junkie

  • Patrons
  • 3,550 posts
  • Joined 18-August 04
  • OS:Windows 7 x64
  • Country: Country Flag
I just watched the demo video on the Replace UAC website and I am somewhat alarmed. It shows two different imitation UAC popups (at 0:50 and 1:10) with Aero disabled to appear like it is coming from the secure desktop, without requesting elevation!


As for TweakUAC I think all that app does is set two GPOs shown in the Post #1 screenshot:
"Run all administrators in Admin Approval Mode" Enabled
"Behavior of the elevation prompt for administrators in Admin Approval Mode" Elevate without prompting


Also as for "keeps the protection" I am skeptical of the explanation on that page:

There is only one single "moment of truth" when it comes to malware getting unlimited access to your system, and it occurs when you attempt to run a program you have downloaded from an unknown web site


The screenshot shows a security warning because the installer does not have a Digital Signature; you will get a very similiar warning even with a Digital Signature. Most importantly you dont get that warning at all if it is not an installer, just download a binary, extract it if necessary and run it. Knowing whether or not that unsigned app wants to run in User or Admin mode then becomes very important.

I see a few ways that wont protect you:
You copy files from an external drive or network folder to your pc.
Your web browser is exploited and elevates without your consent to hijack your pc.

My biggest gripe with UAC is this bug: http://www.msfn.org/...ho-t120369.html
Recommended Software: KeePass | Microsoft ICE | VisualWget | Vitamin D Video |

#7
shahed26

shahed26

    Advanced Member

  • Member
  • PipPipPip
  • 462 posts
  • Joined 07-July 07
Easiest way, is to just copy paste this code in notepad, and save with "reg" extension and merge.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000000

Edited by shahed26, 26 September 2008 - 08:48 PM.


#8
MikeyHunt

MikeyHunt

    Member

  • Member
  • PipPip
  • 146 posts
  • Joined 24-December 07
There's a quick way you can enable or disable this annoying UAC 'feature' from the command line:

Disable UAC

C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

Enable UAC

C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f

After you enable or disable UAC, you will have to reboot your computer for the changes to take effect.

Edited by MikeyHunt, 05 May 2009 - 10:04 PM.

Less is More... More or Less - Les Moore




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users