Slashdot Mirror
A Fresh Look at Vista's User Account Control
Art Grimm writes to mention a post at Ed Bott's Microsoft Report on ZDNet. There, he talks about Vista's User Account Control, and the issues he sees with the setup as it exists now. From the article: "The UAC prompts I depicted in the first post are those that appear when you install a program, when you run a program that requires access to sensitive locations, or when you configure a Windows setting that affects all users. But as many beta testers have discovered, UAC prompts can also show up when you perform seemingly innocent file operations on drives formatted using NTFS. In this post, I explain why these prompts appear and why some so-called Windows experts miss the obvious reason (and the obvious fix)."
Could they possibly make that "article" any more annoying? They'd have been better-served to turn it into a flash-animated slide show. I'm not going to click all the way through that thing.
Either put it all on one or two pages (interspersed with ads if you must), or put it into a slide show if the article is written as a slide show.
The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
- You can right-click on any program and select "Run As", type the admin credentials.
- For systems functions, "Run As" IE (as an admin) and change to the Control Panel in the address bar.
- From the command prompt, you can use the "runas" command.
When I first clicked on the article, I couldn't even figure out immediately where the rest of it was. It was like 90% crap, a tiny bit of text, and a tiny more link that disappeared amidst all of the crap.
If you have XP Home, read up on cacls. Alas, in XP Home it is hard to configure access control on folders. /T /E /G Users:F
For example:
C:\> cacls C:\MyFolder\
Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
First time a program is started with 'runas
It is certainly not a perfect solution, but it can solve some problems.
However, you should not use this solution if you don't trust the user. I am almost certain that the program can be replaced with another program with the same name without revoking the priviledges.
Right click the shortcut and prepend the following:
/savecred /user:administrator
C:\WINDOWS\system32\runas.exe
The first time you run the app it'll prompt you for the admin password (in an UGLY ass dos box) after that it'll run with no prompting. Honestly, this isn't rocket science. Not quite as slick as suid, but it works. Until you change the admin password of course.
Free The Lapland Six!!!
http://www.whatiwore.com
What I wore, now with 100% more pool project!
You can gain access to the "Security" tab in XP Home by installing NT Security Configuration Manager:
/ tools/scm/SCESP4I.EXE
ftp://ftp.microsoft.com/bussys/winnt/winnt-public
Run the executable and extract it to a folder, then open the folder. Right-click on "setup.inf," click Install, and restart once it's done. Works with all service pack levels of Home.
hello dear sirs my name is jamesh i are india (bihar) can u guide me install red had linux 9?
Alternatively, just reboot into safe mode and the Security tab will magically appear and you can do it just like with pro.
As the Americans learned so painfully in Earth's final century,free flow of information is the only safeguard against...
Most games still save their save files into C:\Program Files.
Games certified to run on Windows Vista don't. Instead, they'd use SHGetFolderPath() to look up the current user's My Documents folder and end up saving to e.g. C:\Documents and Settings\Pinocchio Poppins\My Documents\GTA Hot Coffee\ or something like that.
As I understand the article, EVERYONE in Vista is a normal user. Administrators have the ability though to take administrator actions on a case by case basis after supplying credentials.
To me, this sounds exactly like "sudo" under unix/linux or the "Authenticate: blahblah requires that you type your password" under Mac OS X. This model is more secure and works great, but there are some legacy transition issues.
For you unix people, the problem the article describes is, "what if you mount an old drive, the drive has restrictive permissions, and the file owner UIDs don't match the new system?" (your user account doesn't have permission to do anything on the drive)
NTFS has file permissions, but they rarely came up in practice because everyone in Windows was doing everything as the Unix equivalent of root. In Unix, the obvious fix is to do a sudo chown -R newuser /mnt/olddrive (or an ultraghetto sudo chmod -R o+rwx /mnt/olddrive) . The user/permission concept is totally foreign to your average windows user though, and hence the problem.
If the game wants to write in certain registry keys or system directories like Program Files, Vista is going to do copy-on-write and store the actual modified files somewhere under your user profile, where they will only be visible to that program. Or you can configure this not to happen, and the game will get ERROR_ACCESS_DENIED unless you elevate it when starting (run it from an elevated command prompt, or click "Run as administrator" from the context menu of the executable or shortcut, which gives you the UAC prompt).
Elevation can only happen when a process is created, so you won't be prompted mid-game unless the game starts another executable (or explicitly creates an elevated COM object and host process, which wasn't possible before Vista) to do that work.
You can't do this in a network environment because you can only have one set of ACL's between your machine and a server or other workstation. This is a fundamental problem with the way ACL's and GUID's work currently with SMB and the windows workstation client, does anyone know if Vista fixes this?
There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
Or add the security tab to XP Home without needing to always reboot into safe mode, just follow the advice on this site: http://www.scottxp.com/winxp.php#advuser, scroll down to the "Advanced File Sharing & Security" section, and follow method 3. I did it, and it works well.
- Move "Sig". For great justice!