Ned's BigFaT Blog!

November 30, 2006

DUH DA DAAAA (or how to disable UAC prompts will leaving some semblance of least user privilege still intact)

Filed under: Uncategorized — makfu @ 6:26 am

Okay, so the UAC prompts are just too much for you and you feel you are smart enough that Windows shouldn’t ask your permission to do dangerous and potentially malicious stuff. But before you just outright turn UAC off (which I have laid out in an early post is a Bad Thing™ to do), you can actually change the behavior of UAC by editing your local policy settings (or through an AD GPO).

To edit the local policy of your machine, run “gpedit.msc” from the cmd prompt or the run command. First off, there are 9 UAC related security settings located under Computer Configuration->Windows Settings->Security Settings->Local Policies->Security Options. You will see them listed at the bottom of the right hand pane of the group policy editor at the bottom of the list (alphabetical order).

Of the 9 policy settings available, the one that will disable prompting is the setting labeled “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode” when set to “Elevate without prompting”. Now, keep in mind, I would still say that it is not a good idea to disable prompting. However, at least in this scenario, IE protected mode will continue to function and applications that don’t request elevation (the majority of day to day apps) will continue to run with Least User Privileges which is a better scenario than just turning off UAC all together.

As for the other UAC options, you can peruse and read the policy descriptions in the “Explain Tab” on each policy setting.

November 2, 2006

Well that changes everything…

Filed under: Uncategorized — makfu @ 6:39 pm

Okay, I hear this comment a lot: “Vista is just XP with some new eye candy”.

Incorrect.

Vista/Longhorn Server is NT 6, and so much has changed, especially under the hood, that it’s difficult to list it all, so here is just the top of mind core changes:

1. All-new, fully threaded network stack (integrated IPV6/IPV4 stack)
2. All-new radically different graphics stack (WDDM/DXGK)
3. All-new floating point based sound stack (everything, sans miniport, has moved to usermode)
4. New kernel mode memory allocation model
5. And pretty much everything else too

Infact, to really understand the scope of what has changed, check out this awesome Wikipedia article: http://en.wikipedia.org/wiki/Features_new_to_Windows_Vista

’nuff said.

Blog at WordPress.com.