...Because someone's gotta tell the story...


To return to the main Blog List, click Full Blog Listing.


Group Policy

Windows Vista and User Account Control

Friday, March 14, 2008 in Technical Articles (Views: 4856)
Anyone who seems to be tech savvy has to agree that Vista's User Account Control (or UAC) must die.

As stated before, Vista seems to me as "Windows XP for Idiots", and I missed a key point. It's "Windows Vista for Idiots who want to spend unncessary money on upgrades". Remember, it's not just the Operating System, but also your security software, and some utility software needs the upgrade. Also, if software is made for an old version of Windows, why upgrade to a new OS with old software? Seems as moronic as taking a shower and putting on the same dirty clothes.

But one thing that is in my opinion the most annoying thing about Vista is User Account Control. This is the prompt that comes up constantly when you want to do virtually anything in Vista (or Server 2008).

This model of elevation for things like installing software, the administrator command prompt is part of a model that Linux uses. Imitation is the greatest form of flattery, and Microsoft is good at imitation. :)

Of course, turning this feature off will turn off most (if not all) of the dilgent hard work that Microsoft put into Vista.

Why is UAC a completely stupid idea

In all honesty, most OEM's set up the default user as an administrator. When a prompt comes up, the user most likely will just click Continue (or allow) and move on without reading.

Most IT people can vouch for this when a user gets an error message. You ask what the error was and it is a variant of "I didn't read it", or "I never wrote it down", or "I forgot". They aren't called users for nothing.

So, what about those of us who know how to keep a Windows system running without the fear of hurting ourselves? Maybe want the freedom to open an administrator prompt by default in the Enterprise?

Here's my solution for running Administrator accounts as Administrators and not be annoyed by UAC:

Set up a Group Policy

Under Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Settings, I have the following configured:

User Account Control: Admin Approval Mode for the Built-in Administrator account (is disabled)

User Account Control: Run all administrators in Admin Approval Mode (is disabled)

User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode (is set to Elevate without Prompting)

I leave the options for "standard users" at the defaults.

Of course, you can do the other methods in a workstation mode, using either Local Group Policy, or create a shortcut that runs as an administrator by default.

So, here is my way of disabling UAC for administrator accounts and removing the annoyance.


Related Blogs You May Be Interested In:

To leave a comment, please log in and/or register.