Originally posted by: Eric62
As a second day user of Vista I'm happy to be able to access all my files on all 3 hard drives with both of my OS's.
Disabling the UAC has eliminated my #1 Vista annoyance. Thanks to those who suggested it.
Hopefully someday I'll be savvy enough to understand how constantly clicking user prompts to perform simple tasks increases security on a single user PC ???
BTW: PC World (MAY'08 page 109) suggests disabling the UAC to increase productivity.
Cheers all 🙂
Speaking for myself, when I had the same situation happen on my dual-boot system, I simply gave the necessary NTFS permissions and got it over with. If you're interested in trying that, just right-click what you want to change permissions on and choose Properties > Security > Edit button. Not very difficult, in my opinion
🙂
You asked how the "problem" behavior enhances security, but you're sort of asking the wrong question. If you were running WinXP, Win2000 or WinNT as a non-Admin, and you tried to play with files that your user account doesn't have privileges on, you wouldn't even get the UAC prompt, you'd just get ACCESS IS DENIED. It's an NTFS "problem" you're up against, namely that Win2000/XP/Vista/NT won't just hand over the keys to a user account that doesn't have permissions to something. Vista is merely the first Windows that doesn't make your Explorer session an Admin-level process by default, thus bringing to light the fact that your Users group needs to be given permissions on that stuff.
Sorry if that's not the simplest thing in the world to comprehend, but the bottom line is that processes running at lower-than-Admin privilege level
should not be able to just go around doing whatever they want. That would be a security disaster if they could. Since you have Admin rights, just give your Users group a Full Control permission to whatever you want, and be done with it.
If you prefer to run with UAC disabled, then it would be an especially good idea to be on top of your security game.
tips for you and if you aren't ready to run a non-Admin account (which evidently you aren't), still have a look at the hardware Data Execution Prevention, the Secunia Personal Software Inspector, and the AutoPlay control.