Jo
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission
Posted: 10-19-2006, 09:06 PM
Is there any way to give a program permanent permission to run as
administrator? I have several programs that require this, even though I AM
running as an administrator and it is annoying to have to do this every time
I run the program. Thanks
Jo

"Jimmy Brush" wrote:
> If a program does not automatically ask for administrator permission,
> right-click it and click Run As Administrator.
>
>
> --
> - JB
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/
>
Jimmy Brush
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission
Posted: 10-19-2006, 10:46 PM
Hello,

This is a good question, but unfortunately this is not possible right now.

The reason is because allowing this would allow programs to attack those
programs which you have set to always run with administrator power.

Imagine the case where you have set the command prompt to always run with
admin power without notifying you. A rogue program could then start up a
command prompt behind the scenes and perform privileged actions, essentially
bypassing UAC.

If Microsoft were to have built this feature into Windows Vista, before long
all the malware would have learned how to take advantage of it, effectively
making UAC worthless.

In the future, programs that don't really need admin power won't ask for it,
so this problem will not become as prevalent as it is today. And, hopefully
Microsoft will figure out a way to allow this functionality without creating
a security vulnerability.


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

Tim
Guest
Posts: n/a
 
RE: ANS: "What's the deal with UAC (Windows Needs Your Permission scre
Posted: 10-25-2006, 02:57 PM
Jimmy,

Maybe you can help me...I'm trying to install HP Printer driver and
software. I'm logged in as Administrator and running RC2. The install fails
with an error of "Can't use 'run as administrator' to install this software".
It gives the same error if I actually use the "run as administrator" switch
to run it.

Any ideas?

Tim

"Jimmy Brush" wrote:
> Hello,
>
> I've noticed that a lot of the questions in these newsgroups are either
> directly or indirectly related to UAC (User Account Control). In this post,
> I will go over what UAC does, how it works, the reasoning behind it, how to
> use your computer with UAC on, why you shouldn't turn UAC off, and answer
> some common questions and respond to common complaints about it.
>
>
> * What is UAC and what does it do?
>
> UAC mode (also known as Admin Approval Mode) is a mode of operation that
> (primarily) affects the way administrator accounts work.
>
> When UAC is turned on (which it is by default), you must explicitly give
> permission to any program that wants to use "administrator" powers. Any
> program that tries to use admin powers without your permission will be
> denied access.
>
>
> * How does UAC work
>
> When UAC mode is enabled, every program that you run will be given only
> "standard user" access to the system, even when you are logged in as an
> administrator. There are only 2 ways that a program can be "elevated" to get
> full admin access to the system:
>
> - If it automatically asks you for permission when it starts up, and you
> click Continue
> - If you start the program with permission by right-clicking it, then
> clicking Run As Administrator
>
> A program either starts with STANDARD rights or, if you give permission,
> ADMINISTRATOR rights, and once the program is running it cannot change from
> one to the other.
>
> If a program that you have already started with admin powers starts another
> program, that program will automatically be given admin powers without
> needing your permission. For example, if you start Windows Explorer as
> administrator, and then double-click on a text file, notepad will open and
> display the contents of the text file. Since notepad was opened from the
> admin explorer window, notepad WILL ALSO automatically run WITH admin
> powers, and will not ask for permission.
>
>
> * What's the point of UAC?
>
> UAC is designed to put control of your computer back into your hands,
> instead of at the mercy of the programs running on your computer.
>
> When logged in as an administrator in Windows XP, any program that could
> somehow get itself started could take control of the entire computer without
> you even knowing about it.
>
> With UAC turned on, you must know about and authorize a program in order for
> it to gain admin access to the system, REGARDLESS of how the program got
> there or how it is started.
>
> This is important to all levels of users - from home users to enterprise
> administrators. Being alerted when any program tries to use admin powers and
> being able to unilaterally disallow a program from having such power is a
> VERY powerful ability. No longer is the security of the system tantamount to
> "crossing one's fingers and hoping for the best" - YOU now control your
> system.
>
>
> * How do I effectively use my computer with UAC turned on?
>
> It's easy. Just keep in mind that programs don't have admin access to your
> computer unless you give them permission. Microsoft programs that come with
> Windows Vista that need admin access will always ask for admin permissions
> when you start them. However, most other programs will not.
>
> This will change after Windows Vista is released - all Windows Vista-era
> programs that need admin power will always ask you for it. Until then, you
> will need to run programs that need administrative powers that were not
> designed for Windows Vista "as administrator".
>
> Command-line programs do not automatically ask for permission. Not even the
> built-in ones. You will need to run the command prompt "as administrator" in
> order to run administrative command-line utilities.
>
> Working with files and folders from Windows Explorer can be a real pain when
> you are not working with your own files. When you are needing to work with
> system files, files that you didn't create, or files from another operating
> system, run Windows Explorer "as administrator". In the same vein, ANY
> program that you run that needs access to system files or files that you
> didn't create will need to be ran "as administrator".
>
> If you are going to be working with the control panel for a long time,
> running control.exe "as administrator" will make things less painful - you
> will only be asked for permission once, instead of every time you try to
> change a system-wide setting.
>
> In short:
>
> - Run command prompt as admin when you need to run admin utilities
> - Run setup programs as admin
> - Run programs not designed for Vista as admin if (and only if) they need
> admin access
> - Run Windows Explorer as admin when you need access to files that aren't
> yours or system files
> - Run programs that need access to files that aren't yours or system files
> as admin
> - Run control.exe as admin when changing many settings in the control panel
>
>
> * UAC is annoying, I want to turn it off
>
> Having to go through an extra step (clicking Continue) when opening
> administrative programs is annoying. And it is also very frustrating to run
> a program that needs admin power but doesn't automatically ask you for it
> (you have to right-click these programs and click Run As Administrator for
> them to run correctly).
>
> But, keep in mind that these small inconveniences are insignificant when
> weighed against the benefit: NO PROGRAM can get full access to your system
> without you being informed. The first time the permission dialog pops up and
> it is from some program that you know nothing about or that you do not want
> to have access to your system, you will be very glad that the Cancel button
> was available to you.
>
>
> * Answers to common questions and responses to common criticism
>
> Q: I have anti-virus, a firewall, a spyware-detector, or something similar.
> Why do I need UAC?
>
> A: Detectors can only see known threats. And of all the known threats in
> existence, they only detect the most common of those threats. With UAC
> turned on, *you* control what programs have access to your computer - you
> can stop ALL threats. Detectors are nice, but they're not enough. How many
> people do you know that have detectors of all kinds and yet are still
> infested with programs that they don't want on their computer? Everyone that
> I have ever helped falls into this category.
>
>
> Q: Does UAC replace anti-virus, a firewall, a spyware-detector, or similar
> programs?
>
> A: No. Microsoft recommends that you use a virus scanner and/or other types
> of security software. These types of programs compliment UAC: They will get
> rid of known threats for you. UAC will allow you to stop unknown threats, as
> well as prevent any program that you do not trust from gaining access to
> your computer.
>
>
> Q: I am a system administrator - I have no use for UAC.
>
> A: Really? You don't NEED to know when a program on your computer runs with
> admin powers? You are a system administrator and you really could care less
> when a program runs that has full control of your system, and possibly your
> entire domain? You're joking, right?
>
>
> Q: UAC keeps me from accessing files and folders
>
> A: No, it doesn't - UAC protects you from programs that would try to delete
> or modify system files and folders without your knowledge. If you want a
> program to have full access to the files on your computer, you will need to
> run it as admin. Or as an alternative, if possible, put the files it needs
> access to in a place that all programs have access to - such as your
> documents folder, or any folder under your user folder.
>
>
> Q: UAC stops programs from working correctly
>
> A: If a program needs admin power and it doesn't ask you for permission when
> it starts, you have to give it admin powers by right-clicking it and
> clicking Run As Administrator. Programs should work like they did in XP when
> you use Run As Administrator. If they don't, then this is a bug.
>
>
> Q: UAC keeps me from doing things that I could do in XP
>
> A: This is not the case. Just remember that programs that do not ask for
> permission when they start do not get admin access to your computer. If you
> are using a tool that needs admin access, right-click it and click Run As
> Administrator. It should work exactly as it did in XP. If it does not, then
> this is a bug.
>
>
> Q: UAC is Microsoft's way of controlling my computer and preventing me from
> using it!
>
> A: This is 100% UNTRUE. UAC puts control of your computer IN YOUR HANDS by
> allowing you to prevent unwanted programs from accessing your computer.
> *Everything* that you can do with UAC turned off, you can do with it turned
> on. If this is not the case, then that is a bug.
>
>
> Q: I don't need Windows to hold my freaking hand! I *know* what I've got on
> my computer, and I *know* when programs run! I am logged on as an
> ADMINISTRATOR for a dang reason!
>
> A: I accept the way that you think, and can see the logic, but I don't agree
> with this idea. UAC is putting POWER in your hands by letting you CONTROL
> what runs on your system. But you want to give up this control and allow all
> programs to run willy-nilly. Look, if you want to do this go right ahead,
> you can turn UAC off and things will return to how they worked in XP. But,
> don't be surprised when either 1) You run something by mistake that messes
> up your computer and/or domain, or 2) A program somehow gets on your
> computer that you know nothing about that takes over your computer and/or
> domain, and UAC would have allowed you to have stopped it.
>
>
> - JB
>
> Vista Support FAQ
> http://www.jimmah.com/vista/
>
Richard Urban
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission scre
Posted: 10-25-2006, 03:04 PM
None of the HP printer drivers and software is Vista ready. When XP was
introduced it was a few months, and longer, before they released updated
drivers for their printers. Some printers they never updated.

Wait and see what happens.

--

Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

"Tim" <Tim@discussions.microsoft.com> wrote in message
news:58DF5105-F27E-4674-9A82-951AEEE04D3C@microsoft.com...
> Jimmy,
>
> Maybe you can help me...I'm trying to install HP Printer driver and
> software. I'm logged in as Administrator and running RC2. The install
> fails
> with an error of "Can't use 'run as administrator' to install this
> software".
> It gives the same error if I actually use the "run as administrator"
> switch
> to run it.
>
> Any ideas?
>
> Tim
>
> "Jimmy Brush" wrote:
>
>> Hello,
>>
>> I've noticed that a lot of the questions in these newsgroups are either
>> directly or indirectly related to UAC (User Account Control). In this
>> post,
>> I will go over what UAC does, how it works, the reasoning behind it, how
>> to
>> use your computer with UAC on, why you shouldn't turn UAC off, and answer
>> some common questions and respond to common complaints about it.
>>
>>
>> * What is UAC and what does it do?
>>
>> UAC mode (also known as Admin Approval Mode) is a mode of operation that
>> (primarily) affects the way administrator accounts work.
>>
>> When UAC is turned on (which it is by default), you must explicitly give
>> permission to any program that wants to use "administrator" powers. Any
>> program that tries to use admin powers without your permission will be
>> denied access.
>>
>>
>> * How does UAC work
>>
>> When UAC mode is enabled, every program that you run will be given only
>> "standard user" access to the system, even when you are logged in as an
>> administrator. There are only 2 ways that a program can be "elevated" to
>> get
>> full admin access to the system:
>>
>> - If it automatically asks you for permission when it starts up, and you
>> click Continue
>> - If you start the program with permission by right-clicking it, then
>> clicking Run As Administrator
>>
>> A program either starts with STANDARD rights or, if you give permission,
>> ADMINISTRATOR rights, and once the program is running it cannot change
>> from
>> one to the other.
>>
>> If a program that you have already started with admin powers starts
>> another
>> program, that program will automatically be given admin powers without
>> needing your permission. For example, if you start Windows Explorer as
>> administrator, and then double-click on a text file, notepad will open
>> and
>> display the contents of the text file. Since notepad was opened from the
>> admin explorer window, notepad WILL ALSO automatically run WITH admin
>> powers, and will not ask for permission.
>>
>>
>> * What's the point of UAC?
>>
>> UAC is designed to put control of your computer back into your hands,
>> instead of at the mercy of the programs running on your computer.
>>
>> When logged in as an administrator in Windows XP, any program that could
>> somehow get itself started could take control of the entire computer
>> without
>> you even knowing about it.
>>
>> With UAC turned on, you must know about and authorize a program in order
>> for
>> it to gain admin access to the system, REGARDLESS of how the program got
>> there or how it is started.
>>
>> This is important to all levels of users - from home users to enterprise
>> administrators. Being alerted when any program tries to use admin powers
>> and
>> being able to unilaterally disallow a program from having such power is a
>> VERY powerful ability. No longer is the security of the system tantamount
>> to
>> "crossing one's fingers and hoping for the best" - YOU now control your
>> system.
>>
>>
>> * How do I effectively use my computer with UAC turned on?
>>
>> It's easy. Just keep in mind that programs don't have admin access to
>> your
>> computer unless you give them permission. Microsoft programs that come
>> with
>> Windows Vista that need admin access will always ask for admin
>> permissions
>> when you start them. However, most other programs will not.
>>
>> This will change after Windows Vista is released - all Windows Vista-era
>> programs that need admin power will always ask you for it. Until then,
>> you
>> will need to run programs that need administrative powers that were not
>> designed for Windows Vista "as administrator".
>>
>> Command-line programs do not automatically ask for permission. Not even
>> the
>> built-in ones. You will need to run the command prompt "as administrator"
>> in
>> order to run administrative command-line utilities.
>>
>> Working with files and folders from Windows Explorer can be a real pain
>> when
>> you are not working with your own files. When you are needing to work
>> with
>> system files, files that you didn't create, or files from another
>> operating
>> system, run Windows Explorer "as administrator". In the same vein, ANY
>> program that you run that needs access to system files or files that you
>> didn't create will need to be ran "as administrator".
>>
>> If you are going to be working with the control panel for a long time,
>> running control.exe "as administrator" will make things less painful -
>> you
>> will only be asked for permission once, instead of every time you try to
>> change a system-wide setting.
>>
>> In short:
>>
>> - Run command prompt as admin when you need to run admin utilities
>> - Run setup programs as admin
>> - Run programs not designed for Vista as admin if (and only if) they need
>> admin access
>> - Run Windows Explorer as admin when you need access to files that aren't
>> yours or system files
>> - Run programs that need access to files that aren't yours or system
>> files
>> as admin
>> - Run control.exe as admin when changing many settings in the control
>> panel
>>
>>
>> * UAC is annoying, I want to turn it off
>>
>> Having to go through an extra step (clicking Continue) when opening
>> administrative programs is annoying. And it is also very frustrating to
>> run
>> a program that needs admin power but doesn't automatically ask you for it
>> (you have to right-click these programs and click Run As Administrator
>> for
>> them to run correctly).
>>
>> But, keep in mind that these small inconveniences are insignificant when
>> weighed against the benefit: NO PROGRAM can get full access to your
>> system
>> without you being informed. The first time the permission dialog pops up
>> and
>> it is from some program that you know nothing about or that you do not
>> want
>> to have access to your system, you will be very glad that the Cancel
>> button
>> was available to you.
>>
>>
>> * Answers to common questions and responses to common criticism
>>
>> Q: I have anti-virus, a firewall, a spyware-detector, or something
>> similar.
>> Why do I need UAC?
>>
>> A: Detectors can only see known threats. And of all the known threats in
>> existence, they only detect the most common of those threats. With UAC
>> turned on, *you* control what programs have access to your computer - you
>> can stop ALL threats. Detectors are nice, but they're not enough. How
>> many
>> people do you know that have detectors of all kinds and yet are still
>> infested with programs that they don't want on their computer? Everyone
>> that
>> I have ever helped falls into this category.
>>
>>
>> Q: Does UAC replace anti-virus, a firewall, a spyware-detector, or
>> similar
>> programs?
>>
>> A: No. Microsoft recommends that you use a virus scanner and/or other
>> types
>> of security software. These types of programs compliment UAC: They will
>> get
>> rid of known threats for you. UAC will allow you to stop unknown threats,
>> as
>> well as prevent any program that you do not trust from gaining access to
>> your computer.
>>
>>
>> Q: I am a system administrator - I have no use for UAC.
>>
>> A: Really? You don't NEED to know when a program on your computer runs
>> with
>> admin powers? You are a system administrator and you really could care
>> less
>> when a program runs that has full control of your system, and possibly
>> your
>> entire domain? You're joking, right?
>>
>>
>> Q: UAC keeps me from accessing files and folders
>>
>> A: No, it doesn't - UAC protects you from programs that would try to
>> delete
>> or modify system files and folders without your knowledge. If you want a
>> program to have full access to the files on your computer, you will need
>> to
>> run it as admin. Or as an alternative, if possible, put the files it
>> needs
>> access to in a place that all programs have access to - such as your
>> documents folder, or any folder under your user folder.
>>
>>
>> Q: UAC stops programs from working correctly
>>
>> A: If a program needs admin power and it doesn't ask you for permission
>> when
>> it starts, you have to give it admin powers by right-clicking it and
>> clicking Run As Administrator. Programs should work like they did in XP
>> when
>> you use Run As Administrator. If they don't, then this is a bug.
>>
>>
>> Q: UAC keeps me from doing things that I could do in XP
>>
>> A: This is not the case. Just remember that programs that do not ask for
>> permission when they start do not get admin access to your computer. If
>> you
>> are using a tool that needs admin access, right-click it and click Run As
>> Administrator. It should work exactly as it did in XP. If it does not,
>> then
>> this is a bug.
>>
>>
>> Q: UAC is Microsoft's way of controlling my computer and preventing me
>> from
>> using it!
>>
>> A: This is 100% UNTRUE. UAC puts control of your computer IN YOUR HANDS
>> by
>> allowing you to prevent unwanted programs from accessing your computer.
>> *Everything* that you can do with UAC turned off, you can do with it
>> turned
>> on. If this is not the case, then that is a bug.
>>
>>
>> Q: I don't need Windows to hold my freaking hand! I *know* what I've got
>> on
>> my computer, and I *know* when programs run! I am logged on as an
>> ADMINISTRATOR for a dang reason!
>>
>> A: I accept the way that you think, and can see the logic, but I don't
>> agree
>> with this idea. UAC is putting POWER in your hands by letting you CONTROL
>> what runs on your system. But you want to give up this control and allow
>> all
>> programs to run willy-nilly. Look, if you want to do this go right ahead,
>> you can turn UAC off and things will return to how they worked in XP.
>> But,
>> don't be surprised when either 1) You run something by mistake that
>> messes
>> up your computer and/or domain, or 2) A program somehow gets on your
>> computer that you know nothing about that takes over your computer and/or
>> domain, and UAC would have allowed you to have stopped it.
>>
>>
>> - JB
>>
>> Vista Support FAQ
>> http://www.jimmah.com/vista/
>>

Tom Lake
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission scre
Posted: 10-25-2006, 03:40 PM
> Maybe you can help me...I'm trying to install HP Printer driver and
> software. I'm logged in as Administrator and running RC2. The install
> fails
> with an error of "Can't use 'run as administrator' to install this
> software".
> It gives the same error if I actually use the "run as administrator"
> switch
> to run it.
>
> Any ideas?
Try to set the compatibility of the setup program to XP.

Tom Lake


Jeff
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission scre
Posted: 10-25-2006, 05:54 PM
Richard may be correct;
I have had an ongoing issue about this with HP-from 1st line techs
through their bosses;to their bosses;bosses.
And bottom line from HP;(they're consistent at least) and I paraphrase this;
" We will have Vista compatable drivers for our products;when Vista
releases. We do not support beta.).
So I gave my HP printer to a family member;and bought an Epson;that has
worked since Beta 2 5384.
Try as much as you like; and more power to you if you get a driver;but since
RTM isn't that far off; I'de hold tight; and wait for HP Vista compatable
drivers.

Jeff

"Tom Lake" <tlake@twcny.rr.com> wrote in message
news:%23sVTovE%23GHA.4388@TK2MSFTNGP02.phx.gbl...
>> Maybe you can help me...I'm trying to install HP Printer driver and
>> software. I'm logged in as Administrator and running RC2. The install
>> fails
>> with an error of "Can't use 'run as administrator' to install this
>> software".
>> It gives the same error if I actually use the "run as administrator"
>> switch
>> to run it.
>>
>> Any ideas?
>
> Try to set the compatibility of the setup program to XP.
>
> Tom Lake
>
Jo
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission
Posted: 10-28-2006, 04:36 PM
Very few programs actually ask me to approve them everytime I run them, in
fact, hardly any. If your argument is correct, then all those programs could
be run be a "rogue" program. So what exactly is being protected? I thought
that was what anti-virus and programs like Defender were for? Do you
actually have to give permission every time you run every program? I have
UAC turned on, and it is only one or two that require it every time.

"Jimmy Brush" wrote:
> Hello,
>
> This is a good question, but unfortunately this is not possible right now.
>
> The reason is because allowing this would allow programs to attack those
> programs which you have set to always run with administrator power.
>
> Imagine the case where you have set the command prompt to always run with
> admin power without notifying you. A rogue program could then start up a
> command prompt behind the scenes and perform privileged actions, essentially
> bypassing UAC.
>
> If Microsoft were to have built this feature into Windows Vista, before long
> all the malware would have learned how to take advantage of it, effectively
> making UAC worthless.
>
> In the future, programs that don't really need admin power won't ask for it,
> so this problem will not become as prevalent as it is today. And, hopefully
> Microsoft will figure out a way to allow this functionality without creating
> a security vulnerability.
>
>
> --
> - JB
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/
>
deebs
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission
Posted: 10-28-2006, 09:22 PM
I think the reason is that programs running under an admin account have
access to a wider range of stuff.

If the program is from a reliable source then fine, there are no problems?

However, should the program be from an unreliable source then allowing it
full (or foolish) access to stuff under an admin account is not a very wise
thing to do.

Hence:

1 - install from admin

2 - run from limited user.

I'd guess that all if not most reputable software providers will conform to
good standards sooner if not later.

In the meantime I think it is better to conclude that UAC is your friend
with, for some users, a degree of experience and wisdom that far exceeds
that of the user wishing they could always run as admin rather than limited
user.


"Jo" <Jo@discussions.microsoft.com> wrote in message
news:1EB7FFC6-7274-47DD-8412-AD80C0EAC689@microsoft.com...
> Very few programs actually ask me to approve them everytime I run them, in
> fact, hardly any. If your argument is correct, then all those programs
> could
> be run be a "rogue" program. So what exactly is being protected? I
> thought
> that was what anti-virus and programs like Defender were for? Do you
> actually have to give permission every time you run every program? I have
> UAC turned on, and it is only one or two that require it every time.
>
> "Jimmy Brush" wrote:
>
>> Hello,
>>
>> This is a good question, but unfortunately this is not possible right
>> now.
>>
>> The reason is because allowing this would allow programs to attack those
>> programs which you have set to always run with administrator power.
>>
>> Imagine the case where you have set the command prompt to always run with
>> admin power without notifying you. A rogue program could then start up a
>> command prompt behind the scenes and perform privileged actions,
>> essentially
>> bypassing UAC.
>>
>> If Microsoft were to have built this feature into Windows Vista, before
>> long
>> all the malware would have learned how to take advantage of it,
>> effectively
>> making UAC worthless.
>>
>> In the future, programs that don't really need admin power won't ask for
>> it,
>> so this problem will not become as prevalent as it is today. And,
>> hopefully
>> Microsoft will figure out a way to allow this functionality without
>> creating
>> a security vulnerability.
>>
>>
>> --
>> - JB
>>
>> Windows Vista Support Faq
>> http://www.jimmah.com/vista/
>>
Jimmy Brush
Guest
Posts: n/a
 
Re: ANS: "What's the deal with UAC (Windows Needs Your Permission
Posted: 10-29-2006, 01:10 AM
> Very few programs actually ask me to approve them everytime I run them, in
> fact, hardly any. If your argument is correct, then all those programs
> could
> be run be a "rogue" program. So what exactly is being protected?
If a program does NOT ask you to approve it when it starts, that program
DOES NOT have administrator power, even if you are logged in as an
administrator. Only programs that ask you for permission when they start
have administrator power.

This means that unless you give an application permission when it starts, it
is impossible for it to do such things as delete/modify/create any file that
you do not have specific write access to (such as system files, program
files, etc), change/create/delete registry settings that affect the entire
computer, load drivers, change system settings, etc.

In essance, programs run as a "limited user" as defined by XP unless they
prompt you for permission, or you right-click them and click Run As
Administrator, in which case they run as an administrator.
> I thought
> that was what anti-virus and programs like Defender were for?
The anti-virus and defender programs detect known malware and remove them
for you.

UAC is designed to allow you to choose which programs have complete access
to your system. This allows you to prevent programs that you do not trust
from gaining access to your computer. Using UAC, you can help prevent
unidentified malware from getting onto your system by being vigilant;
however, that is not the explicit purpose of UAC - UAC is meant to give you
the supreme control over which programs have complete access to your
computer, for you to use as you see fit.
> Do you
> actually have to give permission every time you run every program? I have
> UAC turned on, and it is only one or two that require it every time.
No, only those programs that ask for administrator power will need to be
approved every time they are ran.

--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

Jo
Guest
Posts: n/a
 
HP Print Drivers Response
Posted: 10-30-2006, 02:01 AM
I don't know if this will help you, but I actually got my Photosmart 1115 to
install in Vista by force installing the drivers for the 7800 series
photosmart that are included with Vista. I got this suggestion from another
user of this newsgroup and it worked! I can now print from the HP and so far
it has worked, though I haven't tried it from every possible program.

"Tim" wrote:
> Jimmy,
>
> Maybe you can help me...I'm trying to install HP Printer driver and
> software. I'm logged in as Administrator and running RC2. The install fails
> with an error of "Can't use 'run as administrator' to install this software".
> It gives the same error if I actually use the "run as administrator" switch
> to run it.
>
> Any ideas?
>
> Tim
>
> "Jimmy Brush" wrote:
>
> > Hello,
> >
> > I've noticed that a lot of the questions in these newsgroups are either
> > directly or indirectly related to UAC (User Account Control). In this post,
> > I will go over what UAC does, how it works, the reasoning behind it, how to
> > use your computer with UAC on, why you shouldn't turn UAC off, and answer
> > some common questions and respond to common complaints about it.
> >
> >
> > * What is UAC and what does it do?
> >
> > UAC mode (also known as Admin Approval Mode) is a mode of operation that
> > (primarily) affects the way administrator accounts work.
> >
> > When UAC is turned on (which it is by default), you must explicitly give
> > permission to any program that wants to use "administrator" powers. Any
> > program that tries to use admin powers without your permission will be
> > denied access.
> >
> >
> > * How does UAC work
> >
> > When UAC mode is enabled, every program that you run will be given only
> > "standard user" access to the system, even when you are logged in as an
> > administrator. There are only 2 ways that a program can be "elevated" to get
> > full admin access to the system:
> >
> > - If it automatically asks you for permission when it starts up, and you
> > click Continue
> > - If you start the program with permission by right-clicking it, then
> > clicking Run As Administrator
> >
> > A program either starts with STANDARD rights or, if you give permission,
> > ADMINISTRATOR rights, and once the program is running it cannot change from
> > one to the other.
> >
> > If a program that you have already started with admin powers starts another
> > program, that program will automatically be given admin powers without
> > needing your permission. For example, if you start Windows Explorer as
> > administrator, and then double-click on a text file, notepad will open and
> > display the contents of the text file. Since notepad was opened from the
> > admin explorer window, notepad WILL ALSO automatically run WITH admin
> > powers, and will not ask for permission.
> >
> >
> > * What's the point of UAC?
> >
> > UAC is designed to put control of your computer back into your hands,
> > instead of at the mercy of the programs running on your computer.
> >
> > When logged in as an administrator in Windows XP, any program that could
> > somehow get itself started could take control of the entire computer without
> > you even knowing about it.
> >
> > With UAC turned on, you must know about and authorize a program in order for
> > it to gain admin access to the system, REGARDLESS of how the program got
> > there or how it is started.
> >
> > This is important to all levels of users - from home users to enterprise
> > administrators. Being alerted when any program tries to use admin powers and
> > being able to unilaterally disallow a program from having such power is a
> > VERY powerful ability. No longer is the security of the system tantamount to
> > "crossing one's fingers and hoping for the best" - YOU now control your
> > system.
> >
> >
> > * How do I effectively use my computer with UAC turned on?
> >
> > It's easy. Just keep in mind that programs don't have admin access to your
> > computer unless you give them permission. Microsoft programs that come with
> > Windows Vista that need admin access will always ask for admin permissions
> > when you start them. However, most other programs will not.
> >
> > This will change after Windows Vista is released - all Windows Vista-era
> > programs that need admin power will always ask you for it. Until then, you
> > will need to run programs that need administrative powers that were not
> > designed for Windows Vista "as administrator".
> >
> > Command-line programs do not automatically ask for permission. Not even the
> > built-in ones. You will need to run the command prompt "as administrator" in
> > order to run administrative command-line utilities.
> >
> > Working with files and folders from Windows Explorer can be a real pain when
> > you are not working with your own files. When you are needing to work with
> > system files, files that you didn't create, or files from another operating
> > system, run Windows Explorer "as administrator". In the same vein, ANY
> > program that you run that needs access to system files or files that you
> > didn't create will need to be ran "as administrator".
> >
> > If you are going to be working with the control panel for a long time,
> > running control.exe "as administrator" will make things less painful - you
> > will only be asked for permission once, instead of every time you try to
> > change a system-wide setting.
> >
> > In short:
> >
> > - Run command prompt as admin when you need to run admin utilities
> > - Run setup programs as admin
> > - Run programs not designed for Vista as admin if (and only if) they need
> > admin access
> > - Run Windows Explorer as admin when you need access to files that aren't
> > yours or system files
> > - Run programs that need access to files that aren't yours or system files
> > as admin
> > - Run control.exe as admin when changing many settings in the control panel
> >
> >
> > * UAC is annoying, I want to turn it off
> >
> > Having to go through an extra step (clicking Continue) when opening
> > administrative programs is annoying. And it is also very frustrating to run
> > a program that needs admin power but doesn't automatically ask you for it
> > (you have to right-click these programs and click Run As Administrator for
> > them to run correctly).
> >
> > But, keep in mind that these small inconveniences are insignificant when
> > weighed against the benefit: NO PROGRAM can get full access to your system
> > without you being informed. The first time the permission dialog pops up and
> > it is from some program that you know nothing about or that you do not want
> > to have access to your system, you will be very glad that the Cancel button
> > was available to you.
> >
> >
> > * Answers to common questions and responses to common criticism
> >
> > Q: I have anti-virus, a firewall, a spyware-detector, or something similar.
> > Why do I need UAC?
> >
> > A: Detectors can only see known threats. And of all the known threats in
> > existence, they only detect the most common of those threats. With UAC
> > turned on, *you* control what programs have access to your computer - you
> > can stop ALL threats. Detectors are nice, but they're not enough. How many
> > people do you know that have detectors of all kinds and yet are still
> > infested with programs that they don't want on their computer? Everyone that
> > I have ever helped falls into this category.
> >
> >
> > Q: Does UAC replace anti-virus, a firewall, a spyware-detector, or similar
> > programs?
> >
> > A: No. Microsoft recommends that you use a virus scanner and/or other types
> > of security software. These types of programs compliment UAC: They will get
> > rid of known threats for you. UAC will allow you to stop unknown threats, as
> > well as prevent any program that you do not trust from gaining access to
> > your computer.
> >
> >
> > Q: I am a system administrator - I have no use for UAC.
> >
> > A: Really? You don't NEED to know when a program on your computer runs with
> > admin powers? You are a system administrator and you really could care less
> > when a program runs that has full control of your system, and possibly your
> > entire domain? You're joking, right?
> >
> >
> > Q: UAC keeps me from accessing files and folders
> >
> > A: No, it doesn't - UAC protects you from programs that would try to delete
> > or modify system files and folders without your knowledge. If you want a
> > program to have full access to the files on your computer, you will need to
> > run it as admin. Or as an alternative, if possible, put the files it needs
> > access to in a place that all programs have access to - such as your
> > documents folder, or any folder under your user folder.
> >
> >
> > Q: UAC stops programs from working correctly
> >
> > A: If a program needs admin power and it doesn't ask you for permission when
> > it starts, you have to give it admin powers by right-clicking it and
> > clicking Run As Administrator. Programs should work like they did in XP when
> > you use Run As Administrator. If they don't, then this is a bug.
> >
> >
> > Q: UAC keeps me from doing things that I could do in XP
> >
> > A: This is not the case. Just remember that programs that do not ask for
> > permission when they start do not get admin access to your computer. If you
> > are using a tool that needs admin access, right-click it and click Run As
> > Administrator. It should work exactly as it did in XP. If it does not, then
> > this is a bug.
> >
> >
> > Q: UAC is Microsoft's way of controlling my computer and preventing me from
> > using it!
> >
> > A: This is 100% UNTRUE. UAC puts control of your computer IN YOUR HANDS by
> > allowing you to prevent unwanted programs from accessing your computer.
> > *Everything* that you can do with UAC turned off, you can do with it turned
> > on. If this is not the case, then that is a bug.
> >
> >
> > Q: I don't need Windows to hold my freaking hand! I *know* what I've got on
> > my computer, and I *know* when programs run! I am logged on as an
> > ADMINISTRATOR for a dang reason!
> >
> > A: I accept the way that you think, and can see the logic, but I don't agree
> > with this idea. UAC is putting POWER in your hands by letting you CONTROL
> > what runs on your system. But you want to give up this control and allow all
> > programs to run willy-nilly. Look, if you want to do this go right ahead,
> > you can turn UAC off and things will return to how they worked in XP. But,
> > don't be surprised when either 1) You run something by mistake that messes
> > up your computer and/or domain, or 2) A program somehow gets on your
> > computer that you know nothing about that takes over your computer and/or
> > domain, and UAC would have allowed you to have stopped it.
> >
> >
> > - JB
> >
> > Vista Support FAQ
> > http://www.jimmah.com/vista/
> >
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Change a filetype's "edit with" independent of "open with"? frankspace Windows Vista File Management 0 06-27-2006 06:46 PM
Windows Vista and "Search for File" in the Cookies Folder saqib ali Windows Vista File Management 5 06-23-2006 01:24 PM
"Installation Could Not Open Windows Image file" Error Jake Henderson Windows Vista Install & Setup 7 06-15-2006 10:17 PM
"Installation Could Not Open Windows Image file" glenn.php Windows Vista Install & Setup 3 06-10-2006 01:37 AM
Longhorn Beta2: Error on adding Role "Windows Sharepoint Services" André M. Bautz Windows Vista Install & Setup 2 06-02-2006 01:34 PM