Re: CA ETrust and UAC

Posted: 06-01-2006, 11:05 PM

Zack Whittaker

Guest
Posts: n/a

I'm afraid not really - you can tweak it a little bit but every time that
the system needs administrative privaliges, it'll come up.

Here's how to tweak it so if you're an admin, it shouldn't show up:
http://www.vistabase.co.uk/welcome.p...rity/whatisuac

--
Zack Whittaker
» ZackNET Enterprises: www.zacknet.co.uk
» MSBlog on ResDev: www.msblog.org
» Vista Knowledge Base: www.vistabase.co.uk
» This mailing is provided "as is" with no warranties, and confers no
rights. All opinions expressed are those of myself unless stated so, and not
of my employer, best friend, Ghandi, my mother or my cat. Glad we cleared
that up!

--: Original message follows :--
"Alan Simpson" <alan@coolnerds.com> wrote in message
news:7E077FEF-D697-4BF7-8A54-84A020B886BF@microsoft.com...

> I'm using that beta of CA antivirus. When I log in I have to do two UAC
> approvals to get it loaded. I know how to turn off the whole UAC
> kit-and-caboodle through Local Security Policy to avoid that. But I'm
> wondering if there's a way to leave UAC on and just eliminate those
> approvals for CA ETrust AV.
>

Responses to "Re: CA ETrust and UAC"

Naseru

Guest
Posts: n/a

Re: CA ETrust and UAC

Posted: 06-02-2006, 02:57 PM

Nope... there's no Whitelist for UAC (yet, if at all).

ON a related note, if you don't press anything for the UAC prompt (i boot
the PC, then return about 10 mins later to actually use it) then the prompt
automatically disappears and the application never loads. I, for one, would
like a default action/whitelist feature in Vista's UAC system -- but any
"list" is prone to virus/rootkit/etc attacks.

- naseru

"Alan Simpson" <alan@coolnerds.com> wrote in message
news:7E077FEF-D697-4BF7-8A54-84A020B886BF@microsoft.com...

> I'm using that beta of CA antivirus. When I log in I have to do two UAC
> approvals to get it loaded. I know how to turn off the whole UAC
> kit-and-caboodle through Local Security Policy to avoid that. But I'm
> wondering if there's a way to leave UAC on and just eliminate those
> approvals for CA ETrust AV.
>

Laszlo Dobos

Guest
Posts: n/a

Re: CA ETrust and UAC

Posted: 06-05-2006, 01:20 PM

turn off uac for administrators..
1. start / run (window key + r)
2. secpol.msc
3. in the security policy you find UAC settings, one of them is
"run all administrators in built in admin approval mode" or somethink
similar..use DISABLED option!
4. restart and enjoy;P

--
Please rate this!
Best Regards
Laszlo Dobos

Chrismoo

Guest
Posts: n/a

Re: CA ETrust and UAC

Posted: 06-11-2006, 09:34 PM

Surely this defeats the whole point of what they are trying to do with
securing default user accounts?!!?

There should as another poster mentioned be something like a whitelist or an
application signing so that this elevation of priviledges is done without
user intervention - as it is a pain having to do this on every reboot.

Maybe also this is an issue with EZ Antivirus that will be dealt with in due
course....has anyone contacted CA?

"Laszlo Dobos" wrote:

> turn off uac for administrators..
> 1. start / run (window key + r)
> 2. secpol.msc
> 3. in the security policy you find UAC settings, one of them is
> "run all administrators in built in admin approval mode" or somethink
> similar..use DISABLED option!
> 4. restart and enjoy;P
>
> --
> Please rate this!
> Best Regards
> Laszlo Dobos
>
>
>

billh

Guest
Posts: n/a

Re: CA ETrust and UAC

Posted: 06-14-2006, 04:07 PM

I agree as if you log in as a standard user you have to put in an admin
password. I know this is still a beta but if it is in the finale what
will I have to every time my kid wants to use the computer run up and
put in my password so that Anti virus will work?

Chrismoo wrote:

> Surely this defeats the whole point of what they are trying to do with
> securing default user accounts?!!?
>
> There should as another poster mentioned be something like a whitelist or an
> application signing so that this elevation of priviledges is done without
> user intervention - as it is a pain having to do this on every reboot.
>
> Maybe also this is an issue with EZ Antivirus that will be dealt with in due
> course....has anyone contacted CA?
>
> "Laszlo Dobos" wrote:
>
>> turn off uac for administrators..
>> 1. start / run (window key + r)
>> 2. secpol.msc
>> 3. in the security policy you find UAC settings, one of them is
>> "run all administrators in built in admin approval mode" or somethink
>> similar..use DISABLED option!
>> 4. restart and enjoy;P
>>
>> --
>> Please rate this!
>> Best Regards
>> Laszlo Dobos
>>
>>
>>

Chrismoo

Guest
Posts: n/a

Re: CA ETrust and UAC

Posted: 06-14-2006, 02:24 PM

What is worse is that if you do not OK the prompt i.e. you wander off whilst
your PC is booting, etc. then the prompt just disppears after 30 odd seconds
and the program does not run......I guess (have not checked yet) that the
services are running and that it is just the system tray utils that are not
working if the prompt times out, otherwise the implications of unprotected or
not updated machines is kinda scary.....

....maybe this is just beta noise that will be resolved anyways...

"billh" wrote:

> I agree as if you log in as a standard user you have to put in an admin
> password. I know this is still a beta but if it is in the finale what
> will I have to every time my kid wants to use the computer run up and
> put in my password so that Anti virus will work?
>
> Chrismoo wrote:
> > Surely this defeats the whole point of what they are trying to do with
> > securing default user accounts?!!?
> >
> > There should as another poster mentioned be something like a whitelist or an
> > application signing so that this elevation of priviledges is done without
> > user intervention - as it is a pain having to do this on every reboot.
> >
> > Maybe also this is an issue with EZ Antivirus that will be dealt with in due
> > course....has anyone contacted CA?
> >
> > "Laszlo Dobos" wrote:
> >
> >> turn off uac for administrators..
> >> 1. start / run (window key + r)
> >> 2. secpol.msc
> >> 3. in the security policy you find UAC settings, one of them is
> >> "run all administrators in built in admin approval mode" or somethink
> >> similar..use DISABLED option!
> >> 4. restart and enjoy;P
> >>
> >> --
> >> Please rate this!
> >> Best Regards
> >> Laszlo Dobos
> >>
> >>
> >>

>

Michael Palumbo

Guest
Posts: n/a

Re: CA ETrust and UAC

Posted: 07-07-2006, 10:12 PM

I know I'm late to this thread, but if you're watching it, I have some
answers for you, since I see nothing was answered 100%.

It is just the tray icons that won't get loaded and if you want to keep UAC
running but don't want to see the promts, simply disable CIVRID.exe and
CAVTray.exe.

I'm not 100% sure if the auto-update for CAV continues to work without the
CAVTray.exe running. Just keep an eye on that (Windows Security Center
should let you know if your definitions get out of date anyway).

You do still have full protection though, if you want to see for yourself
simply go to http://eicar.com/ and try to download the test file. EZ
Antivirus has a FIT! :-) Just like it's supposed to.

Mic

"Chrismoo" <Chrismoo@discussions.microsoft.com> wrote in message
news:F885AA20-6988-4AD1-A9F4-C20E11BB03CA@microsoft.com...

> What is worse is that if you do not OK the prompt i.e. you wander off
> whilst
> your PC is booting, etc. then the prompt just disppears after 30 odd
> seconds
> and the program does not run......I guess (have not checked yet) that the
> services are running and that it is just the system tray utils that are
> not
> working if the prompt times out, otherwise the implications of unprotected
> or
> not updated machines is kinda scary.....
>
> ...maybe this is just beta noise that will be resolved anyways...
>
> "billh" wrote:
>
>> I agree as if you log in as a standard user you have to put in an admin
>> password. I know this is still a beta but if it is in the finale what
>> will I have to every time my kid wants to use the computer run up and
>> put in my password so that Anti virus will work?
>>
>> Chrismoo wrote:
>> > Surely this defeats the whole point of what they are trying to do with
>> > securing default user accounts?!!?
>> >
>> > There should as another poster mentioned be something like a whitelist
>> > or an
>> > application signing so that this elevation of priviledges is done
>> > without
>> > user intervention - as it is a pain having to do this on every reboot.
>> >
>> > Maybe also this is an issue with EZ Antivirus that will be dealt with
>> > in due
>> > course....has anyone contacted CA?
>> >
>> > "Laszlo Dobos" wrote:
>> >
>> >> turn off uac for administrators..
>> >> 1. start / run (window key + r)
>> >> 2. secpol.msc
>> >> 3. in the security policy you find UAC settings, one of them is
>> >> "run all administrators in built in admin approval mode" or somethink
>> >> similar..use DISABLED option!
>> >> 4. restart and enjoy;P
>> >>
>> >> --
>> >> Please rate this!
>> >> Best Regards
>> >> Laszlo Dobos
>> >>
>> >>
>> >>
>>

LinkBack

Thread Tools

Display Modes

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Forum Jump

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
eTrust AV Freebie BSODs Vista	Andre Da Costa [Extended64]	Windows Vista Security	11	06-01-2006 06:53 PM