WinInfo Daily News   |   Windows IT Pro
in

SuperSite Blog

Windows Vista tip of the week: Make UAC less annoying

Readers of this site and listeners of the Windows Weekly podcast know that I advocate the use of User Account Control (UAC), Microsoft's unfairly maligned security technology. UAC does a lot more than just prompt you when you're about to make a potentially dangerous change to the system or run a program you downloaded from the Internet. It's also behind such related features as Internet Explorer 7's Protected Mode and Vista's virtualized file system and registry. So running UAC is, I think, a necessity for all Vista users.

That said, I do understand that some people find UAC's regular prompts to be somewhat annoying. Fortunately, you can leave UAC enabled but turn off the prompts. The following tip refers to Windows Vista users utilizing an administrator-class account (which I assume is most people) and should be utilized by power users and others who really know what they're doing.

Windows Vista Business, Enterprise, and Ultimate
Open Local Group Policy Editor (Start Menu Search, gpedit.msc), and navigate to Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options. In the right pane, scroll down to User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode. Double-click this entry and use the drop-down box in the Local Security Setting to change the value from Prompt for consent to Elevate without prompting. Then click OK and chose the Local Group Policy Editor. (Users looking for even more stringent security controls can go in the opposite direction and change the value to Prompt for credentials. This will cause every UAC dialog that appears to require you to enter your password.)

Windows Vista Home Basic and Home Premium
Open the Registry Editor (Start Menu Search, regedit.exe) and navigate to HKEY_LOCAL_MACHINE, SOFTWARE, Microsoft, Windows, CurrentVersion, Policies, System. In the right pane, find the value named ConsentPromptBehaviorAdmin. Double-click it and change its value data from 2 to 0. Then click OK and close the Registry Editor.

Like other UAC changes, this change will trigger a Windows Security Center warning. To turn off this warning--not recommended unless you really know what you're doing--launch Security Center and click the link titled Change the way Security Center alerts me in the left side of the window. Then, choose Don't notify me and don't display the icon (not recommended) from the resulting dialog.

This tip is derived from Chapter 9 of Windows Vista Secrets 2nd Edition, coming soon from Wiley & Sons.

Published May 11 2008, 04:41 PM by pthurrott
Filed under: ,

Comments

 

Cfischer83 said:

Maybe it's just me, but I think I can hit "Continue" or "Allow" the once or twice a week (max) that I see it.

Do you have a way of stopping OS X's far more annoying and continuous please-type-administrator-password-athon? ;)

May 11, 2008 4:18 PM
 

Explorer » Windows Vista tip of the week: Make UAC less annoying said:

Pingback from  Explorer » Windows Vista tip of the week: Make UAC less annoying

May 11, 2008 4:46 PM
 

Lindy said:

http://www.tweak-uac.com/

one of the first tweeks I made back when I actually ran Vista.

May 11, 2008 5:21 PM
 

gorath said:

doesn't this kind of make UAC pointless anyway, if it just elevates without permission?

May 11, 2008 7:04 PM
 

Xtreem0 said:

@gorath

Yes but this is assuming that you already know the files that you are going to download are save. And if your some sad user from xp who fined's any secerity prompting a terrible idea (never used linux or osx).

May 12, 2008 7:22 AM
 

AlanRR said:

I don't mind UAC prompts, what I find frustrating is when it prevents me from doing things I want to do.  As an example, I open the hosts file in a non-elevated copy of notepad I can't save any changes back to the default location.  I would rather UAC prompt me and allow elevated save permissions.

May 12, 2008 8:18 AM
 

nmg82 said:

very useful tip paul...thanks...

May 12, 2008 8:35 AM
 

gorath said:

But what's the difference between doing this, an turning UAC off?

May 12, 2008 12:35 PM
 

pthurrott said:

If you turn off UAC, you lose Vista features like Internet Explorer 7's Protected Mode and the virtualized file system and registry.

May 12, 2008 1:57 PM
 

gorath said:

Doesn't bypassing UAC make them ineffective anyhow? (round and round!)

May 12, 2008 6:54 PM
 

Link Love | Unexpected said:

Pingback from  Link Love | Unexpected

May 13, 2008 6:15 AM
 

subzerohitman721 said:

Good tip, but I think this is one of those Vista issues blown way out of proportion. Its only for the umpteenth time, ONE CLICK. Its such a non issue for me. You guys act like its 20 clicks and your passworld. Just leave the UAC on and deal with the one click.

May 13, 2008 3:55 PM

About pthurrott

Paul Thurrott is the guy behind the SuperSite for Windows. Way behind. :)
SPONSORED LINKS FEATURED LINKS

Interested in Email Encryption? Read about the advantages of identity-based encryption in this free report. Order Your SQL Fundamentals CD Today! Learn how to use SQL Server, understand Office integration techniques and dive into the essentials of SQL Express and Visual Basic with this free SQL Fundamentals CD. Virtualization Congress Oct. 14-16 in London Don't miss Virtualization Congress, the premiere EMEA conference dedicated to hardware, OS and application virtualization. Oct. 14-16. IT ConnectionsDive into the new Microsoft platforms and products you implement and support with the experts from Microsoft, TechNet Magazine, Windows ITPro and industry gurus. There are 70+ sessions and interactive panels with networking opportunities. Attention User Group Leaders...Announcing the eNews Generator—a FREE HTML e-newsletter builder for user group leaders. Build your HTML and text e-newsletters in minutes and add Windows IT Pro & SQL Server Mag articles alongside your own message!. Master SharePoint with 3 eLearning SeminarsLearn how to build a better SharePoint infrastructure and enable powerful collaboration with MVPs Dan Holme and Michael Noel. Register today! Get SQL Server 2008 at WinConnectionsDon’t miss Microsoft Exchange and Windows Connections conferences, the premier events for Microsoft IT Professionals in Las Vegas, November 10-13. Every attendee will receive a copy of SQL Server 2008 Standard Edition with one CAL.
Windows IT Pro |  Subscribe |  Register |  Windows FAQ |  Media Kit |  WinInfo News |  Europe Edition |  About Us |  Contact Us/Customer Service |  Affiliates/Licensing
SQL Server Magazine |  Office & SharePoint Pro |  Windows Dev Pro |  IT Library |  Technical Resources Directory |  Windows Excavator |  ITTV |  IT Job Hound

Copyright © 2008 Penton Media, Inc., All rights reserved.  Terms and Use | Privacy Statement | Reprints and Licensing