Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
User Account Control: “White List” 2
- Thread starter Pleonasm
- Start date
-
1
- #2
The example that you mention, Diskeeper, has a preference in the Diskeeper configuration (when launched by an Administrator) to set Permissions so that any user may run the program and thereby avoid the UAC prompt altogether.
This thread mentions to Application Compatibility Toolkit Tool, perhaps you can do something with that?
Vista - same file name, different file contents
thread1583-1435573
Otherwise it may be an all or nothing type scenario with UAC?
Is disabling Vista's User Account Control wise?
Some of these type of problems may be able to be avoided in the future by checking that any applications purchased have the Vista logo displayed on them.
This thread mentions to Application Compatibility Toolkit Tool, perhaps you can do something with that?
Vista - same file name, different file contents
thread1583-1435573
Otherwise it may be an all or nothing type scenario with UAC?
Is disabling Vista's User Account Control wise?
Some of these type of problems may be able to be avoided in the future by checking that any applications purchased have the Vista logo displayed on them.
-
1
- #4
firewolfrl
Technical User
I don't disable the UAC but I do run it most of the time in clean mode using TweakUAC.
you can switch between clean mode and full mode without a reboot.
this is important as this keeps in tack and on the protection mode for internet explorer. this also keeps the windows defender working as it should.
this might be a good alternative to what you are trying to do
you can switch between clean mode and full mode without a reboot.
this is important as this keeps in tack and on the protection mode for internet explorer. this also keeps the windows defender working as it should.
this might be a good alternative to what you are trying to do
dilettante
MIS
Diskeeper probably installs as an elevated service. "Starting" it probably just exposes a UI program that talks to the service itself via some form of IPC.
firewolfrl
Technical User
this one website is some of the best explanation that I have seen and just may answer your question
dilettante
MIS
There is no "clean" mode, only "No Prompt" mode.
This is nearly as bad as turning off UAC. You could have installed a malicious "Tetris program" that should never require elevation. It may normally run fine, but always checks this security policy setting and when it finds it set to "No prompt" it does a number on you. Most likely zombieing your computer to send out spam.
You'll never have a clue because you never expected a simple game to require admin privileges, and in your "clean mode" the program will silently be allowed to do whatever it wants to.
With the policy set to prompt, one of two things happens: you get a prompt and deny it, or the program will be blocked from doing anything requiring elevation.
The whole idea is to be suspicious of any program asking for elevation. The system will kill those that try doing anything they shouldn't be doing, because they won't have rights grabbed through silenet elevation.
When you aren't doing administrative things you really shouldn't see the prompts much at all. That's the theory anyway. Sadly we seem to be patching, patching, patching and installing, installing, installing all of the time these days.
Do us all a favor, we get enough spam. Don't install knucklehead software like that TweakUAC thing.
We only have this mess because so many people were running as admin instead of a standard user. If people keep tweaking and turning off UAC I hate to think how unpleasant the next version of Windows will be to use, as they lock things down more firmly.
firewolfrl
Technical User
dilettante
I do use this program and I don't spam...neither am I going to argue the aspects of the software
fine tuning UAC versus turning off if you are an experienced user is a fine thing when you run some admin elevated software
gives you an alternate to TweakUAC and gives more options to fine tune the UAC and tame it so it is not so invasive but still provides security that is needed as dilettante stated
something to note this is not for beginners
something too is the fact that if you completely disable UAC you make your computer vulnerable and as some have posted the time for Vista to boot is doubled or tripled
Pleonasm, I wish you luck and post if you found the "white list" fix you are looking for.
I do use this program and I don't spam...neither am I going to argue the aspects of the software
fine tuning UAC versus turning off if you are an experienced user is a fine thing when you run some admin elevated software
gives you an alternate to TweakUAC and gives more options to fine tune the UAC and tame it so it is not so invasive but still provides security that is needed as dilettante stated
something to note this is not for beginners
something too is the fact that if you completely disable UAC you make your computer vulnerable and as some have posted the time for Vista to boot is doubled or tripled
Pleonasm, I wish you luck and post if you found the "white list" fix you are looking for.
- Thread starter
- #9
Thanks to all who have contributed to this thread.
While I have been unable to selectively disable the UAC prompt for individual applications, I have been able to do so on a global basis using the free TweakUAC utility.
After running TweakUAC and selecting the “Quiet Mode”, it appears that only one Local Security Policy setting is modified: the “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" value is changed to "Elevate without prompting" from its default value "Prompt for consent". All other Local Security Policy settings for UAC remain unaltered from their defaults, which are listed in this article.
While I have been unable to selectively disable the UAC prompt for individual applications, I have been able to do so on a global basis using the free TweakUAC utility.
After running TweakUAC and selecting the “Quiet Mode”, it appears that only one Local Security Policy setting is modified: the “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" value is changed to "Elevate without prompting" from its default value "Prompt for consent". All other Local Security Policy settings for UAC remain unaltered from their defaults, which are listed in this article.
firewolfrl
Technical User
you are right that is about all tweakUAC does...lol
I am glad that you are up and running the way you want
I am glad that you are up and running the way you want
See this in conjunction with my earlier post.
How to disable the User Account Control Prompt for certain application
How to disable the User Account Control Prompt for certain application
- Thread starter
- #12
Linney, the Microsoft article How to disable the User Account Control Prompt for certain application appears to be extremely promising.
However, on the “Create New Application Fix” screen (between steps 4 and 5 in the Microsoft article), the user is prompted to select an “Operating System Mode.” Unfortunately, Windows Vista is not one of the available choices. Therefore, it is not clear to me how the Application Compatibility Toolkit can be used to disable the UAC prompt for individual applications on a Windows Vista PC.
Recommendations from anyone?
Thank you.
However, on the “Create New Application Fix” screen (between steps 4 and 5 in the Microsoft article), the user is prompted to select an “Operating System Mode.” Unfortunately, Windows Vista is not one of the available choices. Therefore, it is not clear to me how the Application Compatibility Toolkit can be used to disable the UAC prompt for individual applications on a Windows Vista PC.
Recommendations from anyone?
Thank you.
I haven't delved into the Application Compatibility Toolkit too deeply as it was originally intended for developers but recently released for home users. The point that you comment on got my attention too, but I thought perhaps that by choosing the option for "none" was a solution, but this is only a rough guess on my part.
- Status