Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Greg.

« Remote Desktop Client v6.1 -- Complete with no more /console Switch | Main | Security Predictions for 2008 »

67% of Environments have Disabled UAC

An interesting statistic, compliments of 4sysops:

The results of my poll about Vista’s User Account Control (UAC) are quite impressive. More than 2000 4sysops readers voted so far. 67% have disabled UAC altogether, 5% disabled the elevation prompts, 3% changed other UAC settings and only 24% use the default UAC settings.

Michael, a fellow UAC dissenter, continues with commentary on what he thinks you should do. That doesn't necessarily mean getting rid of it:

But these numbers surprised me anyway. I think this poll shows that more than 70% of IT pros reject UAC. I’ve been criticizing UAC ever since. I’ve read several times that one of the major reasons why Microsoft introduced UAC was because they wanted to encourage developers to distinguish between applications that need admin privileges and those needing just standard user rights. I wonder if this approach will work considering that the majority of IT pros disabled it anyway.

I am a supporter of separating administration work from ordinary Windows usage, but UAC is just a bad solution to this problem. Su/sudo under Linux is certainly a better one. However, that doesn’t mean that I recommend disabling Vista UAC. You can just turn the elevation prompts off and let UAC enabled. UAC improves security not only by asking for approval if an application changes important system settings. I blogged about the reasons not to disable UAC more than a year ago.

Michael and I are in complete agreeance on what to do with UAC. Disabling it isn't necessarily the right solution. However, getting rid of its elevation prompts will make your experience (and, thus, your users) a lot easier. You can read Michael's entire post with links to information on how to do just that here.

Alternatively, keep an eye on this space. In the next week or two, Realtime will be making an announcement with some info on UAC that I think you'll appreciate.

Remember too that UAC rears its head again in Server 2008. So the decisions you make today about Vista's behavior will directly impact how Server 2008 behaves once its installed into your network.

TrackBack

TrackBack URL for this entry:
http://www.realtime-windowsserver.com/type/mt-tb.cgi/609

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Greg Shields' Bio:

Greg Shields, is an independent author, instructor, and IT consultant based in Denver, Colorado, and a co-founder of Concentrated Technology. With nearly 15 years of experience in information technology, Greg has developed extensive experience in systems administration, engineering, and architecture specializing in Microsoft systems management, remote application, and virtualization technologies. Greg is a Contributing Editor for Redmond Magazine, MCPmag.com, and Virtualization Review Magazine and is the author of five books, including Windows Server 2008:  What’s New / What’s Changed. Greg is also a highly sought-after instructor and speaker, speaking regularly at conferences like TechMentor Events, and producing computer-based training curriculum for CBT Nuggets.  Greg is a recipient of Microsoft "Most Valuable Professional" award with a specialization in Windows Terminal Services.