A Windows Vista forum. Vista Banter

Welcome to Vista Banter.

You are currently viewing our boards as a guest which gives you limited access to view most discussions, articles and access our other FREE features. By joining our free community you will have access to ask questions and reply to others posts, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact contact support.

Go Back   Home » Vista Banter forum » Microsoft Windows Vista » Security and Windows Vista
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Security and Windows Vista A forum for discussion on security issues with Windows Vista. (microsoft.public.windows.vista.security)

Why prompt for my own password?



 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old August 31st 06, 10:05 PM posted to microsoft.public.windows.vista.security
JimR
external usenet poster
 
Posts: 4
Default Why prompt for my own password?

Why do I get prompted to enter my own acount's password? I'm logged in as a
user (not administrator) and in some cases I get prompted for admin password;
this is fine. But in other cases I get prompted for Admin password or my own
account's password. If I type in my account's password, I am alllowed to
complete the change. If my account has rights to make the change, then
shouldn't I only be prompted to confirm the change? Does this sound right to
anyone else, or is this just me?
  #2 (permalink)  
Old August 31st 06, 10:51 PM posted to microsoft.public.windows.vista.security
Jimmy Brush
external usenet poster
 
Posts: 827
Default Why prompt for my own password?

Hello,

I agree - I think you should only be prompted with Continue/Cancel if your
account has rights to do the operation. I also think this should be
configurable via group policy - it is not.


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #3 (permalink)  
Old September 5th 06, 07:07 PM posted to microsoft.public.windows.vista.security
Jason
external usenet poster
 
Posts: 263
Default Why prompt for my own password?

If you are logged in as a user with Administrative rights you should not be
prompted to enter your password every time you want to access a
"Administrative" program, or delete a shortcut off the desktop.. Etc.. There
should be a check box that says something along the lines of "Do not show
this in the future" or "Always use this choice" like entering a secured
location or running an executable.

Jason

"Jimmy Brush" wrote:

Hello,

I agree - I think you should only be prompted with Continue/Cancel if your
account has rights to do the operation. I also think this should be
configurable via group policy - it is not.


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #4 (permalink)  
Old September 6th 06, 01:27 AM posted to microsoft.public.windows.vista.security
Jimmy Brush
external usenet poster
 
Posts: 827
Default Why prompt for my own password?


If you are logged in as a user with Administrative rights you should not
be
prompted to enter your password every time you want to access a
"Administrative" program, or delete a shortcut off the desktop.. Etc..


You are not asked for your password if you are logged in as an
administrator. You are simply asked if you want to continue.

There
should be a check box that says something along the lines of "Do not show
this in the future" or "Always use this choice" like entering a secured
location or running an executable.


Hopefully in the future this will be possible; however, right now allowing
this to happen would effectively make UAC worthless, because this would
allow malware to easily bypass UAC and take over your computer.

--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #5 (permalink)  
Old September 6th 06, 03:59 PM posted to microsoft.public.windows.vista.security
Jason
external usenet poster
 
Posts: 263
Default Why prompt for my own password?

If you have a "Remember this option" check box for lets say, accessing device
manager. I don't see why this would allow malware to get into your system.
There are certain things that you access on a frequent bases that aren't
going to hurt your system that should not prompt you every time.

"Jimmy Brush" wrote:


There
should be a check box that says something along the lines of "Do not show
this in the future" or "Always use this choice" like entering a secured
location or running an executable.


Hopefully in the future this will be possible; however, right now allowing
this to happen would effectively make UAC worthless, because this would
allow malware to easily bypass UAC and take over your computer.

--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #6 (permalink)  
Old September 10th 06, 10:18 AM posted to microsoft.public.windows.vista.security
Jimmy Brush
external usenet poster
 
Posts: 827
Default Why prompt for my own password?

If you have a "Remember this option" check box for lets say, accessing
device
manager. I don't see why this would allow malware to get into your system.


Device manager runs inside of the microsoft management console - in effect,
you would have to "checkbox" the MMC. If you did this, a malware would be
able to start an instance of MMC and using command-line switches or some
other method, cause it to do an operation on your behalf, such as open disk
manager and format your hard drive.

Also, imagine the case where you checkmark the command prompt - a malware
could open a command prompt and then perform any operation it wanted - it
could even use that "admin" command prompt to run other software with
"admin" permission!

The problem here is that the computer doesn't know the difference between
YOU starting a program and a program starting a program. If this could be
ascertained, the system could make better decisions as to when to ask you
for permission.


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #7 (permalink)  
Old September 14th 06, 04:27 PM posted to microsoft.public.windows.vista.security
jim_from_il
external usenet poster
 
Posts: 39
Default Why prompt for my own password?

Dear Mr. Jimmy (isn't that a line from a Rolling Stones song?),
Why do you defend UAC so much when it's an inconvenience for the majority
of 'heavy', well informed, home users? It should be simple: turn the
freakin thing off. I just recently installed RC1, and I get prompted for
every *uckin program I run. Surely there's got to be a better way (and don't
call me Shirley).

"Jimmy Brush" wrote:

If you have a "Remember this option" check box for lets say, accessing
device
manager. I don't see why this would allow malware to get into your system.


Device manager runs inside of the microsoft management console - in effect,
you would have to "checkbox" the MMC. If you did this, a malware would be
able to start an instance of MMC and using command-line switches or some
other method, cause it to do an operation on your behalf, such as open disk
manager and format your hard drive.

Also, imagine the case where you checkmark the command prompt - a malware
could open a command prompt and then perform any operation it wanted - it
could even use that "admin" command prompt to run other software with
"admin" permission!

The problem here is that the computer doesn't know the difference between
YOU starting a program and a program starting a program. If this could be
ascertained, the system could make better decisions as to when to ask you
for permission.


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #8 (permalink)  
Old September 14th 06, 09:08 PM posted to microsoft.public.windows.vista.security
Jimmy Brush
external usenet poster
 
Posts: 827
Default Why prompt for my own password?

snip
Why do you defend UAC so much when it's an inconvenience for the
majority
of 'heavy', well informed, home users?


I am trying to explain UAC to people who think it is JUST an inconvenience
for the majority of heavy, well informed home users. Because that is not the
case. Sure, it may be an inconvience, but it is also an inconvience when a
program with admin powers runs that you don't know about.

I get prompted for
every *uckin program I run.


If you run administrative tools you will get prompted. Don't you want to
know when a program uses admin powers? If you don't, it's easy, turn it off.
But I imagine the majority of "well-informed" home users will enjoy being
able to control which programs run with admin powers.

Surely there's got to be a better way (and don't
call me Shirley).


Perhaps you can share some of your ideas?


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

  #9 (permalink)  
Old September 14th 06, 10:37 PM posted to microsoft.public.windows.vista.security
Mark D. VandenBerg
external usenet poster
 
Posts: 329
Default Why prompt for my own password?


"Jimmy Brush" wrote in message
...
snip

Perhaps you can share some of your ideas?


--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/


Nice...


 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 12:14 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.Search Engine Optimization by vBSEO 3.0.0 RC6
Copyright ©2004-2024 Vista Banter.
The comments are property of their posters.