Wednesday, September 29, 2010

UAC - User Access Control - Good or Bad?

It started in Vista and it is still there in Windows 7.  It is what most people remember as the notable killer of Vista.  Yes, it is that annoying little popup window that jumps on your screen every time you attampt to modify a computer setting, install software or try to access options that change your computer environment. 

Most users call it the "annoyance box" but its real name is User Access Control (UAC).  Its purpose is to alert you to changes that are occurring on your PC.  You can disable it in Vista, and customize it in Windows 7.  Some people have disabled it because it is annoys them, stating that it slows them down, but is that a good idea?

I say no, and I have several reasons why.  The first is a statistic on growth of virus and malware trends.  Over the past few years, virus and malware attacks have changed from operating system exploits to application exploits (ref #1).  According to SANS, an internationally recognized leader in virus tracking, the recent improvements in operating systems, like UAC, patch distribution and hardware security have shifted the vulnerability targets toward applications installed on top of the OS.  Thus, having a watchdog utility riding between the application and OS layer can't be all that bad of a concept.

The second reason is simple compliancy of developers.  For years, Microsoft has been promoting the "proper" method for developing application software.  Constantly asking, leading and exemplifying to programmers, the proper methods to develop applications with limited access controls (running in non-admin accounts). However, most developers ignored this because in Windows XP, most everyone was running as Admin, therefore they didn't have to change.  Enter Vista, with the UAC and a wake up call was handed to those developers by way of application interrupts, a lot of them.  Compliancy in security parameters for operating systems is as necessary as an anti-virus application on a computer.  Yes, that includes you Apple lovers too.  In today’s online environment, you are nuts if you don’t have one!

The last reason is from experience.  Having spent countless hours cleaning infected computer systems, replacing operating systems and installing network access controls; if a tool can alert you for even 1 out of 10 viruses, you are winner!  Getting the user to start a scan prior to the anti-virus becoming the target itself will ensure that you remain in control of your computer, not someone else.  Honestly, if you have one virus, you most likely have 8 or 10, or even 86. 

About the Author:  Tim has over 10 years of IT experience, supporting corporate network computing systems throughout the world.  He retains multiple certifications from Cisco, Microsoft, VMware, CompTIA, and various security agencies.  He is currently the CEO of his own company, Total Computer Decisions LLC. http://www.tcdweb.com/