Disable UAC completely

Bill2

New Member
VIP Member
Member
Messages
224
Hey folks, this tweak has been floating around but didn't spot it here on EF so just a heads up. This is for those of you who disable UAC on their systems and have been getting annoyed that DP doesn't disable UAC completely even though the slider is pulled all the way down and the user is Admin.

So, just open regedit and locate this key.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

In the right pane look for EnableLUA and modify its value to 0. Close regedit.

Done.

Disclaimer: This is not meant to encourage people to ditch UAC or even to use this method. Peeps who disable UAC are expected to know their way around.


warning   Warning
Setting the EnableLUA to 0 will make all metro apps stop working until you set it back to 1 and restart the computer.

See here instead: http://www.eightforums.com/tutorials/5509-user-account-control-uac-change-settings-windows-8-a.html


 
Last edited by a moderator:

My Computer

Thanks for this. I was really looking for a work around to permanently disable UAC.
 

My Computer

System One

  • OS
    Windows 8.1 Pro With Media Center
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Asus
    CPU
    Intel i7 870
    Motherboard
    Asus Maximus III Formula
    Memory
    2x4GB Corsair Dominator CL9
    Graphics Card(s)
    XFX 5850
    Sound Card
    SupremeFX X-Fi
    Monitor(s) Displays
    HP X2301
    Screen Resolution
    1920x1080
    Hard Drives
    120gb Corsair Force GS ssd
    500gb WD Caviar Blue
    PSU
    Silverstone DA650
    Case
    Bitfenix Shinobi
    Cooling
    Swiftech Apoogee XT
    Keyboard
    Razer Lycosa Mirror
    Mouse
    Razer Salmosa Korean Tournament Ed
    Internet Speed
    3MBps
    Browser
    Google Chrome
    Antivirus
    Windows Defender
    Other Info
    This is my legacy

My Computer

System One

  • OS
    Windows 7
    System Manufacturer/Model
    Self-Built in July 2009
    CPU
    Intel Q9550 2.83Ghz OC'd to 3.40Ghz
    Motherboard
    Gigabyte GA-EP45-UD3R rev. 1.1, F12 BIOS
    Memory
    8GB G.Skill PI DDR2-800, 4-4-4-12 timings
    Graphics Card(s)
    EVGA 1280MB Nvidia GeForce GTX570
    Sound Card
    Realtek ALC899A 8 channel onboard audio
    Monitor(s) Displays
    23" Acer x233H
    Screen Resolution
    1920x1080
    Hard Drives
    Intel X25-M 80GB Gen 2 SSD
    Western Digital 1TB Caviar Black, 32MB cache. WD1001FALS
    PSU
    Corsair 620HX modular
    Case
    Antec P182
    Cooling
    stock
    Keyboard
    ABS M1 Mechanical
    Mouse
    Logitech G9 Laser Mouse
    Internet Speed
    15/2 cable modem
    Other Info
    Windows and Linux enthusiast. Logitech G35 Headset.
There is another thread on this topic
http://www.eightforums.com/user-accounts-family-safety/9872-uac-metro-apps.html

Personally, I would leave UAC on...but the choice is yours.

Well, the metro apps require you to mouse, grab (press click hold), drag (hold click mouse), to close,
while regular windows programs take a single click to close.

Don't think I will be using the "apps" which are brain dead for both mouse and touch-pad interfaces.

How ef-ing hard is it to leave the little "x" button there?

Windows 8 bites for non-pads. Everything takes ten times longer.

So, no UAC, no metro, and someone's patch for a real start MENU, thank you very much.
 

My Computer

System One

  • OS
    win 8
Have you tried setting it to never notify via the Control Panel:

Control Panel > User Accounts and Family Safety > User Accounts > Change User Account Control Settings.

You can close 8 Apps by alt-f4.
 

My Computer

System One

  • OS
    Windows 8 Pro
    Computer type
    PC/Desktop
    Browser
    FireFox
    Antivirus
    ESET
I used Stardock's Start 8 which gave me back my Start Menu totally. There are other ones out there, of various prices. I usually don't like Stardock stuff, I was using Fences and it made a system that was really fast crawl. But Start8 has no effect on Speed.

I spent the last week, exploring Windows 8 "Apps" - They are all pretty much worthless. And you see the same ones in there under different categories, these are the same crappy apps that infest iOS. Even the "paid" apps are lousy, I tried several, none of them work as claimed. They tossed out the Desktop for THIS?

Thinix has a patch that totally removes the Metro thing, removes access to it, I don't know how much it is, I think it's about 10 bucks for a year subscription. I don't want a subscription though, I want a permanent solution - I want Metro GONE from my PC's
 

My Computer

System One

  • OS
    Windows 8 Pro with Media Center/Windows 7
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Asus M2N-MX SE Plus § DualCore AMD Athlon 64 X2, 2300 MHz (11.5 x 200) 4400+ § Corsair Value Select
    CPU
    AMD 4400+/4200+
    Motherboard
    Asus M2N-MX SE Plus/Asus A8M2N-LA (NodusM)
    Memory
    2 GB/3GB
    Graphics Card(s)
    GeForce 8400 GS/GeForce 210
    Sound Card
    nVIDIA GT218 - High Definition Audio Controller
    Monitor(s) Displays
    Hitachi 40" LCD HDTV
    Screen Resolution
    "1842 x 1036"
    Hard Drives
    WDC WD50 00AAKS-007AA SCSI Disk Device
    ST1000DL 002-9TT153 SCSI Disk Device
    WDC WD3200AAJB-00J3A0 ATA Device
    WDC WD32 WD-WCAPZ2942630 USB Device
    WD My Book 1140 USB Device
    PSU
    Works 550w
    Case
    MSI "M-Box"
    Cooling
    Water Cooled
    Keyboard
    Dell Keyboard
    Mouse
    Microsoft Intellimouse
    Internet Speed
    Cable Medium Speed
    Browser
    Chrome/IE 10
    Antivirus
    Eset NOD32 6.x/Win Defend
    Other Info
    Recently lost my Windows 8 on my main PC, had to go back to Windows 7.
Thinix has a patch that totally removes the Metro thing, removes access to it, I don't know how much it is, I think it's about 10 bucks for a year subscription. I don't want a subscription though, I want a permanent solution - I want Metro GONE from my PC's don't feel comfortable with UAC set to 0.

Go go back to Windows 7 and your problems are gone !
 

My Computer

System One

  • OS
    Windows 10.0.10122
    Computer type
    PC/Desktop
    System Manufacturer/Model
    My Build - Vorttex Ultimate
    CPU
    Core i7 @ 4500 MHz
    Motherboard
    ASUS Z87-Plus
    Memory
    32GB DDR3 @ 1822 MHz (OC)
    Graphics Card(s)
    Radeon R9 280X 3GB @ 1180 / 6800 MHz
    Sound Card
    7.1 HDA
    Monitor(s) Displays
    LCD LG 22" + CRT LG 17"
    Screen Resolution
    1760 x 1320 / 1280 x 960
    Hard Drives
    1 x 240 GB SSD (System)
    3 x 500 GB HDD (Data/Media)
    1 x 2000 GB e-HDD (Backup)
    PSU
    ThermalTake 1000W PSU
    Case
    Corsair Carbide R300
    Cooling
    Corsair H60 (Push-Pull)
    Keyboard
    Microsoft Wireless Keyboard
    Mouse
    Microsoft Wireless Mouse
    Internet Speed
    60 Mbps (Down) 5 Mbps (Up)
    Browser
    IE, FF, Chrome
    Antivirus
    AVG Internet Security 2015
    Other Info
    Some wired stuff
Go go back to Windows 7 and your problems are gone !


(Hey! Where did ya get that Fringe banner?)

That's obviously too easy! And the preferred solution. But this is why we complain about it, Microsoft gets wind of it, and they fix it like they did in Windows 7.

Windows 8's Desktop interface, is freakin cake, it's like butter. Both of my AMDs that had 2.9 scores are now 3.2. If only Windows 7 could have the new Desktop installed, that would be great.
 

My Computer

System One

  • OS
    Windows 8 Pro with Media Center/Windows 7
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Asus M2N-MX SE Plus § DualCore AMD Athlon 64 X2, 2300 MHz (11.5 x 200) 4400+ § Corsair Value Select
    CPU
    AMD 4400+/4200+
    Motherboard
    Asus M2N-MX SE Plus/Asus A8M2N-LA (NodusM)
    Memory
    2 GB/3GB
    Graphics Card(s)
    GeForce 8400 GS/GeForce 210
    Sound Card
    nVIDIA GT218 - High Definition Audio Controller
    Monitor(s) Displays
    Hitachi 40" LCD HDTV
    Screen Resolution
    "1842 x 1036"
    Hard Drives
    WDC WD50 00AAKS-007AA SCSI Disk Device
    ST1000DL 002-9TT153 SCSI Disk Device
    WDC WD3200AAJB-00J3A0 ATA Device
    WDC WD32 WD-WCAPZ2942630 USB Device
    WD My Book 1140 USB Device
    PSU
    Works 550w
    Case
    MSI "M-Box"
    Cooling
    Water Cooled
    Keyboard
    Dell Keyboard
    Mouse
    Microsoft Intellimouse
    Internet Speed
    Cable Medium Speed
    Browser
    Chrome/IE 10
    Antivirus
    Eset NOD32 6.x/Win Defend
    Other Info
    Recently lost my Windows 8 on my main PC, had to go back to Windows 7.

My Computer

System One

  • OS
    Windows 10.0.10122
    Computer type
    PC/Desktop
    System Manufacturer/Model
    My Build - Vorttex Ultimate
    CPU
    Core i7 @ 4500 MHz
    Motherboard
    ASUS Z87-Plus
    Memory
    32GB DDR3 @ 1822 MHz (OC)
    Graphics Card(s)
    Radeon R9 280X 3GB @ 1180 / 6800 MHz
    Sound Card
    7.1 HDA
    Monitor(s) Displays
    LCD LG 22" + CRT LG 17"
    Screen Resolution
    1760 x 1320 / 1280 x 960
    Hard Drives
    1 x 240 GB SSD (System)
    3 x 500 GB HDD (Data/Media)
    1 x 2000 GB e-HDD (Backup)
    PSU
    ThermalTake 1000W PSU
    Case
    Corsair Carbide R300
    Cooling
    Corsair H60 (Push-Pull)
    Keyboard
    Microsoft Wireless Keyboard
    Mouse
    Microsoft Wireless Mouse
    Internet Speed
    60 Mbps (Down) 5 Mbps (Up)
    Browser
    IE, FF, Chrome
    Antivirus
    AVG Internet Security 2015
    Other Info
    Some wired stuff
Thanx hahaha
 

My Computer

System One

  • OS
    Windows 8 Pro with Media Center/Windows 7
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Asus M2N-MX SE Plus § DualCore AMD Athlon 64 X2, 2300 MHz (11.5 x 200) 4400+ § Corsair Value Select
    CPU
    AMD 4400+/4200+
    Motherboard
    Asus M2N-MX SE Plus/Asus A8M2N-LA (NodusM)
    Memory
    2 GB/3GB
    Graphics Card(s)
    GeForce 8400 GS/GeForce 210
    Sound Card
    nVIDIA GT218 - High Definition Audio Controller
    Monitor(s) Displays
    Hitachi 40" LCD HDTV
    Screen Resolution
    "1842 x 1036"
    Hard Drives
    WDC WD50 00AAKS-007AA SCSI Disk Device
    ST1000DL 002-9TT153 SCSI Disk Device
    WDC WD3200AAJB-00J3A0 ATA Device
    WDC WD32 WD-WCAPZ2942630 USB Device
    WD My Book 1140 USB Device
    PSU
    Works 550w
    Case
    MSI "M-Box"
    Cooling
    Water Cooled
    Keyboard
    Dell Keyboard
    Mouse
    Microsoft Intellimouse
    Internet Speed
    Cable Medium Speed
    Browser
    Chrome/IE 10
    Antivirus
    Eset NOD32 6.x/Win Defend
    Other Info
    Recently lost my Windows 8 on my main PC, had to go back to Windows 7.

My Computer

System One

  • OS
    Windows 10.0.10122
    Computer type
    PC/Desktop
    System Manufacturer/Model
    My Build - Vorttex Ultimate
    CPU
    Core i7 @ 4500 MHz
    Motherboard
    ASUS Z87-Plus
    Memory
    32GB DDR3 @ 1822 MHz (OC)
    Graphics Card(s)
    Radeon R9 280X 3GB @ 1180 / 6800 MHz
    Sound Card
    7.1 HDA
    Monitor(s) Displays
    LCD LG 22" + CRT LG 17"
    Screen Resolution
    1760 x 1320 / 1280 x 960
    Hard Drives
    1 x 240 GB SSD (System)
    3 x 500 GB HDD (Data/Media)
    1 x 2000 GB e-HDD (Backup)
    PSU
    ThermalTake 1000W PSU
    Case
    Corsair Carbide R300
    Cooling
    Corsair H60 (Push-Pull)
    Keyboard
    Microsoft Wireless Keyboard
    Mouse
    Microsoft Wireless Mouse
    Internet Speed
    60 Mbps (Down) 5 Mbps (Up)
    Browser
    IE, FF, Chrome
    Antivirus
    AVG Internet Security 2015
    Other Info
    Some wired stuff
Have you tried setting it to never notify via the Control Panel:

Control Panel > User Accounts and Family Safety > User Accounts > Change User Account Control Settings.

You can close 8 Apps by alt-f4.

Well, as near as i could tell it had little effect. Even turning it off via registry doesn't disable it.

Windows folder, as well as program files and program files(86) appear to all be owned by trusted user in Win 8,
I think Windows was already owned by trusted user in win 7. Even admin cannot modify these folders, with or without uac.

Now Windows, I can mostly see, but some files in Windows need changes by admin, such as hosts file.
Many programs are designed as no-install. Just put the folder under program files and run it.
Now it does not HAVE to be under program files, but its a pretty arbitrary thing to have to give up the organization and just put programs anywhere. Its nice to be able to find all of them in one (2) places.

Many such programs are distributed, if not supported, by microsoft, all the sysinternals utilities for example.

So, to modify this, you have to be admin, then take ownership, then make your changes.
I have no idea how to put ownership back as trusted-user once you take ownership.

Without taking ownership of the system folders, there are many simple things admin needs to do that just cannot be done.

It would be nice if "trusted-user" allowed for program-file folders to be created by admin, then the folders owned/installed by trusted-user could retain the higher level of protection. In other words, one could still install programs as admin, but not modify other programs.

One little irony is that whatever magic lets installers install as trusted user cannot possibly prevent a malware
from using the same mechanism to install malware as trusted-user, leaving the average user no way to delete or uninstall it. Yea!

Logic was never their strong point.
 

My Computer

System One

  • OS
    win 8
It would be interesting if you could let us know what you need to do that requires you to take ownership of a folder that Trusted Installer owns, for instance. To your other point, installation programs are allowed to run as trusted installer (the ones that use the Microsoft Installer/MSI engine, anyway) because the admin allowed them to run with an elevated token and as such will be able to be installed via the program/service that has that right (msiserver). Either the admin accepted the UAC prompt, automated the prompt acceptance behavior (put the UAC slider down to the bottom), or ran with UAC disabled - doing the last two aren't good ideas either, for this and other reasons, because doing so has the side-effect of disabling the app sandboxes that protect apps from each other, the system, and malware. Also, using the system for everyday activities as an admin is, frankly, downright stupid for these same reasons, but people still do it and then blame Microsoft for security issues - either you're an admin (and you can bust the system if you're not careful, and yes, I include disabling UAC and running everyday tasks as admin to be "not being careful") and your actions can hose the system, or you're not.
 

My Computer

System One

  • OS
    Windows 8.1 x64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom
    CPU
    Intel Core i7 4790K @ 4.5GHz
    Motherboard
    Asus Maximus Hero VII
    Memory
    32GB DDR3
    Graphics Card(s)
    Nvidia GeForce GTX970
    Sound Card
    Realtek HD Audio
    Hard Drives
    1x Samsung 250GB SSD
    4x WD RE 2TB (RAIDZ)
    PSU
    Corsair AX760i
    Case
    Fractal Design Define R4
    Cooling
    Noctua NH-D15
It would be interesting if you could let us know what you need to do that requires you to take ownership of a folder that Trusted Installer owns, for instance. To your other point, installation programs are allowed to run as trusted installer (the ones that use the Microsoft Installer/MSI engine, anyway) because the admin allowed them to run with an elevated token and as such will be able to be installed via the program/service that has that right (msiserver). Either the admin accepted the UAC prompt, automated the prompt acceptance behavior (put the UAC slider down to the bottom), or ran with UAC disabled - doing the last two aren't good ideas either, for this and other reasons, because doing so has the side-effect of disabling the app sandboxes that protect apps from each other, the system, and malware. Also, using the system for everyday activities as an admin is, frankly, downright stupid for these same reasons, but people still do it and then blame Microsoft for security issues - either you're an admin (and you can bust the system if you're not careful, and yes, I include disabling UAC and running everyday tasks as admin to be "not being careful") and your actions can hose the system, or you're not.

I think I answered the first bit.
As to the second, everyone administers their own pc. Asking them if running this program should be allowed, is a question no one knows the answer to. If your virus scanner misses something, which happens a lot, it will ask you if this is ok tpo install. Well, you already ran the install program, so probably you say yes. Trusted user or no trusted user, it gets installed.

Now, you discover the program behaves badly, and one of the ways it behaves badly is it refuses to uninstall.
And you know how to run as admin, but low and behold, you cannot delete any of the files, because they are
under trusted installer, and even admin cannot touch them.

So, sorry, but the logic to trusted installer is exactly backwards. It did NOTING to tell you wether programs are dangerous or not, but if the malware gets in, it takes someone pretty sophisticated to remove it, because of trusted installer.

The entire subject of security generally requires you to know the unknowable. Once threats become known, programs can deal with them. But having the user say "yes i really meant install" when user runs an install program adds zero zip nada to security. They already decided to install. Taking the average user's ability to delete something that has proved harmful after it has been installed, is a negative security step.

So to expound on previous post, one reason to remove trusted installer, is so that when some installed program proves harmful, i can in fact delete it.

My computers have been secure for some years, well decades, and were they invaded they are all securely backed up. Have had to squish a virus or two, but never lost a file.

I guess here is where we agree to disagree.

Best wishes.
 

My Computer

System One

  • OS
    win 8
I think you then miss the point of the Trusted Installer account - it's designed to "protect" the PC from just such an attack by setting tight security on keys and files/folders that should only be modified by installers. If a program fails to uninstall, it probably didn't install in the first place properly. I'd still say there are ways to fix that without destroying the security integrity of the system.
 

My Computer

System One

  • OS
    Windows 8.1 x64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom
    CPU
    Intel Core i7 4790K @ 4.5GHz
    Motherboard
    Asus Maximus Hero VII
    Memory
    32GB DDR3
    Graphics Card(s)
    Nvidia GeForce GTX970
    Sound Card
    Realtek HD Audio
    Hard Drives
    1x Samsung 250GB SSD
    4x WD RE 2TB (RAIDZ)
    PSU
    Corsair AX760i
    Case
    Fractal Design Define R4
    Cooling
    Noctua NH-D15
Well, since the installer is whatever poor guy has the pc, the trusted-installer does not perform the task it is designed to do.
It does the opposite, by making malware un-uninstallable by ordinary mortals.

trusted-installer does nothing to protect malware from being installed, that admin privilege on system files did not already do.
Either one requires the user to say "yes" to install it (and for malware, that was the wrong answer).

I don't disagree with the motive, but the design is faulty.
Presumably it is there to create an admin above the admin that you guys keep saying not to run as,
but that does nothing to protect anything. At the end of the day, people admin their own pc's.

Malware, once installed, can elevate itself to trusted-installer user by the same mechanism that install programs do,
and from there, it can muck the universe inside the pc. I would not post this if it were hard to figure that out.
Anyone capable of writing a virus can already get past trusted-installer. This just makes them work an extra half day to do that.
 

My Computer

System One

  • OS
    win 8
Back
Top