Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [uac]

User Account Control, or UAC, is a security feature first introduced in Microsoft Windows Vista. It aims to improve security by limiting application software to user level privileges unless the process is authorized to run with elevated privileges.

1
vote
1answer
113 views

How are malware able to start on boot on windows without administrator rights? [closed]

I know that a malware could create a new Run registry key to make itself start at boot, but an user could simply remove the registry key and reboot and that would stop the virus, but this is usually ...
1
vote
2answers
48 views

Win10 Group Policy - Allow specific programs to run: Protection from malware?

In Windows 10 group policy editor you can restrict and allow only certain programs to run. I'm wondering if that protects against malware? I can think of following cases: 1) If you start a program ...
1
vote
0answers
87 views

Do WebEx's requirements open security holes?

After a WebEx presentation is recorded, the recording cannot be played in-browser without installing a browser extension that requires invasive permissions to access the user's data for all websites: ...
0
votes
0answers
70 views

Vulnerability scanner connecting to remote registry service is failing

I am trying to perform full vulnerability scans against all of my corporate PCs, servers and laptops. However, I'm unable to read/connect to the target registry despite the 'Remote Registry' service ...
0
votes
0answers
30 views

Would a mechanism for a same-password separate admin account solve the problem of UAC bypasses in Windows?

The standard role-separation mechanism in Windows for a local administrator is to have a single account, but protect it using UAC, and configure it for Always Notify if increased security is desired. ...
7
votes
4answers
3k views

Microsoft said UAC is not a security barrier. But in what cases?

After Vista came out, security professionals argued that UAC wasn't actually a security barrier, and Microsoft eventually admitted it isn't. But the case they were talking about was a local ...
0
votes
1answer
134 views

Suspicious app name in Windows 10 permission prompt

I downloaded MongoDB 3.4 from the MongoDB website here When I run the .msi file to install, I am prompted with the following screen asking me if I trust a39adfe.msi A Google search for a39adfe.msi ...
5
votes
4answers
353 views

Is UAC enabled and set to Elevate without prompt actually a security protection?

Does enabling UAC and setting the Admin approval behavior to Elevate without prompting provide any form of extra security to Administrator account. Note that my use case is for a Kiosk application ...
3
votes
2answers
4k views

Windows 7 consent.exe attempting to access the internet

Looking at Firewall logs, I see that consent.exe, which is responsible for the Windows 7 UAC UI, attempts to connect to the internet. I have verified the file is a genuine executable provided by ...
1
vote
0answers
248 views

Why can't programs run as administrator be a drag/drop target?

Ever since UAC was introduced in Windows, you haven't been able to use the elevated program as a drag/drop target - the "no entry" icon just appears when the mouse hovers over it. I don't think there'...
-1
votes
1answer
395 views

Possible ways to bypass UAC if user not in admin group? [closed]

i hate my work devices and other network PC's, All they do is setup password and enable UAC on the all computers, i need to install some application that requires UAC and admin rights as well as my ...
1
vote
2answers
590 views

Secure UAC prompt

In this comment there is a comment mentioning a "secure UAC prompt" where the user can enter a password. KeePass actually does have systems in place to stop keyloggers (such as only allowing the ...
1
vote
1answer
227 views

Can ransomware run without prompting user? [duplicate]

That is, a user downloads attachment from email and runs it, will the ransomware run silently without showing the security prompt/UAC (that should block non-administrator users...)
1
vote
1answer
947 views

Should UAC be turned on or off on servers?

So there a number of sources (e.g. this) that recommend leaving UAC (User Account Control) turned on on PCs, however there isn't much talk about UAC on servers. In fact the only thing I could find ...
2
votes
1answer
85 views

UAC or logging into admin account first before installing software?

When installing software on a standard user account, is it safer to use the UAC pop up to type the admin password into, or switch user to admin then do the install in that user?
2
votes
1answer
40 views

Could Mozilla MaintenanceService be used by an other program to avoid permission problems on Program File?

While updating my Firefox, I discovered that no permission was asked. Frist, I thought that something went wrong. But I quickly discover that they have a service to launch the update in session 0. ...
5
votes
2answers
134 views

Isn't separating privileges less useful on a PC, as all my critical data is in my normal user account?

Separating privileges, i.e using a non-admin account and escalating only when needed, seems to be something everyone agrees on. I can roughly understand why it's important on every system : prevent an ...
6
votes
1answer
4k views

Why is it a security issue to load Notepad++ plugins from %APPDATA% folder?

I have used the Notepad++ installer several times. However, it caught my eye that in one of the installer windows there is an option of: Allow plugins to be loaded from %APPDATA%." Below it there ...
1
vote
1answer
629 views

Bypass UAC without meterpreter session?

I have a research project about "Malvertising". I try to show an attack by using metasploit and I am using a Flash Plugin to hack the victim (exploit/multi/browser/adobe_flash_hacking_team_uaf) This ...
8
votes
1answer
3k views

Do applications installing into AppData folder make UAC useless?

When UAC was first introduced, most well-behaving applications were installed into Program Files folder, so any tampering with executable files without explicit user consent became impossible. So when ...
7
votes
1answer
938 views

What are the differences between “simple” UAC and two user accounts on Windows?

I'm currently thinking about increasing security on my Windows machine. As part of this harderning I considered the least-privilege principle and want to apply this on Windows using two different ...
13
votes
2answers
6k views

Custom Metasploit payload with UAC bypass

The machine I am attacking has anti-virus installed. I have managed to use Veil Framework in order to create an initial reverse shell payload that is undetected by the AV. However, UAC is enabled on ...
12
votes
2answers
2k views

How does consent.exe know what to display?

consent.exe is responsible for showning the UAC dialog. Looking at the command line parameters with Process Explorer, I see the following: consent.exe 1316 748 000000004385BD60 I have read How ...
1
vote
1answer
139 views

How to protect against portable applications

There are many portable apps around that could be downloaded and run on local PCs. Usually running of exe could be blocked by using UAC. however, in this case of portable applications, how do I ...
5
votes
2answers
2k views

Is UAC actually worth it? [duplicate]

Windows UAC: It's annoying. It seems pointless. Should I just disable it? Or in other words - is there actually a real risk of something malicious happening if I do? Is there malware out there that ...
2
votes
1answer
419 views

Safe to disable UAC?

I have programmed my own Windows kiosk application (.NET) which requires admin rights from the OS to ensure certain services are running (amongst other things). However, this causes the UAC prompt ...
7
votes
4answers
6k views

Should I worry about this UAC bypass exploit for Windows 7?

It appears that there is an exploit out there that allegedly allows you to bypass the UAC on Windows 7 computers and gain administrator access. I was wondering if this exploit is still a dangerous ...
1
vote
1answer
310 views

Can a program change the shortcut location of a browser to itself without UAC (Admin) in Windows?

I was reading an article on .desktop files used to spread malware on Gnome and KDE. I just thought that the same could be applied to Windows. On Windows: Malware is disguised as a picture by ...
-1
votes
1answer
225 views

If windows already has all admin rights, wouldn't a malicious program just need to pretend to be windows?

Windows can do things that require UAC without prompting for UAC. For example, Windows can change any file in C:\Windows without requiring UAC. Could a malicious program "pretend" to be windows and ...
10
votes
4answers
12k views

UAC and Windows Services

A user has a PowerShell script that does some things that require administrative access on Windows Server 2012 with UAC enabled. When they run the script as a Local Administrator, it fails with ...
7
votes
4answers
9k views

Preferred UAC configuration in Enterprises that use Login scripts to map drives?

In Windows 7, Vista and newer OS's, UAC will prevent logon scripts from mapping hard drives so that the following logon script code won't work: Dim WshNetwork Set WshNetwork = WScript.CreateObject("...
58
votes
3answers
50k views

How does the Windows “Secure Desktop” mode work?

Can anyone explain (or provide a link to a simple explanation) of what the Windows "Secure Desktop" mode is and how it works? I just heard about it in the KeePass documentation (KeePass - Enter ...
5
votes
1answer
3k views

Windows mandatory access control: How to remove “mandatory level” label from the file?

1) How to remove "mandatory level" label from the file? I have two files, for first icalcs return Mandatory Label\Medium Mandatory Level:(NW) for second icalcs doesn't return anything (that means ...
11
votes
2answers
765 views

How is UAC a security improvement?

What does User Account Control on Windows offer in terms of security? It's just an extra click to potentially run a virus.