Skip to main content
Share Your Experience: Take the 2024 Developer Survey
15 votes

Microsoft said UAC is not a security barrier. But in what cases?

This is not really an answer, but speaking in absolutes with security can be dangerous... so... it depends. I think when you say "Microsoft said UAC is not a security barrier," this is probably what ...
nbering's user avatar
  • 4,028
9 votes
Accepted

Why is it a security issue to load Notepad++ plugins from %APPDATA% folder?

The issue is that %APPDATA% can be written to by any application being run by that user (%APPDATA% is different for each user) - any app that is run can add a plugin there, which may do something evil ...
crovers's user avatar
  • 6,381
6 votes
Accepted

Windows 7 consent.exe attempting to access the internet

You asked 1) if consent.exe is a legitimate program, 2) if its use of the network is legit (why does it attempts to connect to an external server), and 3) if there is any reason to allow it. Your ...
ElderDelp's user avatar
  • 176
5 votes
Accepted

Why does this Windows process run with High integrity?

<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="true"></...
CBHacking's user avatar
  • 49.1k
5 votes
Accepted

Isn't separating privileges less useful on a PC, as all my critical data is in my normal user account?

What Julian says is not correct. The odds of malware getting a foothold are unchanged. If you can encrypt all your data, so can malware. If you can send packets, so can malware. What's ...
Adam Shostack's user avatar
4 votes

Windows 7 consent.exe attempting to access the internet

A legitimate reason for consent.exe to connect to the Internet is to figure out whether a certificate was revoked (by updating the certificate revocation list, CRL). I was however unable to confirm ...
Thomas Weller's user avatar
4 votes

Possible ways to bypass UAC if user not in admin group?

Your work computer belongs to your company, not you. If your boss needs you to install a piece of software to do your job better, have him ask the admins to install it. If not, do not try to ...
John Deters's user avatar
  • 34.2k
4 votes
Accepted

Suspicious app name in Windows 10 permission prompt

This is expected behaviour. When you install an MSI package, Windows caches a copy of the installer in "%windir%\installer" (a hidden system folder) and renames it using a random hex name. You can ...
Stennie's user avatar
  • 178
4 votes
Accepted

Microsoft said UAC is not a security barrier. But in what cases?

The phrase "security barrier" can be ambiguous. I think it may be more useful to consider the concept of a security guarantee, sometimes called a security boundary. More here. Basically, a ...
Harry Johnston's user avatar
3 votes
Accepted

How is using the standard Windows account more secure than using the administrator Windows account with highest UAC settings?

There are a few reasons. The main reason, from a policy standpoint, is that Microsoft does not consider UAC to be a "security boundary"; that is, UAC bypasses are not treated as the same ...
CBHacking's user avatar
  • 49.1k
3 votes
Accepted

How are malware able to start on boot on windows without administrator rights?

How are malware able to start on boot on windows without administrator rights? Find a Service which runs an executable which a user can overwrite (Hint: Installed software that has its own updater ...
gowenfawr's user avatar
  • 72.9k
3 votes
Accepted

Secure UAC prompt

A UAC prompt appears on the secure desktop, so the normal Windows desktop (and any other open windows) are dimmed, behind a translucent black layer, with the prompt itself shown at full brightness ...
Matthew's user avatar
  • 27.3k
3 votes

Should UAC be turned on or off on servers?

Whatever reasons UAC should be kept enabled, it aims (at least theoretically) to mitigate the impact of a potentially malicious program. According to Microsoft: Under certain constrained ...
Soufiane Tahiri's user avatar
3 votes

How does consent.exe know what to display?

As you can see, the first argument is the PID of consent.exe's parent process. And by monitoring the APIs that this parent process (which is a "svchost") called before creating the consent process, I ...
SixZiv's user avatar
  • 41
2 votes

UAC and Windows Services

UAC should not affect system services. Definitively aggree with that, thanks a lot to Harry for this clear answer : I was in doubt for a long time until now :-). Tested today in Windows 2012R2 ...
Fabien KOCIK's user avatar
2 votes
Accepted

Can ransomware run without prompting user?

Ransomware wouldn't need to raise a UAC alert as it is after a user's personal files, not system files.
B. Austin's user avatar
2 votes
Accepted

Is it worth it to force UAC to ask for a password?

There are two ways that you can force UAC to ask for a password. They both increase security over automatic elevation, but to different degrees, and with different tradeoffs. Stay a member of the ...
CBHacking's user avatar
  • 49.1k
2 votes
Accepted

Win10 Group Policy - Allow specific programs to run: Protection from malware?

Generally, using an application whitelist will not only restrict what apps the user can directly launch, but also what apps the whitelisted apps can launch (after all, explorer.exe - the Windows ...
CBHacking's user avatar
  • 49.1k
1 vote

How do I stop local users from bypassing the UAC on Windows 10?

You can run and install software without being admin. UAC doesn't enter into the equation. What you're looking for is AppLocker or WDAC. You will have to combine this with appropriate file system ...
vidarlo's user avatar
  • 16.6k
1 vote

DLL hijack privileges

DLL hijacking requires an application that is vulnerable and the code in DLL gets the privileges the program calling it has. If the vulnerable program e.g. runs as SYSTEM or with administrator ...
Esa Jokinen's user avatar
1 vote

Microsoft said UAC is not a security barrier. But in what cases?

The current [update: appears to be fixed in newer Windows 10 builds, but should be double checked as the API involved is not equivalent to punching buttons on the screen] UAC bypass is Scheduled Tasks ...
Joshua's user avatar
  • 1,146
1 vote

Microsoft said UAC is not a security barrier. But in what cases?

I think this question needs to be addressed specifically and thoroughly: But what about non-administrator users, who must enter a password at UAC prompts? In that case, is UAC actually a security ...
Michael Borgwardt's user avatar
1 vote

Is UAC enabled and set to Elevate without prompt actually a security protection?

UAC was implemented as a way to control who installed software on a device and not really as a security measure. It's more of a management solution than a security solution. WRT the Administrator ...
baldPrussian's user avatar
  • 2,778
1 vote

Secure UAC prompt

This actually is possible using a little tool called AutoHotkey. This could be done by taking a screenshot of the desktop (assuming there is nothing on it) or using the desktop's image file then ...
255.tar.xz's user avatar
1 vote
Accepted

UAC or logging into admin account first before installing software?

They are both essentially the same, let's think of the possible scenarios. an attacker takes over a single user an attacker has admin or more permissions on the machine Since Uac runs in a ...
Jonathan Allon's user avatar
1 vote
Accepted

Could Mozilla MaintenanceService be used by an other program to avoid permission problems on Program File?

It should not be possible to use the service to bypass some security e.g. to elevate privileges. Everything else is treated as a bug. Unfortunately there were a bunch of bugs in the past (for example ...
40F4's user avatar
  • 922
1 vote

Isn't separating privileges less useful on a PC, as all my critical data is in my normal user account?

You've already answered your own question if malware runs, I've lost Running as a standard user greatly reduces the risk of allowing malware to get a foothold. It isn't about drivers necessarily, ...
Julian Knight's user avatar
1 vote

Bypass UAC without meterpreter session?

There are many other ways to bypass UAC regardless of the use of metasploit, since you are talking about Flash plugin, your "exploit" is going to be delivered via a browser. If you take the example of ...
Soufiane Tahiri's user avatar
1 vote

UAC and Windows Services

UAC should not affect system services. Apart from this question, I can find no evidence that it ever does, and I have tested on Windows 7, Windows 10v1607 and Windows 10v1803 without being able to ...
Harry Johnston's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible