I've read on more than one occasion on the internet recommending disabling UAC to solve one problem or another and not necessarily my particular problem. I'm worried about the security hole that I might open and that i may regret later. So, trying to find that balance here in this enviorment.
any tips/advice on this matter is appreciated. i can provide further details on the issue i'm trying to clear up if interested.
Best answer by Rakanisheu RetiredView original
From a threat point of view the UAC doesnt really do too much. Generally speaking it wont stop an infection from being installed. UAC itself wasnt designed to stop to malware and at the end of the day even if a malware asks for permission to run (which does happen) all the user has to do is hit OK. And as we all know the weakest link in the security on a PC is the user! UAC was dialled down in Windows 7 due to the negative feedback that it got in Vista.
Drive by downloads or Java exploits using something similar to the Blackhole exploit kit wont be effected by the UAC in anyway. I have it enabled on all my test PC`s and my home PC and I dont get really get that many alerts. Generally if I do its due to running legacy software or unusual testing programs.
You can test UAC`s by having a clean VM (with no AV) and throw malware at it and see what it blocks. If it stops 10% I`d be suprised. If you drop the UAC setting down one notch in the settings it will stop the majority of alerts. Assuming you have all your Windows updates and other 3rd party plugins it wont lower your systems security levels. Some may disagree with that statement but from all my testing of malware I have rarerly seen the UAC actually block malware. Good education combined with up to date security is your best bet. If you have any questions please feel free to reply.
Can you describe how UAC is impacting the ability to access network shares? It is extremely strange to me and I would like to give you some tips if you could describe your issue further.
To be blunt, disabling UAC is not the right way to resolve problems because symptoms of it being an issue are caused by poor configuration and poorly implemented programs. It's often recommended as a solution on forums since debugging the actual cause usually requires you be in front of the machine to figure it out. If you are getting UAC prompts during normal use of a computer this a red flag to something you need to address the root cause of. However, I recognize not everyone/every company has the resources to figure out UAC issues so if you need to disable it to get your job done that's ok. I just wanted to bring this to your attention.
Note: Getting UAC prompts is also a symptom of a program running in Compatibility Mode, which should never be used unless specifically required. It can cause more problems than it resolves.
I wanted to chime in so they were aware, like I was, that you weren't commenting on UAC overall as a feature.
Depending on a program's design, where it stores files and configuration with UAC off and UAC on can be different. So if you go switching the UAC settings around you can cause issues..