Microsoft plans to improve the much-maligned UAC (user account control) feature in the next version of its Windows client OS, acknowledging that the new security feature it built into Windows Vista has caused unnecessary problems for users.
On the company's Engineering Windows 7 blog, Microsoft called UAC one of the "most controversial" features of Vista and said it will tweak UAC in Windows 7 so it works more closely with Microsoft's intended goal for the feature.
[ InfoWorld's Enterprise Desktop blogger Randall C. Kennedy says improvements like these are just milestones to nowhere for Windows 7 ]
Microsoft added UAC to Vista in an effort to improve the security of the system and give people who are the primary users of a PC more control of its applications and settings. However, UAC turned out to be more of a headache for many users than a benefit.
"UAC was created with the intention of putting you in control of your system, reducing cost of ownership over time, and improving the software ecosystem," according to the post, which is attributed to Ben Fathi, corporate vice president of development for Microsoft's Windows Core Operating System Division. "What we've learned is that we only got part of the way there in Vista and some folks think we accomplished the opposite."
UAC prevents users without administrative privileges from making unauthorized changes to a PC. But because of how it was set up in Vista, it can prevent even authorized users on the network from being able to access applications and features they should normally have access to.
UAC does this through a series of screen prompts that ask the user to verify privileges, and it may require a user to type in a password to perform a task. Vista users reported that these prompts would interrupt a user's normal workflow, even during some mundane tasks, unless a user is set as Local Administrator. UAC prompts became so problematic that competitor Apple even spoofed them in a television commercial.
Microsoft said that in Windows 7, it will work to reduce UAC's "unnecessary or duplicated prompts in Windows and the ecosystem, such that critical prompts can be more easily identified," according to Fathi's blog post. It also plans to make the prompts "more informative" so that users can make better choices about how to proceed once prompted, and will provide "better and more obvious control" over UAC in Windows 7.
Microsoft is taking into consideration user feedback and the effect UAC has already had on third-party software to make changes to UAC in Windows 7, according to the blog.
Vista users said the reason the UAC prompts were so frequent and misguided is because many third-party Windows applications that predated Vista weren't developed to work with UAC's "Standard User" designation. Because of this, applications would default to requiring Local Administrator rights and prompt people who used the Standard User setting if they wanted to perform functions deemed as administrative tasks.
This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.
Download now »Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.
Download now »
The emergence of WLANs has created a new breed of security threats to enterprise networks.
Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation
Effectively address data protection challenges, implementing solutions that help store and protect businesscritical data while cutting costs and improving efficiency and reliability.
Download now »
Sign up to receive Security Resource Alerts
