Reply to Message

RE: How Windows 7 UAC shapes enterprise security

Yndoendo 1st Apr 2009

Apple did it why can't Microsoft? Apple adopted they Unix / Linux way of dealing with user or programs trying to change system settings. Separate all users from each other, all that users can do is in their home drive and root is the only one that can do everything everywhere, and give the option for the user to authenticate to allow the process to continue (su or sudo, remember sudo records commands the user enters). The biggest problem is that a number of old programs need access to a system resource, such as the Programs Files Folder or the local machine's registry. In Vista, Microsoft could have used the chance to require programs not to have access to those resource but they choose not to unlike Apple did with OS X. I was hoping Microsoft would get it right with Windows 7 but as you can see they did not!