Menu
Microsoft denies Windows 7 UAC vulnerability

Microsoft denies Windows 7 UAC vulnerability

Microsoft is denying that there is a security hole in the User Account Control (UAC) feature of Windows 7 after a blogger reported it last week

Microsoft is denying that there is a security hole in the User Account Control (UAC) feature of Windows 7 after a blogger reported it last week and posted what he said was a fix for it.

"I can tell you that this is not a vulnerability," a spokesman for Microsoft through its public relations team said in an e-mail.

Last week, Long Zheng, a long-time Microsoft watcher and blogger, wrote on his I Started Something Blog that a change Microsoft made in Windows 7 to improve the UAC security feature has left the new OS less secure because it allows someone to remotely turn the feature off without the user knowing.

Zheng said that the new UAC default setting, which does not notify a user when changes are made to Windows settings, is where the security risk lies. A change to UAC is seen as a change to a Windows setting, so a user will not be notified if UAC is disabled, which Zheng said he was able to do remotely with some keyboard shortcuts and code.

However, Microsoft is standing by the change to UAC's default setting, saying it was the result of "a great deal of usability feedback on UAC prompting behavior," and that the feature cannot be exploited unless there is already malicious code running on the machine and "something else has already been breached."

"The intent of the default configuration of UAC is that users don't get prompted when making changes to Windows settings," the spokesman said. "This includes changing the UAC prompting level."

UAC has been a controversial feature since Microsoft introduced it in Windows Vista to improve its security and give people who are the primary users of a PC more control over its applications and settings. The features prevents users without administrative privileges from making unauthorized changes to a system.

Because of how it was set up in Vista, UAC sometimes -- through a series of screen prompts -- prevents even authorized users from being able to access applications and features they should normally have access to. Microsoft vowed it would make changes to the feature to make it more user-friendly in Windows 7.

Windows 7 has been in public beta for about a month and not expected to ship until early next year. However, Microsoft said Friday the next release of the OS would be a nearly final release candidate and not another beta release, so some believe it will be out before the end of 2009.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Windows 7user account control

Featured

Slideshows

Leading female front runners of the Kiwi ICT industry honoured at 2019 WIICTA

Leading female front runners of the Kiwi ICT industry honoured at 2019 WIICTA

Reseller News has honoured the leading female front runners of the New Zealand ICT industry at the 2019 Women in ICT Awards (WIICTA) in Auckland. The awards recognised standout individuals across six categories, spanning Entrepreneur, Rising Star, Shining Star, Community, Technical and Achievement. Photos by Gino Demeer.

Leading female front runners of the Kiwi ICT industry honoured at 2019 WIICTA
Reseller News kicks off awards season in 2019 with Judges' Lunch

Reseller News kicks off awards season in 2019 with Judges' Lunch

The 2019 Reseller News Innovation Awards has kicked off with the Judges Lunch in Auckland with 70 judges in the voting panel. The awards will reflect the changing dynamics of the channel, recognising excellence across customer value and innovation - spanning start-ups, partners, distributors and vendors. Photos by Christine Wong.

Reseller News kicks off awards season in 2019 with Judges' Lunch
Reseller News welcomes industry figures for 2019 Hall of Fame lunch

Reseller News welcomes industry figures for 2019 Hall of Fame lunch

Reseller News welcomed 2018 inductees - Chris Simpson, Kendra Ross and Phill Patton - to the third running of the Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed the changing landscape of the technology industry in New Zealand, while outlining ways to attract a new breed of players to the ecosystem. Photos by Gino Demeer.

Reseller News welcomes industry figures for 2019 Hall of Fame lunch
Show Comments