Both Sides on the Win7 UAC Problem
Yes, it's possible to disable UAC on some Windows 7 systems with a special program and no warning. No, this isn't really a serious problem. The answer is complicated.A controversy erupted last week with the revelation by a researcher that it is possible for a user-mode program in Windows 7 to disable User Access Control in the default configuration. My first reaction to this was that it was bad, but it's a beta and it will be fixed. Now I'm getting the vibe from Microsoft that it won't be fixed and I can see their argument. It still leaves me uncomfortable, though. For those of you unfamiliar with the specific problem, in Windows 7 the default behavior of UAC was changed so that the user is not prompted for access to Windows programs, such as control panel applets, as they are in Vista. UAC also no longer uses the "secure desktop" mode for confirmation by default.
And a new control panel is provided to let the user choose the behavior of UAC in Windows 7. There is a slider control with 4 levels: level 4 is the same as Vista, with all the same prompting for system-level changes and secure desktop; level 3, the default, is the same as level 4, but doesn't prompt for changes in Windows settings, like the control panel; level 2 is the same as level 3, but does not use the secure desktop; and level 1 shuts off UAC; no prompting at all. The secure desktop is a special mode in which you can only interact with the UAC prompt, and no other software.