|
Authored by: Anonymous on Thursday, September 20 2012 @ 08:54 PM EDT |
Practically no normal program requires admin to run. There's no obstacle to
using a real limited account (as opposed to UAC which is close to pointless,
particularly in domains) and getting stuff done.
Admin is required on installs to program files because that's a central location
accessed by all users (including admins of course), which would mean not
requiring admin would be a priviledge elevation issue (just overrwrite something
in there with hacked.exe). That's the most common way programs are installed,
but there's no particular reason for it to be that way (see: google chrome for
example).
Microsoft *is* running a heuristic on progams launched looking for
"install/installer" and such and doing stuff there (I think vista
asked for elevation automatically if it thought you were running an installer -
windows 7 changes this to asking if it installed correctly and trying again as
admin if it looks like something went wrong). This is REALLY ugly, but the
reasons are pretty sound - the typical quality of installers on windows is
seriously lacking and MS are just trying to work around terrible third (or
second, it's not like MS is a shining example of perfect code!) party code.[ Reply to This | Parent | # ]
|
|
|
|
|