In a reversal, Microsoft said on Thursday that it will make changes to the way a controversial security feature works in Windows 7.
After getting lots of feedback that Windows Vista too often prompted users to approve changes, Microsoft had decided in Windows 7 to prompt users less frequently. However, in recent days, some enthusiasts and security experts warned that the specific changes Microsoft planned to make with Windows 7 could put users at risk.
Microsoft initially downplayed the risks and defended its choices around the User Account Control feature. On Thursday, though, the company's two top Windows engineers said the company will make some modifications in response to the outcry.
Microsoft won't change the default setting--which is to notify users only when a program is making changes to their system--it will add an exception when changes are being made to the UAC itself. Starting with the upcoming "release candidate" version of Windows 7, changes to the UAC settings will require user approval, senior vice presidents Jon DeVaan and Steven Sinofsky said in a blog posting.
"With this feedback and a lot more we are going to deliver two changes to the Release Candidate that we'll all see," the pair wrote. "First, the UAC control panel will run in a high integrity process, which requires elevation. That was already in the works before this discussion...Second, changing the level of the UAC will also prompt for confirmation." … Read more