PaulSpoerry.com

I rarely use network shares on my computers. Ok, I have a few setup for the family to use if they need to copy something from one computer to another and a share for our network storage. Other than that I have always favored using admintrative shares. These don’t show up in network neighborhood, but can be accessed by using \\computername\C$. The “$” at the end of a share name makes it invisible to network browsing, but otherwise it is a regular share. As the name implies, administrative shares are only available to those in the Local Administrators security group. This is turned off by default in Vista. Bummer, it’s so handy… I guess that’s part of the big security push. *shrug*

To enable administrative shares you gotta make a registry change. Click on the orb and in the search box type ‘regedit’ and hit enter. Browse to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System. Add a new DWORD called “LocalAccountTokenFilterPolicy” and give it a value of 1. Reboot and yer done!

I love the concept of UAC. I’m sure it’ll make the OS more secure for people like my mom. For power users, you’ll soon want to just shut the damned thing off. I know it has good intentions but it just gets in the way sometimes. I was always under the impression that UAC was either on or off, and that if you turned it off you lost some of the security built into IE7. Turns out the folks over at TweakVista have written up an article on how to disable UAC, but only for the administrator accounts. That’s pretty slick, now it won’t get in my way, but it will prompt my wife/kid/mother/etc and help keep them safe.

Follow these steps to disable UAC only for administrators:

1. Click on the Start button and type in secpol.msc and hit Enter.
2. Expand Local Policies and then Security Options.
3. Scroll to the bottom and locate “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode”.
4. Right click on this setting and select Properties.
5. Set the value to Elevate without prompting.
6. Reboot.

As soon as you do this, the security center will start barking at you that UAC is disabled. I guess they intend to annoy you one way or another. You can of course disable the security center alerts as well. Click on the alert in the system tray, then click Change the way Security Center alerts me and select ”I do not want notification messages from Security Center”.