Skip Links

Network World

  • Social Web 
  • Email 
  • Close

BeyondTrust tames Vista’s UAC pop-ups, leaves security intact

Privilege Manager 3.5 lets companies eliminate troubling UAC prompts via security settings in Microsoft’s Group Policy feature of Active Directory
By John Fontana , Network World , 08/21/2007

Management vendor BeyondTrust Tuesday unveiled software that lets companies nearly eradicate the pop-ups that plague Windows Vista’s user account control feature.

BeyondTrust released Privilege Manager 3.5 with a feature that plugs into Microsoft’s Group Policy infrastructure and lets IT control administrative rights needed to access some applications.

Vista’s UAC feature was touted as a way to avoid giving users administrative rights to their desktops. With those rights, users can install software and control the entire machine -- and so can malicious programs that secure administrative rights. UAC was designed to curb that problem, but users quickly found that the number of pop-up windows UAC generated was confusing at best.

“The things that were scaring us away from Vista were the hardware requirements and UAC,” says Omar Ghneim, network administrator for EXCO Resources, an energy company based in Dallas. “We tried Vista on a few administrators’ machines, but they couldn’t handle the pop-ups and we went back to XP the next day.”

Ghneim says he could not even run a command line without a pop-up. But after evaluating the UAC add-on to his 3-year-old Privilege Manager deployment, the company decided to go ahead with a Vista rollout.

“We were looking at late 2008 for any Vista rollout, but now we are looking at Q1 or Q2," he says. “We are SOX compliant and a public company and this passed all the auditing. The auditors were fine with this.”

With Privilege Manager 3.5, companies can run with UAC on or off and still eliminate the UAC prompts via security settings in Microsoft’s Group Policy feature of Active Directory.

When UAC is enabled, Privilege Manager policies set by a network administrator apply before a UAC dialogue box appears. If UAC is off, Privilege Manager policies will automatically elevate privileges for any activity authorized by the network administrator.

The operations are all hidden from the user, who continues to get access to all applications that require administrative privileges or that require an administrative password. The software also supports Windows 2000, XP and Windows Server 2003.

Privilege Manager 3.5 is priced starting at $30 per seat.

Partner Content
CA logo

CA Network & Voice Resource Center

Comprehensive Network & Voice Management Visit CA Network & Voice Management Resource Center and get insights into industry best practices, information that helps you to address your challenges.

CA Network & Voice Management Resource Center

whitepaper

Managing Voice Over IP for Successful Convergence

Voice over IP (VoIP) has much to offer in cost savings but some customers have concerns about VoIP call quality compared to the quality of traditional voice services. This white paper will help you learn how to take the right steps so that voice quality is assured.

Managing VoIP for Successful Convergence

whitepaper

The Changing Face of Network Management

Managing your network is serious business. This paper discusses the benefits of integrating configuration change-awareness into your network fault management solution

Download Whitepaper

Comments (1)
Login
Forgot your account info?

RE: BeyondTrust tames Vista's UAC pop-ups, leaves security intactBy Hampel Rutledge on August 22, 2007, 12:28 pmWe are looking to deploy about 75 machines running Vista and are very leary of the UAC popup problem. Our users will simply go bannanas if they get these during...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

If the IT manager is knowledgeable regarding Cisco technology, he would have 2 options. Option 1 - Consult...- Anonymous

Join the Discussion