Having just (relatively) recently begun using Windows 7 in a complicated and demanding work setting, I can truly see why it takes businesses years to upgrade to the latest from Microsoft. My office uses a series of encrypted volumes, which are mounted and then shared across our network. It’s not terribly complicated since there are no multiple domains or active directory stuff, but it does need to have effortless n0-nonsense sharing and be totally reliable.

So I installed Windows 7 on my primary office system which acts as a bustling hub of data. Several computers access and search across hundreds of gigabytes of data from multiple encrypted volumes. For this reason, this particular system is mission-critical and downtime must be minimized; as a result, I stuck with XP since 2007 because Windows Vista was simply not up to snuff at the time and launched only a few months after I built it.

Windows 7 beefs up the security significantly over Vista. It still retains certain quirks I find obnoxious, like UAC. For example, UAC continues to prompt me every time I launch CCleaner — while I can of course completely disable UAC, there’s still no simple checkbox to “never ask again” for individual programs. That kind of thing makes me want to disable UAC for good, however, I’ve noticed that some programs won’t install correctly if you have UAC disabled so for that reason I am leaving it on for now.

In Vista, to share an encrypted volume all I had to do was mount the volume using TrueCrypt, go to Computer, right click the drive and hit Properties, go to the Sharing tab and then click Advanced Sharing then click `Share this folder`, click Permissions, then click Allow for full control for “Everyone” (or enter in the individual computers as necessary). A lot of steps, sure, but at least it worked immediately without any other fiddling around.

In order to allow sharing of a volume in Windows 7, you must take ownership by entering your “username”, which is different than your hostname or computer name. (You can quickly determine your hostname by opening a command prompt and simply typing “hostname”; or, right-click Computer on the start menu and clicking Properties, you’ll see it under there as “computer name”). The username — the name you set for yourself which appears on the login screen — can be identified quickly by hitting the Windows Key + L to “lock” the screen. So, I can take ownership of the drive by typing in my username, or by typing “everyone” if I trust my network. In addition, Windows 7 does not provide “Everyone” there by default, making this necessary.

Without taking these steps, you get the dreaded “Windows cannot access \\hostname [...] The network path was not found.” This is particular infuriating error since the network path can obviously be found, since the system is clearly visible on the network and Windows provides very little information on how to resolve this newfound problem which did not exist on any prior versions of Windows. So, the photo below shows how I enabled full root access for Everyone on the network to ensure foolproof access.

The good news is that you only need to do this once, even when you dismount the volume Windows will still remember your ownership settings. So once we’ve taken ownership of the volume, we can then enable sharing like before.

To get the sharing done, we have to right click on the drive, click Properties, then navigate to the Sharing tab. Because we’re attempting to share an entire drive, and not just a folder, Windows 7 disables the simple “Share…” button (see below), so we must click Advanced Sharing and then click “Share this folder” checkbox. Then we can select Full Control – Allow for Everyone which will allow everyone on the network full root access to the drive with no questions asked.

Under the Share Permissions, you can enter different usernames of specific systems you wish to share the volume with. Unfortunately, if this is an encrypted volume, you will need to do it again for each time you mount the drive which can be a hassle. For physical hard drives, Windows 7 should remember your sharing preferences each time you plug in the drive.

admin@variableghz.com

I remember beta testing Windows 95 when it was code-named Chicago. Back then, I was running MS DOS 6.22 and running Microsoft Windows for Workgroups 3.11. I also beta tested numerous versions of Windows 98 when it was codenamed Memphis, Windows 2000, Windows XP, which brings us to this century where I beta tested so many versions of Microsoft Windows Vista (or, Longhorn) that I can’t even recall. I watched as Microsoft scrambled to try to meet the security disaster that were plaguing Windows XP. Some of you may not recall, but Windows XP was such a disaster in terms of security that it was rare to find a computer running a default copy of Windows XP, without a ridiculous infestation of spyware of some kind.

Back in the DOS days, I rarely used Windows 3.11 for hardly anything. I would use DOS to copy files, defragment my computer, browse BBSs, send e-mails, write batch scripts, just about everything. In fact, even when I switched over to using Windows more often I would still go back to DOS to do simple copy commands because it was easier for me to just write out the commands longhand. I used a hex editor to check executables for viruses because I didn’t have any antivirus software at the time. I guess my point is that Microsoft has had more than enough time to make a working security model for Windows.

The fact that they missed that opportunity, decided on UAC (User Account Control), made updates in service pack 1 (SP1) for Vista, and it still prompts me every single time I uninstall a program despite the fact that I may have uninstall the program dozens of times… is absurd. Why is there no option for me to check a box labeled simply “do not prompt me again.”? The lack of such a checkbox is what drives me to completely disable UAC.

For those of you who don’t know, to disable UAC simply open up the control panel type “UAC” in the upper right search box, click “Initial Turn User Account Control On or Off” uncheck the box and press OK, then reboot.

I read numerous articles by Paul Thurrott telling me to keep UAC enabled because it’s far more secure. I agree. It is more secure for a variety of reasons that operate under the hood, but I just can’t bring myself to do it. Simply the fact that Windows Vista comes with Windows Defender in many ways makes Windows so much more secure than XP particularly when combined with powerful anti-virus such as a Avast! That it seems unnecessary to piss off end users with UAC.

Obviously, on Microsoft’s decision to have every single user treated as a default administrator in Windows XP was a catastrophe. I know that I’m writing this article a little bit late, given that Microsoft is about to release Windows 7 in short order and they intend to fix UAC dramatically. However, I felt it necessary to explain why I still refuse to enable UAC on my computers.

Initially, I was very excited about UAC. Microsoft promised again and again (SP1 articles, but you get the idea) to make UAC less intrusive and less irritating in general. At the time of launch, however, it was still prompting far too frequently. None of this morning, in any way, is going to affect the type of people who actually need to be warned of their stupidity. The above linked articles discuss SP1, but it’s essentially the same thing, Microsoft said it before launch, and they said it again before SP1… it still pisses me off.

Simply put, UAC is a nice gesture and in some ways an improvement, but I just don’t see how it can practically prevent anything more than antivirus and anti-spyware solutions already provide. That is to say, I cannot imagine anybody actually clicking cancel and preventing something from loading. I just don’t expect the average computer user to know what should and should not be running. Isn’t that how Norton has gotten away with making millions off of people not knowing anything better? Average computer users don’t know what should be allowed to run, it is the job of anti-spyware and antivirus to figure this out for the average computer user. I was happy to hear that Microsoft has announced that they intend to offer free antivirus software (codename: “Morro”) for this exact reason. Maybe this will have the added benefit of finally getting rid of Symantec once and for all. Good riddance.

I get particularly bothered when UAC prompts me for things like disk defragmenter. How on earth can the disk defragmenter possibly have any sort of adverse effect on the entire system? What sort of malicious software would ever want to launch the disk defragmenter? And, if so, and worst-case scenario the disk defragmenter were maliciously launched, then what?

If you can think of any time that UAC has actually helped you prevent anything bad from happening, please let me know.

Related software: TweakUAC.

As always, e-mail or comment with questions.

admin@variableghz.com