Atlas-OS / Atlas

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
https://atlasos.net
GNU General Public License v3.0
13.01k stars 507 forks source link

[BUG REPORT] - Disable Automatic Elevation of Admin and UAC Prompts in Atlas OS #747

Closed lh1207 closed 1 year ago

lh1207 commented 1 year ago

Description

Currently, after the installation of Atlas OS, the system automatically elevates the user to admin privileges and disables all UAC prompts without any consent through the ConsentPromptBehaviorAdmin registry key. This feature poses a security risk as it could potentially allow malicious software to gain access to sensitive system files and data. By addressing this issue, users, especially those not as acquainted to computer management, would have more control over their system's security and could ensure that they are only giving admin privileges to trusted applications and software. It would also be helpful for users who prefer to work with non-admin accounts for added security.

Steps to reproduce (add screenshots if applicable)

  1. Install AtlasOS with default settings
  2. Check the ConsentPromptBehaviorAdmin registry key to confirm it is set to 0 after installation

Expected behavior

Enable UAC.cmd should be the default script ran by AtlasOS. Only advanced users should have the ability to disable UAC since they will yield the knowledge and risks that come with disabling UAC as opposed to leaving it on.

Actual behavior (add screenshots if applicable)

Disable UAC (default).cmd is the default script ran by AtlasOS, which generates the proposed security flaw in the script.

Atlas Version

Atlas 10 22H2

Desktop information

Applies to all systems

Requisites

Additional content

No response

JayXTQ commented 1 year ago

This was done purposefully by one of our devs, we know of the risks and we don't know if they will revert it. Honestly, I don't see the issue with having UAC off if you know what you are doing but yeah. For now this may or may not be changed. Thanks for the query though!