The Rough Edges

The first thing that bothers us is a technical matter, and that is the addition of various levels of UAC , and the security ramifications of that. We’ve talked about this before in our look at the release candidate, but it bears repeating.

With the changes made to Windows 7, at the default UAC level of 2, signed Microsoft executables are auto-elevated to admin privileges when run by an admin. This primarily manifests itself in the Control Panel, where most of the panels are allowed to auto-elevate so that users may make changes without facing a UAC prompt.

There’s certainly a benefit to this in terms of user interaction, since the Control Panel and installing software are the two most common admin-level tasks a user will do. The latter is a repeating occurrence, but the former is something that usually only happens once when the computer is set up. So by making this change, the new-user experience involves less UAC.


The UAC Control Panel With Level Slider

It’s the security ramifications of this that concern us. Someone already managed to exploit this in the pre-RC phase (where the UAC control panel itself was auto-elevating) to disable UAC entirely. The concern we have is that all of these auto-elevating programs are an obvious target for a local privilege escalation attack to accomplish something similar, if not the same. Imagine finding a way to make the Display control panel execute a 3rd party application with admin privileges, for example.

Now to be clear, it’s not as if this is the only way to achieve local privilege escalation attacks. The Windows kernel itself is a target, and I can’t think of any major desktop OSes that haven’t seen such an attack in the past. But this makes that easier, potentially much easier. And that’s a risky proposition when a UAC prompt may be all that’s left between malware executing and running amok or not.

Certainly someone is going to bite my head off for this, but I don’t think Microsoft should have made such a fundamental change to UAC. More casual users may not have been fond of how Vista or UAC Level 3 handle security, but it was a more secure choice than Level 2. To that end, I certainly wouldn’t recommend running Win7 at the default UAC level for any computer connected to the internet.

On a lighter note, even after using the release version of Win7 for 2 months now, I’m still wondering who thought it was a good idea to make the title bar of maximized windows semi-transparent. Certainly for windowed windows it makes some sense, as you can see what’s underneath. But for maximized windows? If I was concerned for what was under the window, why would I have it maximized?

Finally there’s Windows Mail, or rather the lack of it. Obviously email clients have come under diminished importance in the last few years as web-based email (e.g. Gmail) continues to rise in popularity, but this doesn’t mean that an email client is not necessary.  And I get that Microsoft wants to separate the email client from the operating system so that they can push out major client updates outside of major OS releases.


  Windows Mail: Have you seen me?

But what I don’t get is why there’s any reason good enough for Windows to not come with an email client at all. It’s 2009, why is there an operating system being released without an email client? I only hope that OEMs are adding email clients to their prebuilt computers, otherwise there may be some very confused Windows 7 users as people start snapping up new machines.

The Only 3 Editions You’ll Care About Test Setup
Comments Locked

207 Comments

View All Comments

  • MrPete123 - Monday, October 26, 2009 - link

    I should also mention that Win7 has a lot more features available to developers such as a biometric and touch screen support. The touch support is already being used by HP on their touchsmart computers.

    I think the fact that Win7 was such a modest update (compared to the XP to Vista transition) is why its been getting such great reviews. Vista SP2 is a solid OS, and to depart too far from that would be risky.

    I used Vista when it first came out and it had terrible disk performance and buggy drivers... I can see why people didn't like it. Since SP1 its been a pretty solid, fast OS. However its never been able to recover its tarnished reputation.
  • theslug - Monday, October 26, 2009 - link

    "On a proper system, Vista has always been the better choice for Windows."

    Oh really? Why did so many people decide to stick with XP then?

    "If you’re not on Windows Vista or Windows 7, you should be. XP has been outdated for quite some time."

    XP runs every program I have just fine. Just because it's outdated doesn't mean it can't be used. I'll decide what OS to run on my computer, thx.
  • strikeback03 - Monday, October 26, 2009 - link

    Well, then you really didn't need to read the article for advice, did you?

    That statement was probably poorly worded, as at Vista launch there were definitely reasons to stick with XP, and I'd guess there are a decent number of people like me, who skipped Vista as by the time SP1 was out, it was known that 7 would be coming soon and not to bother stopping at Vista in between.
  • fepple - Monday, October 26, 2009 - link

    On the laptop page, should that be "second to resume from hibernate"? If not, then I dont think its really that important a statistic, I'd be happy for my Desktop to take twice as long to hibernate, if it resumed in half the time :)
  • drfelip - Monday, October 26, 2009 - link

    What about the performance benefit of SSDs under Windows 7? I think this is going to be my next upgrade.
  • Voo - Monday, October 26, 2009 - link

    I switched from XP to 7 when I got my free RTM from MSDNA and have been using it since then. Imho the usability improvements (new taskbar, search, that neat window snap stuff,..) and the overall look are really worth the upgrade and I'd buy the retail version anytime.
    I also took the chance to get a Intel SSD, so I'd have to install the OS in any case.. win/win situation ;)


    XP was nice while it lasted, but it shows its age and XP64 was never really up to top, so it was just time to change.
  • Wolfpup - Monday, October 26, 2009 - link

    I have to COMPLETELY disagree about OS X having the better interface. At best, it's personal preference, but I can think of a ton of examples where Windows-even older versions of Windows-have a more logical way of doing things. (Just two examples-it's much easier to create/manage files from Explorer, whereas OS X more forces you to use the program you want, and then save the file out through the program-Windows does either way almost equally well. Another-save dialog boxes in Windows have long had FAR more functionality with being able to manage other files while saving-something I end up making use of near daily.)

    OS X's font rendering continues to be horrific too, and it STILL doesn't play Blu Rays!

    But...I do like the changes made to the task bar on Windows 7, for the most part. It mostly is a "best of both worlds" approach, although it doesn't do EVERYTHING as well as what it's replacing. (I miss the classic Start Menu too, which had more functionality than the new one, but some of the new Taskbar changes help mitigate that.)

    I'm glad Anandtech continues to champion UAC. One of the first things I did after installing 7 was to change it back to it's highest setting. I'm baffled by the resistance to it. For one thing, OS X has done THE SAME THING since it's inception-which is a GOOD thing. For another, you don't see it very often, and we should all want that extra layer of security.

    I've seen a self professed "computer expert" going on about how *HE* doesn't need UAC-and completely not getting it that we probably benefit MORE from it than the average user, since we know if something we're doing would need to have prompted that. He wasn't getting it that it's a protection from malware, etc.
  • danielkza - Monday, October 26, 2009 - link

    I have to confess, even tough I like the UAC idea, I could not stand it in Vista: the protection did not make up for the annoyance.

    But I've been using it in Windows 7 since January, and I have no complaints whatsoever: being a power user, knowing what the (tons of) diff. programs are up to is incredibly helpful.
  • Pastuch - Monday, October 26, 2009 - link

    I completely disagree with a lot of the conclusions in this article. I think Anandtech is a little blind to the performance benefits of Windows 7 over Windows Vista because all the equipment they use for testing is brand new and high end. The bulk of laptop users have machines that cost $800 or less. In the last year Netbook sales and lower end laptops have become the norm. This review completely ignores those changes in the market place. I have installed Windows 7 on lots of lower end laptops that previously had Vista and in 100 percent of the cases the users have commented on how much faster Windows 7 feels.

    If your an HTPC user then Windows 7 is a must IMHO. I've been using 7 since January and I have yet to see a BSOD. I definitely can't say the same for my Vista machine (it's 7 now too).
  • The0ne - Monday, October 26, 2009 - link

    I agree, I think this article is incomplete for the most part. As I commented on the 2nd page Tom's hardware does have some sort of test for this. I don't know because I only read the conclusion. They seem to be in agreement with us about Windows 7 being good on older PCs, especially laptops.

    I've converted many laptops as well and they are definitely running better with Windows 7.

Log in

Don't have an account? Sign up now