Quote: "Unfortunately none of this solves the problem with file permissions."
Does for me (I may have done something else too, don't recall. But yeah, once I'd disabled Windows security I can create, modify, execute any executable in any location). These work fine on my machine:
Test #1
MAKE FILE "C:\Program Files\aTEST.EXE"
Test #2
// Compile only (F4) to the target "C:\porn.exe" - suspicious enough?
// Then zip the exe up and copy the zip to Program Files (or Program Files (x86))
// Extract the zip file and it should run the exe. If it doesn't, take ownership of Program Files and try again.
PRINT "This runs"
WAIT KEY
END
Quote: "I recommend turning the security slider all the way up. Not only do you still have control, you know when a program is doing something that requires escalation."
Nein, that's what COMODO is for. If you set it to "Paranoid Mode", it'll alert you to anything from executable modifying registry or executable modifying executable to mundane things like executing explorer or direct screen access (with the exception of executables that you tell it not to notify you about).
You can define applications as types (eg: safe) and give each a custom set of permissions. You can also set default behavior and have it remember your selected action for an app.
Yes, it's not as simple as Windows security but it's actually safer and more convenient in the long run - provided you can use it and do so correctly.
I guess it boils down to how much you really are prepared to muck about. For example, I'll admit those COMODO messages are annoying when I'm installing something but, unless I know it's from a trusted source, I like to know exactly what that app is up to and you do have the option of turning it off for the entire installation or on a per-component basis (if the installer has multiple components). I download many apps that are in zip and run the installer and they run fine for me.
Quote: "I have ran with UAC all the way down for 3 years, and never had a problem. And im almost fine with windows blocking my EXE files, but when it dosn't tell me and I can't turn it off, I get pissed off."
COMODO gives you the option of [allow | block | permanently allow |permenantly block] then and there.