First a brief background on why I disable UAC. I'm a Windows Power User. I use the command-line extensively to automate application installs, script system configuration, develop software, and much more. I run using a domain account which is a member of the Administrators. About 80% of what I do on my system is through the shell (PowerShell in particular). As a result, UAC is a nuisance. If UAC is enabled, the shell opens up without sufficient privilege to do much at all. It's not possible to modify environment variables nor install system programs. Basically, it's impossible to perform much of the automation I achieve through the shell. I can run an elevated command shell, but that shell doesn't run as the user with which I'm logged-in, so doesn't have the correct settings or environment to operate effectively (can't connect to proper network shares, can't honor or edit local user's settings, etc), so it's not a viable alternative.

With Windows 7, I simply disabled UAC and that worked great for me. As an advanced power user, software engineer, and network security professional, I'm able to avoid the common pitfalls that UAC was designed to protect.

Unfortunately, it seems that with Windows 8, disabling UAC also disables essential apps, such as the built-in PDF reader and launching Internet Explorer from Metro. If I try to open a PDF, I get an error, "This app can't be activate when UAC is disabled." Obviously, this is inconvenient. I would like to be able to use all of the features of Windows 8 as an administrator. Enabling UAC renders my system unusable from the shell, so is not an option.

I did a search on this error message, but there's not much out there about this message currently (Google returned one relevant result in English).

So I have two questions.

First, what apps are affected? So far I've only encountered it with the PDF viewer and when launching IE from the Start Menu (or Metro... not sure what to call it yet), though I can launch IE from its shortcut. If this issue is isolated to just the PDF viewer and metro-launched apps, I should be able to work around it.

Second, is there any way to enable these apps to activate when UAC is disabled (bypass the check that causes the error), or is there any alternative to avoid this error?

Try enabling this setting so that your token is not filtered and runs properly elevated under your own Creds.  (keeping mapped drives, etc) -  update - I am not sure this is working in Windows 8, can anyone else confirm ?

http://support.microsoft.com/kb/937624

Important This workaround may make your system unsafe. Microsoft does not support this workaround. Use this workaround at your own risk.
To work around this problem, configure the EnableLinkedConnections registry value. This value enables Windows Vista or Windows 7 to share network connections between the filtered access token and the full administrator access token for a member of the Administrators group. After you configure this registry value, LSA checks whether there is another access token that is associated with the current user session if a network resource is mapped to an access token. If LSA determines that there is a linked access token, it adds the network share to the linked location.
To configure the EnableLinkedConnections registry value, follow these steps:
   1. Click Start, type regedit in the Start Search box, and then press Enter.
   2. Locate and then right-click the following registry subkey:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
   3. Point to New, and then click DWORD Value.
   4. Type EnableLinkedConnections, and then press Enter.
   5. Right-click EnableLinkedConnections, and then click Modify.
   6. In the Value data box, type 1, and then click OK.
   7. Exit Registry Editor, and then restart the computer.

Here is an inline elevation script.  If you rewrite it as a wrapper script, (or drop into your profile as a callable function) all your scripts will self elevate.  Combined with the above registry key, things will go more smoothly. 

http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/09/23/a-self-elevating-powershell-script.aspx

I've re-enabled UAC so I can run Windows Store Apps (including Internet Explorer, apparently), but one of the first problems I encounter is the creation of symbolic links. According to this thread, the privilege to create symbolic links can't be assigned to users if UAC is enabled. This requires the scripts and programs to run as Administrator.

Next I'll try Knuckle-Dragger's suggestion to see if this helps the situation.

I was pleased to find that I can set my command-prompt (Console2-hosted PowerShell) to run as Administrator, and it still shows me as the user and has my environment variables, so that may be a solution.

Knuckle-Dragger,

This is some helpful information. The elevation technique looks helpful. I'll see if I can re-write the elevation script as a function to act like 'sudo' does on Unix.

This is curious. When I install, I turn off the UAC, as my default. I have no problems opening the Store or anything in the Metro screen. What I have found, is that disabling the Windows Firewall, or using certain antivirus programs (Avast in particular), disables the store and Metro apps.

(Windows 8 RTM - 64 Bit)

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

http://www.msfn.org/board/topic/155910-taking-back-the-registry-from-trustedinstaller/

This is curious. When I install, I turn off the UAC, as my default. I have no problems opening the Store or anything in the Metro screen. What I have found, is that disabling the Windows Firewall, or using certain antivirus programs (Avast in particular), disables the store and Metro apps.

(Windows 8 RTM - 6

8 has more security restrictions than earlier releases of windows

I am now dual booting, using 8 like a tablet and using 7 for games etc

First, what apps are affected? So far I've only encountered it with the PDF viewer and when launching IE from the Start Menu (or Metro... not sure what to call it yet), though I can launch IE from its shortcut. If this issue is isolated to just the PDF viewer and metro-launched apps, I should be able to work around it.

This is curious. When I install, I turn off the UAC, as my default. I have no problems opening the Store or anything in the Metro screen. What I have found, is that disabling the Windows Firewall, or using certain antivirus programs (Avast in particular), disables the store and Metro apps.

(Windows 8 RTM - 6

i am using 8 in a partition and the only account (mine) is the administrator

I have not yet tested it on the server outside of connecting to the shared hard disks and remote desktop which both work

I have been test all of my games

over the weekend I removed all of the games and I am now testing the corporate features in a forest of servers

I have to be careful as its hard to impossible to undo if I screw it up

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

This looks like a good read, with a lot of technical detail. I'm not sure it's the tool for me, because it's not obvious to me which user I should exec as (Administrator, TrustedInstaller, etc). In particular, I want the symbolic links to be owned by me and not have any strange permissions due to being created by another user. It doesn't appear as if devxexec nor 'runas' allow running as the same user but with the Administrator token. If I'm wrong, please correct me.

I have found that running with UAC disabled but always running my Console2/PowerShell application with "run as Administrator" enabled works very well. The console then runs in my user context, but with the Administrator token, so I'm able to create symbolic links and do all of the other work I'm used to doing, but then most apps (including Metro) launch as the limited User account.

I did lower the UAC warnings to the lowest level, essentially None, because I want to be able to rapidly spin up the command prompt without any interference, but that's my preference and I'm willing to accept the security risks that go with that.

• Marked as answer by Jason R. Coombs Monday, October 01, 2012 3:12 PM

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

This looks like a good read, with a lot of technical detail. I'm not sure it's the tool for me, because it's not obvious to me which user I should exec as (Administrator, TrustedInstaller, etc). In particular, I want the symbolic links to be owned by me and not have any strange permissions due to being created by another user. It doesn't appear as if devxexec nor 'runas' allow running as the same user but with the Administrator token. If I'm wrong, please correct me.

I have found that running with UAC disabled but always running my Console2/PowerShell application with "run as Administrator" enabled works very well. The console then runs in my user context, but with the Administrator token, so I'm able to create symbolic links and do all of the other work I'm used to doing, but then most apps (including Metro) launch as the limited User account.

I did lower the UAC warnings to the lowest level, essentially None, because I want to be able to rapidly spin up the command prompt without any interference, but that's my preference and I'm willing to accept the security risks that go with that.

• Marked as answer by Jason R. Coombs Monday, October 01, 2012 3:12 PM

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

This looks like a good read, with a lot of technical detail. I'm not sure it's the tool for me, because it's not obvious to me which user I should exec as (Administrator, TrustedInstaller, etc). In particular, I want the symbolic links to be owned by me and not have any strange permissions due to being created by another user. It doesn't appear as if devxexec nor 'runas' allow running as the same user but with the Administrator token. If I'm wrong, please correct me.

I have found that running with UAC disabled but always running my Console2/PowerShell application with "run as Administrator" enabled works very well. The console then runs in my user context, but with the Administrator token, so I'm able to create symbolic links and do all of the other work I'm used to doing, but then most apps (including Metro) launch as the limited User account.

I did lower the UAC warnings to the lowest level, essentially None, because I want to be able to rapidly spin up the command prompt without any interference, but that's my preference and I'm willing to accept the security risks that go with that.

• Marked as answer by Jason R. Coombs Monday, October 01, 2012 3:12 PM

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

This looks like a good read, with a lot of technical detail. I'm not sure it's the tool for me, because it's not obvious to me which user I should exec as (Administrator, TrustedInstaller, etc). In particular, I want the symbolic links to be owned by me and not have any strange permissions due to being created by another user. It doesn't appear as if devxexec nor 'runas' allow running as the same user but with the Administrator token. If I'm wrong, please correct me.

I have found that running with UAC disabled but always running my Console2/PowerShell application with "run as Administrator" enabled works very well. The console then runs in my user context, but with the Administrator token, so I'm able to create symbolic links and do all of the other work I'm used to doing, but then most apps (including Metro) launch as the limited User account.

I did lower the UAC warnings to the lowest level, essentially None, because I want to be able to rapidly spin up the command prompt without any interference, but that's my preference and I'm willing to accept the security risks that go with that.

• Marked as answer by Jason R. Coombs Monday, October 01, 2012 3:12 PM

You can change your IE settings to open in the desktop from the start screen for added convenience.

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

This looks like a good read, with a lot of technical detail. I'm not sure it's the tool for me, because it's not obvious to me which user I should exec as (Administrator, TrustedInstaller, etc). In particular, I want the symbolic links to be owned by me and not have any strange permissions due to being created by another user. It doesn't appear as if devxexec nor 'runas' allow running as the same user but with the Administrator token. If I'm wrong, please correct me.

I have found that running with UAC disabled but always running my Console2/PowerShell application with "run as Administrator" enabled works very well. The console then runs in my user context, but with the Administrator token, so I'm able to create symbolic links and do all of the other work I'm used to doing, but then most apps (including Metro) launch as the limited User account.

I did lower the UAC warnings to the lowest level, essentially None, because I want to be able to rapidly spin up the command prompt without any interference, but that's my preference and I'm willing to accept the security risks that go with that.

• Marked as answer by Jason R. Coombs Monday, October 01, 2012 3:12 PM

Registry 'Power User' tips. 

http://developex.com/custom-software/devxexec.html

devxexec.exe /user:TrustedInstaller regedit.exe

This looks like a good read, with a lot of technical detail. I'm not sure it's the tool for me, because it's not obvious to me which user I should exec as (Administrator, TrustedInstaller, etc). In particular, I want the symbolic links to be owned by me and not have any strange permissions due to being created by another user. It doesn't appear as if devxexec nor 'runas' allow running as the same user but with the Administrator token. If I'm wrong, please correct me.

I have found that running with UAC disabled but always running my Console2/PowerShell application with "run as Administrator" enabled works very well. The console then runs in my user context, but with the Administrator token, so I'm able to create symbolic links and do all of the other work I'm used to doing, but then most apps (including Metro) launch as the limited User account.

I did lower the UAC warnings to the lowest level, essentially None, because I want to be able to rapidly spin up the command prompt without any interference, but that's my preference and I'm willing to accept the security risks that go with that.

• Marked as answer by Jason R. Coombs Monday, October 01, 2012 3:12 PM

Sounds good.  Here is another, apparently DCOM is messing about with our Explorer.exe token, this is a cure for that.

http://www.msfn.org/board/topic/144776-unable-to-open-an-elevated-windows-explorer-window/

I'm going to use dvexexec for regedit without having to take-ownership, I can drop my reg add commands in a batch file, and call the batch file from dvexexec.   Takes one line via batch vs 3 lines for set-acl method (take-ownership, set full permission, then edit registry).   Easier for me to u

.

Dave, can you clarify how you turn off the UAC? Have you confirmed that you are able to open PDFs (and that they are opening with the Windows PDF viewer via Metro)? Are you able to open IE from the start menu? Have you confirmed that you have in fact disabled UAC (when you click Windows + R and type cmd as timootei suggested, are you running as admin and can you create symlinks)?

Please try to answer each of my questions, as if you in fact have a configuration that allows running Metro apps with UAC disabled, I would like to learn how to do that.

 I run Nitro as default, but, for the exercise, I re enabled the Reader as my PDF default - It ran perfectly.. But I have turned the UAC to the bottom, through Msconfig. I open the Desktop IE (My preference) from the Metro start. I "Pinned to start" from the .exe in program files (x86). Otherwise all of my Metro icons are opening without problem. I cannot confirm I can that I can create symbolic links, as I have no reason to use them.

As I intimated to Timootei, As far as I am concerned, I have the UAC off, to my satisfaction. I do not receive popup requests. It would serve no real purpose to me to lower the UAC security further.

Thanks for clarifying. Having UAC turned all the way to the bottom (warnings dialed down) is different that having UAC disabled, and I think that's what Tim was trying to say, and that's the reason why you don't encounter the issues I did.

And indeed, that's what I've ended up doing - keeping UAC enabled, but dialed down. Now my apps start nicely, but I can only create symbolic links (and perform other administrative tasks from the command line) if I launch the command line with "run as Administrator" checked.

I am in the same boat, aswell though I ain't such a power powershell user as the OP.

Though, having bought Windows 8 *PROFESSIONAL* (i.e. not "beginner", "noob", or "don't touch this or it might explode" version). I get ANNOYED everytime I want to change hostfile for example, or copy something into program files (yes, I do NOT like to install software which can be obtained as a .zip - VLC or MPC-HC for example)

Having to run everything through a dumb right click - "Run as Administrator" doesnt make the system make feel convenient to use, though. But rather annoying. Yes, sure - I can understand 90% of the users do a "next next next" type of installations and one extra window with popup "are you sure" is going to definitely stop them (oh right ... )

So once again - question:

Is it possible to COMPLETELY disable UAC and have the damn Metro Apps running??? (yes, well I find PDF reader handy for example) Not to say I paid for the damn thing.

Not to mention I get extensively frustrated when I search for topics like this and am unable to find ANYTHING RELEVANT on the net (not to mention answers for the Windows Server family).

I suggest getting used to the UAC as its now more important in the security of the platform.

I also design programs to check for security routinely.

My issue is no where near as technical as the rest of you guys. I just hate UAC. I dont need my computer to hold my hand. If i wanted that i would have bought a Mac.

So to Microsoft everyone from the the power users to the daily gamer requests a solution to this issue. 

I am an extreme power user and I use the UAC on defaults with Vista, 7 and 8

This way the rig is safer from miscreants etc.

Need some help here, re-enabled UAC but still can't use the me

Need some help here, re-enabled UAC but still can't use the metro a

I couldn't agree more.

This is getting ridiculous---no metro apps work for me at all once I joined the domain.  Microsoft needs to figure a way how to resolve this issues.

I suggest getting used to the UAC as its now more important in the security of the platform.

I also design programs to check for security routinely.

Agreed.  UAC is just a poor implementation of a questionable idea.  There are altogether too many of these in Windows.

It doesn't appear that with Windows 8.1 the rules are any different.  It's stupid, really.  Microsoft at one time saw the light and made it possible for people to disable UAC, but apparently the management in charge of Metro/Modern thinks they know better than all the power users.

I've run Windows systems without UAC for years - machines with gigabit connections on which engineers browse the web freely.  No infections.

Configuring Internet Explorer to be less permissive by default, taking measures to block parasite web servers, backing up the strategy with an anti-malware package as nothing more than a safety net, and perhaps most importantly educating users on good computing practices - THESE are the bona fide ways to avoid malware.  UAC is just a stupid hack that makes a serious computer user's life more difficult.

I use Microsoft Security Essentials for XP, Vista and 7, 8 has it built-in.

I have seen many sneaky crap that snuck right by.

I am a developer so I have created tools to protect my shop. Its hard work as files keep changing.

My tools have detected tampering on some machines brought in to be cleaned up.

Hiho,

Same issue on Windows 8.1 Enterprise Enterprise Edition.

Try this baby here:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=dword:00000001

Cheers,

Helmut

Just a little help from your friends (tm) :-)

How does enabling the bogus "feature" being discussed here help, Helmut?

In answer to Jason's original question, as far as I can see everything you can do with a Microsoft "App" you can do with a desktop solution, including things like reading PDFs (the Adobe Reader software is still out there and works just fine with Windows 8), playing media (Media Player on the desktop, anyone?).  You can even still configure everything as far as I can see.

It turns out disabling UAC by setting EnableLUA to 0 not only gets you your full-time Administrator status, but it also just shuts off all the useless Metro/Modern fluff and allows you to concentrate on computing and real work.  Seems like a Good Thing all around to me.

I suggest that using the UAC is something you are going to have to endure.

So much malware is out there that every tool available should be used

UAC can prevent an unwanted attack

Well, that's a load of malarkey, VF.  If you think you need UAC then I suggest you're not Administrator-level material.

I haven't "endured" UAC for years, since Vista first came out.  Consequences?

• I've been a full-time administrator, in CHARGE of my workstation.  Everything just works; I don't have to convince the system to execute my commands.
   
• I have had zero (0) BUPKIS, NADA malware infections.  It hasn't even gotten close.
   
• On my main workstation I have used the same OS install since the first time it went in.  One install each of Vista x64, Windows 7 x64, and Windows 8.1 x64, then a highly productive, useful system that has just stayed fast and usable throughout its life.  I even used Windows Backup/Restore a few times to migrate the same OS install across hardware replacements after failures.

It just takes knowing what you're doing.  There are far, FAR better methods to keep malware away than inviting it into your system then at the last possible minute trying to keep it from getting at the family jewels.

I have had over a dozen machines in my shop this year already, all contaminated with malware galore to clean up

rasomware is the worst yet. one machine was encrypted across the board

lucky for him I had an image of his machine on a server, I use clonezilla

You're advocating the end users of the world use UAC.  I'm saying UAC is for end users, not administrators.

The issue is that too many people don't understand that there's a difference between these user populations. 

Ignoring the difference is just silly.  Computers are powerful enough and operating systems can be complex enough to support both.  Implying that everyone you run across (especially here) is a noob and incapable of working with the training wheels off is just wrong.

Bob, really.

• I advocate the ability to disable UAC and continue to use all the software.
   
• You chime in and say you don't mind it and what a good thing it is to have it on.

You always try to make it sound like you're being the reasonable one, but...

I'm saying a setting that would allow us both to have it our way would be nice.  You're saying what?  That it's right that I shouldn't be able to run Metro/Modern apps but have the rest of the system work the way I want?!?

You are arguing for restriction, while I am arguing for choice.  Who's being more reasonable?

Perhaps I should jump to your level:  I think you and everyone else should be forced to use a system with no protections at all, because everyone should need be educated and capable to use a computer.

See how silly it sounds to generalize everyone together?

I'm sorry, but if you find it pleasant to use a computer that's set to second guess everything you do, then you're either doing irresponsible things or happen to be doing things where it doesn't often interfere.  You're reasonable and smart enough to know that everyone doesn't do or need the same things from their computers

one of the reasons I have resorted to clone backups is the aggressive nature of cryptolocker and other ransomware crap that has surfaced of late.

I have run into many sites of late masquerading as Adobe Flash updates, I found malware on all of them

I cannot overemphasize the need for backups, do it now

I'm sorry, but if you find it pleasant to use a computer that's set to second guess everything you do, then you're either doing irresponsible things or happen to be doing things where it doesn't often interfere.  You're reasonable and smart enough to know that everyone doesn't do or need the same things from their computers

I rest my case.

Really?  I have no plans to rest mine.  

You refuted an absolutely reasonable and correct statement with that response.  I'm sorry if you felt insulted, but I suggest you get over it; I have no intention of candy-coating reality just for you.

UAC is a stupid "feature" designed to protect the system from people who don't know what they're doing.  I'm not even going to qualify that with an IMO.  It's a simple truth.

Nothing you or anyone says is going to change that UAC needs to be disabled for some kinds of computer usage. 

That you might not partake in that kind of usage doesn't change that fact.

If you want to discuss specifics...  As each new OS has come out, I have used UAC for months, gave it a proper try.  It turned out unworkable every time.  I keep UAC enabled in my VMs for testing - to understand what users are going to see.  That's the extent of its usefulness.

What I NEVER saw was a case where UAC HELPED me one bit. 

But there ARE things that are clunky and stay clunky despite your best efforts to set [ ] Run As Administrator flags, turn prompting down, change permissions, etc.

There are ongoing permissions issues you can't just get around easily; applications you just can't drag and drop to/from; things you find out you had to start As Administrator so you have to start over, files that don't actually write into the folder you specify but are redirected somewhere else... The list goes on and on, it's a MESS - and working around ALL these things takes your mind off what you're trying to accomplish.

Some folks expect to take computing to a higher level than others, and I imagine that's the root of most disagreements on this subject.

If you like UAC or need it and have a high tolerance for pain, use it.  I have no problem with that.  More power to you.

I DO have a problem with a feature that can't be turned off without causing an arbitrary loss of functionality.  I'm in complete agreement with the first post in this thread.  Bravo to Jason for having the balls to bring it up.

It'll only be a matter of time before someone discovers the right incantations to be able to allow Metro/Modern apps to be run on a UAC-disabled system - if Microsoft doesn't drop that arbitrary limitation themselves.

Well said. UAC is garbage that gets in the way especially for development systems.

Development systems NOT production systems. This is precisely where the App store would be used most.

Well MS, forget your app store because permanent "runas admin" is far more important to me.

No wonder its (app store) having trouble getting off the ground with decent apps, you keep getting in your own way.

Out of curiosity, why?  What useful things are there in the App Store that you need?

It's possible to run Windows 8.1 as an exclusively desktop system.  It works well this way, actually.

Don't get me wrong, I think it's utterly ridiculous of Microsoft to have arbitrarily decided that UAC must be enabled to run any Metro/Modern toy. 

They've dug their own grave with this one.  They couldn't force it on people in Vista and they're not going to get away with it this time either.

So here we are in May 2015.

Windows 8 and 8.1 have received only mild acceptance.

Windows 10 is on the threshold.

Clearly Microsoft is all about taking away the power and herding the sheeple in to the App Store for fleecing.

• Win 7 allowed UAC to be disabled.  Many (most?) power users do so.  Many find Windows 7 to this day the most serious, most powerful Windows ever.  It still has over 50% of the huge, huge market share.
   
• Win 8.1 didn't provide a UI for fully disabling UAC, but did respect the EnableLUA registry entry.  It actually works (I have over 1.5 years of daily usage to prove it).  We got to do without Metro/Modern Apps as a benefit -yes, I said benefit because lo and behold there haven't been ANY Apps that were impossible to live without.  Some would say there weren't any worth even looking at.  Reception of Win 8 has been DISMAL.  No surprise there.  Microsoft NEEDS serious users as a base.
   
• The jury is still out on whether Win 10 will effectively run as a desktop-only system with EnableLUA set to 0.  My initial findings are somewhat promising.  BUT...  Microsoft is less interested than ever in supporting serious computing by people who don't give a damn about Apps.  They're all about using Windows for frivolous things and on devices other than workstations and degrading the desktop, and they might just choose to make parts of the configuration process unavailable without UAC enabled.

Win 8.1 didn't provide a UI for fully disabling UAC

Just so people are clear - completely disabling UAC refers to using the following setting:

Security Policies (run secpol.msc) -> Local policies -> Security Options -> User Account Control: Run all administrators in Admin Approval Mode -> Set to disabled.

There is a GUI option for it, and you don't need to go regediting.

You're right of course.  I was referring to the fact that dragging the slider to the bottom in the control panel applet no longer accomplishes that feat.  Most users don't use such things as gpedit.msc / secpol.msc much.

-Noel

As an advanced power user, software engineer, and network security professional, I'm able to avoid the common pitfalls that UAC was designed to protect.

So...  Here we are, 3 years later, with the Win 10 release installing in a VM as I write this.

It's clear by what we see in this new, dumbed-down system that as "advanced power users, software engineers, and network security professionals" we are no longer the target market.  We're not even included in the fringe.

It's not about facilitating our work.  It's about facilitating other people sending Microsoft boatloads of cash through the App Store all the while being subjected to paid advertising.

I sure miss the "build a better mousetrap and the world will beat a path to your door" model.

-Noel

Well, having Win 10 since 2 days myself ...

The worst I found out so far ...
You CAN'T even use the darn calculator "app" without having UAC activated.

What kinda bull.... is that?

You CAN'T even use the darn calculator "app" without having UAC activated.

Yes, it's true.  Welcome to the reality folks started to see 3 years ago.  But don't worry about it.  None of the Modern Apps are worth running anyway, and to be brutally honest I don't see that changing any time soon.  The Calculator App doesn't even offer the utility of the old "Calculator Plus" application, which still works great on Win 10.  And I don't know about you but I actually prefer small fonts and getting a lot of data on my screens (I have 3 of them so more will fit).  I don't need big fonts, I don't need protection from "cognitive overload", nor does my system need protection from me.  I just need it to work.

I've been running Win 8.1 for years on a local account with UAC disabled, and Win 10 can actually work that way too - if you're willing to eschew the Modern BS fad.  It's just like any other paradigm shift Microsoft has attempted where they try to avoid doing hard work...  *cough* Windows Live Gallery *cough* Gadgets *cough* XAML *cough* fail *cough*