Questions tagged [uac]
UAC stands for User Account Control and is a security system present and enabled by default in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.
155
questions
15
votes
4
answers
42k
views
NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group
As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
user62491
12
votes
1
answer
49k
views
Administrator view ALL mapped drives
In my understanding of security, an administrator should be able to view all connections to and from a computer - just as they can view all processes/owner, network connections/owning process. ...
- 221
11
votes
7
answers
19k
views
Windows Explorer and UAC: run elevated
I am profoundly annoyed by UAC and switch it off for my admin user wherever I can. Yet, there are situations where I can't - especially if those are machines not under my continuous administration.
...
- 40.8k
10
votes
9
answers
27k
views
Elevating UAC via .bat file?
Pretty straightforward one that I'm having trouble finding an answer to.
serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working ...
- 155
10
votes
1
answer
243
views
Windows 7 UAC requests escalated to sysadmins?
Is there any way to have users UAC requests listed for admins (or a list of selected users)?
One alternative would be popups on the screen of logged on admins. Another would be listing requests on an ...
- 103
8
votes
5
answers
23k
views
Windows folder permissions, Administrators and UAC, what's the "right" way to deal with this?
I have a folder with permissions:
Administrators (group): Full.
J. Bloggs: Full.
I'm logged in as a member of the Administrators group.
I can't open the folder in Explorer because "you do not have ...
- 5,726
8
votes
1
answer
1k
views
Entering local admin username and password in a script
I have alot of clients on my network and I want my script to do the following:
[1] Open an elevated command prompt using the local admin details.
Note: I do not want to have to enter a username ...
- 107
7
votes
7
answers
39k
views
How to use psexec to start installation or other task that requires UAC interaction?
I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks ...
- 183
7
votes
2
answers
3k
views
App needs elevated privileges to run - why?
Not as stupid as it sounds ;)
I have a third party app that I have no source for. Official support is for XP and higher - but higher only with UAC off. Which I do not want.
Now, I know the ...
- 51.7k
7
votes
4
answers
8k
views
How important is it to install on the program files folder?
In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users ...
- 267
7
votes
4
answers
38k
views
Domain Admins group denied access to d: drive
I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01).
The member server has a C: and a D: drive.
Part ...
- 7,887
7
votes
5
answers
7k
views
How do I run an elevated explorer on W8R2 with default UAC?
On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer as administrator it doesn't appear to actually grant administrative rights to the ...
- 341
7
votes
1
answer
113
views
In what ways can access token update be triggered for administrator accounts on workstations?
This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
- 1,643
6
votes
4
answers
645
views
Does UAC kill the need to run as a regular user?
Professionally, I've run as a standard user for a decade, and had mastered all the little tips and tricks to administering an enterprise using nothing but runas. Now in trots UAC, and while it makes ...
- 131
6
votes
2
answers
13k
views
Why sometimes is required to log off and log on back again adding a group to a user
In Windows systems (particularly Windows Server 2008R2 which I an using), sometimes when I add a local user to a local group, the user needs to log-off and log-on back again before this new group is ...
- 1,345
6
votes
4
answers
21k
views
Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)
http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
- 2,685
6
votes
2
answers
506
views
Can I modify a Windows 7 environment to allow a .NET program to always run as Administrator?
We are about to roll out several hundred new machines running Windows 7 x64, with the OS installed via WDS so at the moment we can make changes and sysprep them into the build.
The problem is a ....
- 175
6
votes
1
answer
127
views
WMI permissions for changing local IP without elevated privileges
I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
6
votes
1
answer
481
views
Drive mapping maps two different folders for elevated and non-elevated programs
I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
- 311
6
votes
2
answers
9k
views
Why is using ntrights.exe in Windows Server 2008 R2 giving error openpolicy -1073741790
I am local admin on a windows server 2003 R2 machine in our domain. This machine was built about 3 years back and I am not sure what privilges I might have. If I use ntrights.exe (from resource kit ...
- 193
6
votes
2
answers
12k
views
Start ELEVATED script from within script
Hallo,
I'm playing around with Powershell (relative NewBie) and I'm looking for the easiest way to call a Powershell script with elevated rights from within another script.
I know of the runas verb ...
Ulrich
5
votes
5
answers
669
views
How important is UAC for developers?
Our small team of developers primarily uses Windows Vista. There has been some debate about the importance of Vista UAC (User Account Control).
How important is UAC for experienced users, ...
- 276
5
votes
1
answer
215
views
Windows 7 Command Line Prompt
From a regular windows 7 command line, how do I launch the admin command prompt?
- 163
5
votes
3
answers
375
views
On Windows Vista, is there a way to allow an application to always run with elevated permissions?
Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...
- 267
5
votes
1
answer
2k
views
Windows 2008 never run a program "as administrator"
I have an application that Windows 2008 would always run "as administrator" (i.e. the blue/yellow shield overlay icon is always visible).
However, the "run this program as an administrator" flag is ...
- 1,605
5
votes
2
answers
14k
views
Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?
I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi:
User Configuration -> Administrative Templates -> Network ...
- 2,954
5
votes
1
answer
3k
views
How to make UAC ask for username and password every time?
if i start a CMD with elevated rights the UAC asks for the password of my current user, which is only a normal user. So i need to switch the user under "weitere Optionen" (more choices)
If i start a ...
- 161
4
votes
4
answers
10k
views
Elevated command prompt as another user
I'm running Windows 7 (Enterprise, x64 if it makes any difference)
My account has admin privileges on this PC, but is a regular user on the domain.
I have another user account that is a member of ...
- 3,686
4
votes
6
answers
475
views
Good reason for UAC on a server machine?
Given that accounts with login access to a server OS would usually be a systems administrator (or in general, has elevated privileges), is there a good reason to have User Access Control turned on? ...
- 143
4
votes
1
answer
2k
views
Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions
I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
- 141
4
votes
3
answers
9k
views
Open Elevated "Administrator:" cmd prompt instead of "cmd prompt (Running as Administrator)"
If you open a command prompt with a runas command, you will see a window that shows
(Running as some_user)
In the title bar, but if you right click on cmd.exe and choose Run as Administrator you ...
- 177
4
votes
2
answers
7k
views
Can a batch run as admin launch another batch as limited user?
I have a batch that is being run with administrative privileges on a Windows 7 machine. That batch has to run another batch, which should access a mapped network drive. However, network drives are ...
- 267
4
votes
3
answers
2k
views
Are UAC prompts suppressed on Win7 over RDC?
I am testing an application on clean Win7 Enterprise VMs but I am seeing different UAC behavior between VMs reached over RDC than with physical machines running the same O/S. The VMs are hosted on ...
- 153
4
votes
3
answers
16k
views
Task manager requiring elevation for regular users in Windows 10
Run into a little bit of a snag with Windows 10, and it's a fairly well known one - the problem is that I'm struggling to find a Windows 10 compatible fix that actually works!
It's the old "regular ...
- 51
4
votes
2
answers
1k
views
IIS application pool and UAC
My system is Windows Server 2008 R2 with IIS 7.5. I need to run a site which is allowed to do some administrative tasks. I have created an AD user account and added it to all the required groups. The ...
- 141
4
votes
1
answer
747
views
Can UAC levels lower than max be turned off programatically?
I was recently told that if your UAC level is anything less than the maximum (always notify) then malicious programs can programatically lower your UAC settings, thereby rendering UAC useless.
Now, ...
- 273
4
votes
1
answer
2k
views
windows 10 "run as administrator" not starting [closed]
Under Windows 10, I'm logging as an user supposed to have local machine administrator rights. Unfortunately, when I try to launch some application by right-click-ing "Run as administrator", the ...
- 143
4
votes
3
answers
2k
views
Why is my global security group being filtered out of my logon token?
While investigating the effects of filtered tokens on my file permissions, I noticed that one of my global security groups is being filtered in addition to the regular system-defined filtered groups.
...
- 3,973
3
votes
9
answers
7k
views
Is disabling UAC on a Windows 2008 server a bad idea?
We've just upgraded to Windows 2008 server, and I'm already getting really sick of approving dozens of UAC messages. I normally disable UAC on my personal Vista machines, but I'm reluctant to do this ...
- 230
3
votes
6
answers
9k
views
Why can't I drag/drop a file for editing in notepad in Windows Server 2008?
When notepad is run, I can drag/drop a file to open it, but then it can't save the file.
When I run notepad elevated to save the file, I can no longer drag/drop to open the file.
I understand its a ...
- 3,418
3
votes
5
answers
8k
views
How would you run an application off a network share so you can update application?
We have an internal desktop application which we have deployed to a network share. In that directory are subdirectories for each version, ie,
z:\Apps\ApplicationX\1.0
z:\Apps\ApplicationX\2.0
z:\Apps\...
- 1,094
3
votes
1
answer
9k
views
How to disable UAC on a domain controller?
I need to disable UAC on a Windows Server 2008 R2 domain controller, but I can't access its settings through the usual path (Control Panel -> User Accounts -> User Accounts), because a DC doesn't have ...
- 70.4k
3
votes
2
answers
2k
views
Is UAC Preventing write access to Programs Folder?
We have a legacy application on a number of client sites. In some cases clients need to have write access to a folder or two under the Program Files (x86) folder.
As time goes on more and more of the ...
- 2,747
3
votes
1
answer
2k
views
Creating Separate GPOs for Win7 and Win10
(I should preface this by saying I recently shifted jobs and have come from a much smaller company with a mostly linux environment to a larger company with a very standard windows server environment, ...
- 506
3
votes
1
answer
6k
views
Silently install MSI without disabling UAC
I have an MSI file which I produce that I need to install on a number of Windows 2008 machines as part of automated deployment process in a test environment.
When I install the MSI by hand I get a ...
- 131
3
votes
3
answers
3k
views
Why would my domain admins turn off UAC? [closed]
I'm a developer of internal software in our company, I've gotten used to UAC in Win7, I prefer to run with in enabled so that our software works correctly with it enabled.
Sysadmins have recently ...
- 151
3
votes
1
answer
405
views
Win7 UAC tokens
It is known that under win7 UAC you receive 2 tokens when you logon to the system: std user token and admin token.
If I disable UAC, what should I get? only admin token? or still both with no ...
Talc
3
votes
1
answer
9k
views
Windows 7: Having Underprivileged User Install and Alter Fonts
I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
- 31
3
votes
2
answers
4k
views
Automatically run a powershell script elevated
Is there a way to run a powershell script automatically in Elevated mode?
I am trying to automate some post-image tasks without user intervention, but am getting caught with the UAC. Is there a way ...
- 1,137
3
votes
1
answer
320
views
List of Privileges Considered for Standard User As "Additional Privileges" for Windows UAC
I am trying to understand some behavior I am seeing with Windows User Account Control (UAC). We have an application that is being run with the manifest requestedExecutionLevel highestAvailable.
&...
- 324