UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

learn more… | top users | synonyms

1
vote
3answers
420 views

Safe place to put an executable file on Windows 7 (and Windows XP)

I'm working on a tweak to our logon script which will copy an executable file to the local hard drive and then, using the schtasks command, schedule a task to run that executable daily. It's a ...
1
vote
0answers
79 views

Windows 2008 WSF Permission

I have a wsf (vb) script that I wrote that will move subdirectories from the C drive to the D drive on our server. Though logged in as a domain admin, I get a permission denied error when I run the ...
0
votes
1answer
924 views

User Account Control: Disable Admin Approval Mode for a specific user

We have a Windows 2008R2 server that runs our build scripts. At the moment, it is not possible to fix our scripts so that they could run without elevation. Please don't bother. It is currently more ...
3
votes
3answers
2k views

What can trigger a UAC prompt on an executable?

I have a workstation on a domain that's displaying the UAC (User Account Control) prompt for executing a program and I can't figure out why (I don't want it running with administrator privileges). ...
1
vote
1answer
297 views

UAC-account-users can't see their mounted network-drives

I wrote a few login batches in the Group Policy Management which mount specified devices to specified usergroups. The batches work as they should as long UAC is disabled. My problem is that the ...
1
vote
1answer
150 views

difference between windows 7 (64bit)enterrprise and windows 7 (64bit)professional Unable to create folder under c:\Program Files

This is related to http://stackoverflow.com/questions/4721604/windows-7-64bit-win32-api-to-sacrificerelegate-administrative-privileges-for Posting here to get more idea about UAC with respect windows ...
2
votes
4answers
2k views

Why would my domain admins turn off UAC? [closed]

I'm a developer of internal software in our company, I've gotten used to UAC in Win7, I prefer to run with in enabled so that our software works correctly with it enabled. Sysadmins have recently ...
2
votes
2answers
829 views

How to run a program marked as requiring elevation via UAC without actual elevation on Windows 7?

I have a program, specifically an installer, which is marked is requiring elevation with highestAvailable approach. I am using an administrator account with UAC at the highest level. Is it possible ...
2
votes
1answer
169 views

Is there a correct way to turn off UAC, User Account Control, in Windows Server 2008?

Is there a correct way to turn off UAC, User Account Control, in Windows Server 2008? I have found an article at Microsoft explaining the various settings. It looks like it is just a matter of ...
1
vote
1answer
230 views

window 7 UAC aproved unaproved list

Problem: Not able to print reports in CRM because of UAC blocking it. Notes: A user with local admin has clicked no to the UAC prompt in CRM while printing a report. The prompt was for a program ...
1
vote
4answers
3k views

Elevated command prompt as another user

I'm running Windows 7 (Enterprise, x64 if it makes any difference) My account has admin privileges on this PC, but is a regular user on the domain. I have another user account that is a member of ...
0
votes
1answer
409 views

Policy exception for Windows User Account Controls and Update.exe

So... Apparently Windows has a list of filenames that require extra rights to run, included in this list is Update.exe, which happens to be the name of the file I'd like my clients to run without ...
0
votes
1answer
213 views

Install Tomcat6 as a service windows vista

I currently am installing Tomcat6 as a windows service that will be controlled by a user account that cannot login, nor is the account a member of any groups. The issue I am seeing is that the ...
4
votes
2answers
3k views

Why is using ntrights.exe in Windows Server 2008 R2 giving error openpolicy -1073741790

I am local admin on a windows server 2003 R2 machine in our domain. This machine was built about 3 years back and I am not sure what privilges I might have. If I use ntrights.exe (from resource kit ...
1
vote
1answer
632 views

“You need to confirm this operation” message when trying to delete a file

I'm trying to delete a few files that I created, and I have full permissions on, on a Windows 2008 system. The files are within a folder that I created so they are not system files of any kind. The ...
2
votes
1answer
243 views

Prevent Flash Updates - Win 7

I wish to prevent the Adobe Flash player from checking for updates on all domain computers. In principle it's as simple as creating a UTF-8 format file name mms.cfg in the ...
0
votes
2answers
226 views

Vista cmd.exe fails to run if users and/or auditors group not present

In the current environment there exists a policy where files within %system32% are only allowed to be owned by System and Administrators. An issue has arisen where after converting these ...
1
vote
1answer
407 views

New domain workstations, UAC prompt only cleared by ADDC main “Administrator” password

For the first time, I'm able to add new Windows workstations to my domain. [For years we had a "standalone" 2k server, not a DC, and all our workstations were Windows Home] Now I have some new ...
4
votes
3answers
1k views

Are UAC prompts suppressed on Win7 over RDC?

I am testing an application on clean Win7 Enterprise VMs but I am seeing different UAC behavior between VMs reached over RDC than with physical machines running the same O/S. The VMs are hosted on ...
1
vote
1answer
1k views

How do I elevate privileges when running appcmd from a nant task?

We are using a Windows 7 box as build server. As part of our continuous integration process I would like to stop and start an IIS 7 website. I have tried doing this from the command line using ...
0
votes
4answers
1k views

How to convert a elevated command prompt to a regular command prompt?

I have UAC disabled on my system, and all command prompts start as elevated ("Administrator: ..."). Even if I start cmd.exe from the Start Menu, it's still elevated. Is there a way to run a ...
2
votes
1answer
1k views

Automatically run a powershell script elevated

Is there a way to run a powershell script automatically in Elevated mode? I am trying to automate some post-image tasks without user intervention, but am getting caught with the UAC. Is there a way ...
2
votes
2answers
422 views

Windows 7 Enterprise UAC dialog pops under all windows

I have a Windows 7 Enterprise x64 machine both at work and at home for some reason the UAC dialog windows like to pop UNDER all of my windows instead of on top of everything, is this a bug? It's not ...
2
votes
1answer
2k views

Win 7 Privilege Level (Run as administrator) via GP or command line

Is there a way to set the Privilege Level for legacy software via group policy or on the command line? I have some legacy software, which we unfortunately cannot move away from. This software ...
3
votes
2answers
541 views

IIS application pool and UAC

My system is Windows Server 2008 R2 with IIS 7.5. I need to run a site which is allowed to do some administrative tasks. I have created an AD user account and added it to all the required groups. The ...
4
votes
2answers
5k views

Start ELEVATED script from within script

Hallo, I'm playing around with Powershell (relative NewBie) and I'm looking for the easiest way to call a Powershell script with elevated rights from within another script. I know of the runas verb ...
2
votes
4answers
2k views

Windows Server 2008 R2 elevated explorer

On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer 'as administrator' it doesnt appear to actually grant administrative rights to the ...
4
votes
4answers
3k views

How important is it to install on the program files folder?

In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users ...
2
votes
2answers
919 views

Curious Interaction between User Account Control, Explorer, and local Users group

I have an example directory hosted on a data drive on a Windows Server 2008 installation ("MACHINE"). Only SYSTEM, Domain Admins, and Administrators (local) have full control permissions applied to ...
4
votes
6answers
449 views

Good reason for UAC on a server machine?

Given that accounts with login access to a server OS would usually be a systems administrator (or in general, has elevated privileges), is there a good reason to have User Access Control turned on? ...
4
votes
1answer
598 views

Can UAC levels lower than max be turned off programatically?

I was recently told that if your UAC level is anything less than the maximum (always notify) then malicious programs can programatically lower your UAC settings, thereby rendering UAC useless. Now, ...
2
votes
1answer
380 views

Win7 UAC tokens

It is known that under win7 UAC you receive 2 tokens when you logon to the system: std user token and admin token. If I disable UAC, what should I get? only admin token? or still both with no ...
10
votes
8answers
18k views

Elevating UAC via .bat file?

Pretty straightforward one that I'm having trouble finding an answer to. serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working ...
0
votes
1answer
681 views

Rebuilt SBS 2003 domain, Windows 7 client UAC now asks for username/password

I have come into work this morning after Christmas and find that the Windows Small Business 2003 Domain server has been rebuilt. The domain name remains the same, though inevitably any security ...
0
votes
1answer
4k views

Problems accessing shared folder in Windows Server 2008

In Windows Server 2008, I have a shared folder. For my username: NTFS permission (read/modify) Share Permissions (read/modify) Result when trying to access the share: I can traverse directory and ...
3
votes
1answer
3k views

Silently install MSI without disabling UAC

I have an MSI file which I produce that I need to install on a number of Windows 2008 machines as part of automated deployment process in a test environment. When I install the MSI by hand I get a ...
0
votes
1answer
949 views

How to join Win2k3 domain AND properly set up UAC account with Windows 7?

I'm doing a clean install of Win7 and need to know the simplest way to set it up such that: I ideally only want one user on the PC other than the hidden administrator account I need to join a domain ...
6
votes
6answers
29k views

How to use psexec to start installation or other task that requires UAC interaction?

I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks ...
0
votes
3answers
2k views

Small Business Server services will not start, and remote desktop and UAC are broken

Yesterday I began setting up a server with Windows Small Business Server 2008. All I am configuring it for right now is to be a domain controller and Exchange server. I completed the initial setup ...
1
vote
3answers
669 views

Why does Vista UAC kick in for “Install a program from the network”?

I have a network which I am managing using System Center Essentials 2007. For the size network I have, it does the job adequately enough. However, there is one little nit-picky thing I am trying to ...
2
votes
8answers
6k views

Is disabling UAC on a Windows 2008 server a bad idea?

We've just upgraded to Windows 2008 server, and I'm already getting really sick of approving dozens of UAC messages. I normally disable UAC on my personal Vista machines, but I'm reluctant to do this ...
2
votes
3answers
7k views

Windows Server 2008, “The requested operation requires elevation”

Sorry for the newbe question, but I'm a developer who hasn't touch a Windows Server in years. A recent project has required me to setup and configure a development VM running Windows Server 2008, IIS ...
1
vote
2answers
776 views

Where are the Microsoft downloaded app compat updates stored?

Where are the Microsoft application compatibility update settings stored on a Windows XP, Windows Vista, and Windows 7 computer? Microsoft periodically release application compatibility updates (e.g. ...
3
votes
6answers
5k views

Why can't I drag/drop a file for editing in notepad in Windows Server 2008?

When notepad is run, I can drag/drop a file to open it, but then it can't save the file. When I run notepad elevated to save the file, I can no longer drag/drop to open the file. I understand its a ...
4
votes
3answers
1k views

Why is my global security group being filtered out of my logon token?

While investigating the effects of filtered tokens on my file permissions, I noticed that one of my global security groups is being filtered in addition to the regular system-defined filtered groups. ...
5
votes
5answers
529 views

How important is UAC for developers?

Our small team of developers primarily uses Windows Vista. There has been some debate about the importance of Vista UAC (User Account Control). How important is UAC for experienced users, ...
1
vote
1answer
935 views

GPO, UAC, and Active X not playing nice

I have a set of users that I want to be able to install ActiveX controls from websites. I have deployed a GPO that allows them to do this, however I still fail when it comes to UAC. The ActiveX ...
6
votes
4answers
486 views

Does UAC kill the need to run as a regular user?

Professionally, I've run as a standard user for a decade, and had mastered all the little tips and tricks to administering an enterprise using nothing but runas. Now in trots UAC, and while it makes ...
2
votes
5answers
8k views

Windows 2008 Corrupt TCP/IP? (Ping access denied)

I'm having a weird problem on two Windows 2008 VMs (inside HyperV) running NLB. They were working at one point, but now TCP/IP appears to be corrupt. I cannot ping anything if logged in with my Domain ...
5
votes
3answers
269 views

On Windows Vista, is there a way to allow an application to always run with elevated permissions?

Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...