UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

learn more… | top users | synonyms

0
votes
1answer
30 views

Run php exec function to stop windows services

I have written a web program in php that needs to stop a windows service and start's it when run like this: exec('net stop spooler'); //to stop printer spooler exec('net start spooler'); //to start ...
0
votes
0answers
28 views

EnableLinkedConnections for standard users

I've been having some difficulties with seeing local network maps using logon scripts on Server 2008 R2. For the sake of this conversation, I have two users, one is the domain administrator account ...
2
votes
1answer
61 views

Disabling the prompt to “Click Continue to permanently get access to this folder” (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
2
votes
1answer
1k views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
2
votes
1answer
41 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
4
votes
2answers
4k views

Why is using ntrights.exe in Windows Server 2008 R2 giving error openpolicy -1073741790

I am local admin on a windows server 2003 R2 machine in our domain. This machine was built about 3 years back and I am not sure what privilges I might have. If I use ntrights.exe (from resource kit ...
5
votes
1answer
272 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
3
votes
2answers
1k views

Automatically run a powershell script elevated

Is there a way to run a powershell script automatically in Elevated mode? I am trying to automate some post-image tasks without user intervention, but am getting caught with the UAC. Is there a way ...
2
votes
3answers
970 views

How to run a program marked as requiring elevation via UAC without actual elevation on Windows 7?

I have a program, specifically an installer, which is marked is requiring elevation with highestAvailable approach. I am using an administrator account with UAC at the highest level. Is it possible ...
0
votes
1answer
54 views

Exe is requiring elevated privileges unless it is renammed

Running windows 7 sp1. I have an application that when installed via MSI requires the program's exe to run with elevated credentials. When I rename the exe it no longer runs with elevated ...
2
votes
3answers
5k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
2
votes
1answer
582 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
1
vote
0answers
47 views

How do I allow pass through access to a new shared drive on a Windows Server 2008 R2 box?

I am trying to allow access to a shared drive on our server (running windows server 2008 R2) so that users (running windows 7) can access the files on it. However, whenever they try to connect, it ...
0
votes
1answer
780 views

Running Visual Studio and IIS without Administrator rights on Windows

I find it hard to believe that Microsoft didn't forsee a possibility where a company would need a developer to be able to use IIS and Visual Studio with full rights but NOT want to just haphazardly ...
0
votes
1answer
451 views

Unable to remove “Run this program as an administrator” (greyed out) with Excel 2010

I have issue with one of the user in Terminal Server 2008 R2 who has "Run this program as an administrator" checked and greyed out with Excel 2010. This causes UAC to popup requesting for ...
-2
votes
2answers
85 views

Why some computers let basic domain user administrators

I do not understand why on some computers windows doesn't prompt for admin credentials to do a software installation for example, no matter of the user privilege. Computers are on windows 7. Some of ...
10
votes
9answers
21k views

Elevating UAC via .bat file?

Pretty straightforward one that I'm having trouble finding an answer to. serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working ...
6
votes
7answers
31k views

How to use psexec to start installation or other task that requires UAC interaction?

I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks ...
1
vote
1answer
1k views

How do I elevate privileges when running appcmd from a nant task?

We are using a Windows 7 box as build server. As part of our continuous integration process I would like to stop and start an IIS 7 website. I have tried doing this from the command line using ...
1
vote
1answer
131 views

Puppet, Windows, and UAC

Is it possible to use Puppet on Windows where UAC is enabled? Does Puppet have any method for automatically saying yes to UAC prompts for a software install? My module does the following workflow: ...
2
votes
4answers
3k views

Windows Server 2008 R2 elevated explorer

On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer 'as administrator' it doesnt appear to actually grant administrative rights to the ...
5
votes
2answers
393 views

App needs elevated privileges to run - why?

Not as stupid as it sounds ;) I have a third party app that I have no source for. Official support is for XP and higher - but higher only with UAC off. Which I do not want. Now, I know the ...
1
vote
0answers
160 views

Ping doesnt work as limited user

This is the issue: All programs works fine in the network. A Command line console, elevated with UAC, can make a ping and everything works fine. A command line, runnning as standar user, says ...
0
votes
1answer
5k views

Problems accessing shared folder in Windows Server 2008

In Windows Server 2008, I have a shared folder. For my username: NTFS permission (read/modify) Share Permissions (read/modify) Result when trying to access the share: I can traverse directory and ...
6
votes
3answers
3k views

Windows Explorer and UAC: run elevated

I am profoundly annoyed by UAC and switch it off for my admin user wherever I can. Yet, there are situations where I can't - especially if those are machines not under my continuous administration. ...
1
vote
1answer
599 views

Why sometimes is required to log off and log on back again adding a group to a user

In Windows systems (particularly Windows Server 2008R2 which I an using), sometimes when I add a local user to a local group, the user needs to log-off and log-on back again before this new group is ...
1
vote
4answers
1k views

How to convert a elevated command prompt to a regular command prompt?

I have UAC disabled on my system, and all command prompts start as elevated ("Administrator: ..."). Even if I start cmd.exe from the Start Menu, it's still elevated. Is there a way to run a ...
10
votes
1answer
9k views

Administrator view ALL mapped drives

In my understanding of security, an administrator should be able to view all connections to and from a computer - just as they can view all processes/owner, network connections/owning process. ...
5
votes
3answers
2k views

Windows folder permissions, Administrators and UAC, what's the “right” way to deal with this?

I have a folder with permissions: Administrators (group): Full. J. Bloggs: Full. I'm logged in as a member of the Administrators group. I can't open the folder in Explorer because "you do not ...
2
votes
5answers
764 views

How would you run an application off a network share so you can update application?

We have an internal desktop application which we have deployed to a network share. In that directory are subdirectories for each version, ie, z:\Apps\ApplicationX\1.0 z:\Apps\ApplicationX\2.0 ...
0
votes
4answers
3k views

How to allow program updates without prompting UAC?

We have about 15-20 users who have this software installed. We have UAC enabled through GPO as you should, which means the software prompts for admin approval if a standard user trys to install it. ...
0
votes
3answers
6k views

Run Active Directory Admin Center as another user

I am trying to run Active Directory Admin Center (dsac.exe) on Windows 7 as another user by means of creating a shortcut, rather than having to Shift+Right click and specify the user. On Windows XP I ...
0
votes
1answer
2k views

How to escalate to administrative token in Windows 7 using only CMD.exe [duplicate]

If I am not able to right click on CMD and run as administrator, or CTRL + Shift + Enter to run CMD, but I am using an administrative user account in a non-admin shell (CMD.exe); How in the world do I ...
1
vote
1answer
373 views

Windows 7: Update a file in the system32 folder via GPO

I'd need to update a Windows file in the system32-folder I've made a script to do this task. When I run it locally on a system (from a prompt with elevated privileges) it works fine. I've created a ...
0
votes
1answer
494 views

Elevate batch file via UAC

I have found the following routine which is supposed to allow a batch file to issue a UAC prompt and elevate itself to admin. Problem is on Server 2012 it doesn't seem to work for me. According to ...
4
votes
4answers
3k views

How important is it to install on the program files folder?

In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users ...
4
votes
3answers
2k views

Why is my global security group being filtered out of my logon token?

While investigating the effects of filtered tokens on my file permissions, I noticed that one of my global security groups is being filtered in addition to the regular system-defined filtered groups. ...
3
votes
2answers
689 views

Is UAC Preventing write access to Programs Folder?

We have a legacy application on a number of client sites. In some cases clients need to have write access to a folder or two under the Program Files (x86) folder. As time goes on more and more of the ...
2
votes
1answer
1k views

Find out which account disabled UAC

Someone or something recently disabled UAC on a critical server and it is now asking for a reboot (which can not happen). Is there an event in the logs that will tell me which account disabled this? ...
0
votes
1answer
3k views

Logging in user in Windows 2008 server using LogonUser fails on LogonType LOGON32_LOGON_SERVICE

I am using LogonUser function to logon an account to Windows 2008 R2 server on a domain with clusterring. When using LOGON32_LOGON_INTERACTIVE as LogonType, I successfully login. When using ...
0
votes
1answer
1k views

execute .reg from bat silently in windows 7 with UAC

I need to be able to push out registry fixes with AD logon script to Windows 7 systems with UAC enabled. So far I have had no luck accomplishing this using the standard method that worked in XP. ...
1
vote
1answer
840 views

Run application under Administrator when UAC is disabled [closed]

When the UAC is disabled, an application is launched in regular mode (i.e., it does not take into account the manifest) and the credentials window (for the administrator's login/password) does not ...
2
votes
1answer
823 views

AD: Domain admin needs elevation

I'm trying to change settings on my freshly installed server. I've added it in my domain but I cannot figure out why I keep getting messages like this: "The requested action needs elevation". The ...
3
votes
8answers
6k views

Is disabling UAC on a Windows 2008 server a bad idea?

We've just upgraded to Windows 2008 server, and I'm already getting really sick of approving dozens of UAC messages. I normally disable UAC on my personal Vista machines, but I'm reluctant to do this ...
4
votes
3answers
3k views

Open Elevated “Administrator:” cmd prompt instead of “cmd prompt (Running as Administrator)”

If you open a command prompt with a runas command, you will see a window that shows (Running as some_user) In the title bar, but if you right click on cmd.exe and choose Run as Administrator you ...
0
votes
1answer
26 views

Make Programs and Features 'Change' button prompt for authentication

I am looking for a way to have the 'Change' button in Programs and Features pop a UAC authentication dialog such as when installing an application for the first time. Currently, we don't deploy ...
2
votes
1answer
3k views

How could I make a MsAccess Frontend and Mysql Backend more user aware?

I have a distributed MsAccess front-end database which uses a mysql backend. It uses the Windows System DSN ODBC connections to connect to the server. All my Linked tables refer to that ODBC ...
0
votes
1answer
440 views

Interesting phenomenom with Windows Server 2008 R2 user access controls and NTFS ACLs

One to try, and I'd appreciate any thoughts on this. On a Windows Server 2008 R2 box (or presumably 2008 R1, Windows Vista or Windows 7): i) Logon as an administrator, and create a new NTFS volume ...
1
vote
1answer
2k views

Windows Server 2008 R2 mapped shares do not show up in command line

When I map a shared folder to a drive in Explorer in Windows Server 2008 R2 the new drive letter (say Z:) does not work in cmd.exe (started as administrator). What am I doing wrong? I believe this ...
2
votes
0answers
886 views

Giving Select Windows Domain Users Symbolic Link Privilege

I would like to setup select users on our domain to have the ability to create symbolic links on local NTFS drives and network shares without needing to run as Administrator, as part of an application ...