Tagged Questions

UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

learn more… | top users | synonyms

2
votes
1answer
42 views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
2
votes
1answer
47 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
1
vote
0answers
25 views

How do I allow pass through access to a new shared drive on a Windows Server 2008 R2 box?

I am trying to allow access to a shared drive on our server (running windows server 2008 R2) so that users (running windows 7) can access the files on it. However, whenever they try to connect, it ...
0
votes
1answer
144 views

Running Visual Studio and IIS without Administrator rights on Windows

I find it hard to believe that Microsoft didn't forsee a possibility where a company would need a developer to be able to use IIS and Visual Studio with full rights but NOT want to just haphazardly ...
-2
votes
2answers
61 views

Why some computers let basic domain user administrators

I do not understand why on some computers windows doesn't prompt for admin credentials to do a software installation for example, no matter of the user privilege. Computers are on windows 7. Some of ...
0
votes
1answer
80 views

Unable to remove “Run this program as an administrator” (greyed out) with Excel 2010

I have issue with one of the user in Terminal Server 2008 R2 who has "Run this program as an administrator" checked and greyed out with Excel 2010. This causes UAC to popup requesting for ...
1
vote
1answer
87 views

Puppet, Windows, and UAC

Is it possible to use Puppet on Windows where UAC is enabled? Does Puppet have any method for automatically saying yes to UAC prompts for a software install? My module does the following workflow: ...
5
votes
2answers
285 views

App needs elevated privileges to run - why?

Not as stupid as it sounds ;) I have a third party app that I have no source for. Official support is for XP and higher - but higher only with UAC off. Which I do not want. Now, I know the ...
1
vote
0answers
113 views

Ping doesnt work as limited user

This is the issue: All programs works fine in the network. A Command line console, elevated with UAC, can make a ping and everything works fine. A command line, runnning as standar user, says ...
1
vote
1answer
280 views

Why sometimes is required to log off and log on back again adding a group to a user

In Windows systems (particularly Windows Server 2008R2 which I an using), sometimes when I add a local user to a local group, the user needs to log-off and log-on back again before this new group is ...
5
votes
3answers
2k views

Windows Explorer and UAC: run elevated

I am profoundly annoyed by UAC and switch it off for my admin user wherever I can. Yet, there are situations where I can't - especially if those are machines not under my continuous administration. ...
9
votes
1answer
3k views

Administrator view ALL mapped drives

In my understanding of security, an administrator should be able to view all connections to and from a computer - just as they can view all processes/owner, network connections/owning process. ...
2
votes
5answers
338 views

How would you run an application off a network share so you can update application?

We have an internal desktop application which we have deployed to a network share. In that directory are subdirectories for each version, ie, z:\Apps\ApplicationX\1.0 z:\Apps\ApplicationX\2.0 ...
4
votes
1answer
217 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
5
votes
3answers
1k views

Windows folder permissions, Administrators and UAC, what's the “right” way to deal with this?

I have a folder with permissions: Administrators (group): Full. J. Bloggs: Full. I'm logged in as a member of the Administrators group. I can't open the folder in Explorer because "you do not ...
0
votes
1answer
1k views

How to escalate to administrative token in Windows 7 using only CMD.exe [duplicate]

If I am not able to right click on CMD and run as administrator, or CTRL + Shift + Enter to run CMD, but I am using an administrative user account in a non-admin shell (CMD.exe); How in the world do I ...
1
vote
1answer
286 views

Windows 7: Update a file in the system32 folder via GPO

I'd need to update a Windows file in the system32-folder I've made a script to do this task. When I run it locally on a system (from a prompt with elevated privileges) it works fine. I've created a ...
0
votes
4answers
2k views

How to allow program updates without prompting UAC?

We have about 15-20 users who have this software installed. We have UAC enabled through GPO as you should, which means the software prompts for admin approval if a standard user trys to install it. ...
0
votes
1answer
387 views

Elevate batch file via UAC

I have found the following routine which is supposed to allow a batch file to issue a UAC prompt and elevate itself to admin. Problem is on Server 2012 it doesn't seem to work for me. According to ...
3
votes
2answers
502 views

Is UAC Preventing write access to Programs Folder?

We have a legacy application on a number of client sites. In some cases clients need to have write access to a folder or two under the Program Files (x86) folder. As time goes on more and more of the ...
2
votes
1answer
831 views

Find out which account disabled UAC

Someone or something recently disabled UAC on a critical server and it is now asking for a reboot (which can not happen). Is there an event in the logs that will tell me which account disabled this? ...
0
votes
1answer
2k views

Logging in user in Windows 2008 server using LogonUser fails on LogonType LOGON32_LOGON_SERVICE

I am using LogonUser function to logon an account to Windows 2008 R2 server on a domain with clusterring. When using LOGON32_LOGON_INTERACTIVE as LogonType, I successfully login. When using ...
0
votes
1answer
997 views

execute .reg from bat silently in windows 7 with UAC

I need to be able to push out registry fixes with AD logon script to Windows 7 systems with UAC enabled. So far I have had no luck accomplishing this using the standard method that worked in XP. ...
1
vote
1answer
723 views

Run application under Administrator when UAC is disabled [closed]

When the UAC is disabled, an application is launched in regular mode (i.e., it does not take into account the manifest) and the credentials window (for the administrator's login/password) does not ...
2
votes
3answers
3k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
2
votes
1answer
656 views

AD: Domain admin needs elevation

I'm trying to change settings on my freshly installed server. I've added it in my domain but I cannot figure out why I keep getting messages like this: "The requested action needs elevation". The ...
0
votes
1answer
26 views

Make Programs and Features 'Change' button prompt for authentication

I am looking for a way to have the 'Change' button in Programs and Features pop a UAC authentication dialog such as when installing an application for the first time. Currently, we don't deploy ...
0
votes
1answer
390 views

Interesting phenomenom with Windows Server 2008 R2 user access controls and NTFS ACLs

One to try, and I'd appreciate any thoughts on this. On a Windows Server 2008 R2 box (or presumably 2008 R1, Windows Vista or Windows 7): i) Logon as an administrator, and create a new NTFS volume ...
2
votes
1answer
2k views

How could I make a MsAccess Frontend and Mysql Backend more user aware?

I have a distributed MsAccess front-end database which uses a mysql backend. It uses the Windows System DSN ODBC connections to connect to the server. All my Linked tables refer to that ODBC ...
1
vote
1answer
2k views

Windows Server 2008 R2 mapped shares do not show up in command line

When I map a shared folder to a drive in Explorer in Windows Server 2008 R2 the new drive letter (say Z:) does not work in cmd.exe (started as administrator). What am I doing wrong? I believe this ...
2
votes
0answers
684 views

Giving Select Windows Domain Users Symbolic Link Privilege

I would like to setup select users on our domain to have the ability to create symbolic links on local NTFS drives and network shares without needing to run as Administrator, as part of an application ...
1
vote
0answers
505 views

task scheduler - run interactively as any user with admin credentials

I'm trying to deploy a scheduled task with a GPO. The task is set to run at login and executes a batch file, which then executes an EXE file. However, I also need it to be interactive and run with ...
1
vote
1answer
269 views

NTFS Permissions will not inherit for one file

I have a bizarre issue that seems to be UAC related but I can't figure it out. On the face of it, it seems to be the same issue as this, but it's not quite. I have a folder which contains the files ...
2
votes
1answer
4k views

How to disable UAC on a domain controller?

I need to disable UAC on a Windows Server 2008 R2 domain controller, but I can't access its settings through the usual path (Control Panel -> User Accounts -> User Accounts), because a DC doesn't have ...
0
votes
3answers
4k views

Run Active Directory Admin Center as another user

I am trying to run Active Directory Admin Center (dsac.exe) on Windows 7 as another user by means of creating a shortcut, rather than having to Shift+Right click and specify the user. On Windows XP I ...
1
vote
3answers
596 views

UAC in an Active Directory environment

At work, we've recently received a recommendation to have two separate accounts for domain administrators. One account would be a standard user account with no admin privileges and one would be a ...
2
votes
2answers
2k views

How can I allow a limited user to change the system time in Windows 7 without disabling UAC?

I need to allow a couple specific users rights to change their local system time in Windows 7 x64. I have already assigned them the right through group policy using the "Change the system time" user ...
0
votes
1answer
2k views

Windows folder mounted in Unix, unable to touch anything 'permission denied'

I've got a windows system running centos inside a virtual box vm. I have a directory I've shared in windows, and mounted from centos, in fstab, like so: //<ip address>/head_build ...
4
votes
1answer
1k views

Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions

I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
6
votes
2answers
390 views

Can I modify a Windows 7 environment to allow a .NET program to always run as Administrator?

We are about to roll out several hundred new machines running Windows 7 x64, with the OS installed via WDS so at the moment we can make changes and sysprep them into the build. The problem is a ...
2
votes
1answer
1k views

Quickbooks 2011 now requires UAC logn, but the currently logged on user and password WORKS FINE?

I have a real strange one... I do IT work for an accounting firm, and because they have such a diverse group of clients, they have many different versions of Quickbooks installed at once. All ...
1
vote
2answers
406 views

What is the relationship (if any) between UAC and ACLs on Windows platforms?

What is the relationship between UAC and ACLs on Windows platforms? Are these two separate security schemes? Or is one a superset of the other? Intuitively I would expect them to be related but I've ...
1
vote
0answers
252 views

Clavister-Client VPN Access

Error-Message during login: Unable to update interface address for TUN/TAP interface: OS:Windows 7 Pro. 64-Bit Clavister-VPN-Client: 1.0.1.3 Windows 7 UAC is enabled Connection works with ...
2
votes
1answer
519 views

logman command at startup requires elevation

I am trying to setup Performance Counters on a Windows Server 2008 R2 server and have successfully setup the counters. The problem is that I need to manually start the counters each time the server is ...
10
votes
1answer
186 views

Windows 7 UAC requests escalated to sysadmins?

Is there any way to have users UAC requests listed for admins (or a list of selected users)? One alternative would be popups on the screen of logged on admins. Another would be listing requests on an ...
5
votes
1answer
189 views

Windows 7 Command Line Prompt

From a regular windows 7 command line, how do I launch the admin command prompt?
4
votes
5answers
5k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
4
votes
3answers
2k views

Open Elevated “Administrator:” cmd prompt instead of “cmd prompt (Running as Administrator)”

If you open a command prompt with a runas command, you will see a window that shows (Running as some_user) In the title bar, but if you right click on cmd.exe and choose Run as Administrator you ...
3
votes
2answers
5k views

Can a batch run as admin launch another batch as limited user?

I have a batch that is being run with administrative privileges on a Windows 7 machine. That batch has to run another batch, which should access a mapped network drive. However, network drives are ...
1
vote
0answers
990 views

reporting services 2008 R2 shows UAC for printing ActiveX after .NET 4.0 installation

Installed the latest updates on the server. Now every time I try to print from a reporting service website the UAC opens.. I already tried to reduce security within IE9 to the minimum, but with no ...