UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

learn more… | top users | synonyms

10
votes
9answers
19k views

Elevating UAC via .bat file?

Pretty straightforward one that I'm having trouble finding an answer to. serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working ...
10
votes
1answer
186 views

Windows 7 UAC requests escalated to sysadmins?

Is there any way to have users UAC requests listed for admins (or a list of selected users)? One alternative would be popups on the screen of logged on admins. Another would be listing requests on an ...
9
votes
1answer
4k views

Administrator view ALL mapped drives

In my understanding of security, an administrator should be able to view all connections to and from a computer - just as they can view all processes/owner, network connections/owning process. ...
6
votes
7answers
30k views

How to use psexec to start installation or other task that requires UAC interaction?

I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks ...
6
votes
4answers
496 views

Does UAC kill the need to run as a regular user?

Professionally, I've run as a standard user for a decade, and had mastered all the little tips and tricks to administering an enterprise using nothing but runas. Now in trots UAC, and while it makes ...
6
votes
2answers
391 views

Can I modify a Windows 7 environment to allow a .NET program to always run as Administrator?

We are about to roll out several hundred new machines running Windows 7 x64, with the OS installed via WDS so at the moment we can make changes and sysprep them into the build. The problem is a ...
6
votes
3answers
2k views

Windows Explorer and UAC: run elevated

I am profoundly annoyed by UAC and switch it off for my admin user wherever I can. Yet, there are situations where I can't - especially if those are machines not under my continuous administration. ...
5
votes
5answers
533 views

How important is UAC for developers?

Our small team of developers primarily uses Windows Vista. There has been some debate about the importance of Vista UAC (User Account Control). How important is UAC for experienced users, ...
5
votes
2answers
304 views

App needs elevated privileges to run - why?

Not as stupid as it sounds ;) I have a third party app that I have no source for. Official support is for XP and higher - but higher only with UAC off. Which I do not want. Now, I know the ...
5
votes
1answer
189 views

Windows 7 Command Line Prompt

From a regular windows 7 command line, how do I launch the admin command prompt?
5
votes
3answers
272 views

On Windows Vista, is there a way to allow an application to always run with elevated permissions?

Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...
5
votes
3answers
1k views

Windows folder permissions, Administrators and UAC, what's the “right” way to deal with this?

I have a folder with permissions: Administrators (group): Full. J. Bloggs: Full. I'm logged in as a member of the Administrators group. I can't open the folder in Explorer because "you do not ...
5
votes
1answer
1k views

Windows 2008 never run a program “as administrator”

I have an application that Windows 2008 would always run "as administrator" (i.e. the blue/yellow shield overlay icon is always visible). However, the "run this program as an administrator" flag is ...
4
votes
6answers
457 views

Good reason for UAC on a server machine?

Given that accounts with login access to a server OS would usually be a systems administrator (or in general, has elevated privileges), is there a good reason to have User Access Control turned on? ...
4
votes
1answer
1k views

Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions

I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
4
votes
3answers
3k views

Open Elevated “Administrator:” cmd prompt instead of “cmd prompt (Running as Administrator)”

If you open a command prompt with a runas command, you will see a window that shows (Running as some_user) In the title bar, but if you right click on cmd.exe and choose Run as Administrator you ...
4
votes
3answers
1k views

Are UAC prompts suppressed on Win7 over RDC?

I am testing an application on clean Win7 Enterprise VMs but I am seeing different UAC behavior between VMs reached over RDC than with physical machines running the same O/S. The VMs are hosted on ...
4
votes
5answers
5k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
4
votes
2answers
5k views

Start ELEVATED script from within script

Hallo, I'm playing around with Powershell (relative NewBie) and I'm looking for the easiest way to call a Powershell script with elevated rights from within another script. I know of the runas verb ...
4
votes
4answers
3k views

How important is it to install on the program files folder?

In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users ...
4
votes
1answer
223 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
4
votes
2answers
4k views

Why is using ntrights.exe in Windows Server 2008 R2 giving error openpolicy -1073741790

I am local admin on a windows server 2003 R2 machine in our domain. This machine was built about 3 years back and I am not sure what privilges I might have. If I use ntrights.exe (from resource kit ...
4
votes
1answer
614 views

Can UAC levels lower than max be turned off programatically?

I was recently told that if your UAC level is anything less than the maximum (always notify) then malicious programs can programatically lower your UAC settings, thereby rendering UAC useless. Now, ...
4
votes
3answers
1k views

Why is my global security group being filtered out of my logon token?

While investigating the effects of filtered tokens on my file permissions, I noticed that one of my global security groups is being filtered in addition to the regular system-defined filtered groups. ...
3
votes
8answers
6k views

Is disabling UAC on a Windows 2008 server a bad idea?

We've just upgraded to Windows 2008 server, and I'm already getting really sick of approving dozens of UAC messages. I normally disable UAC on my personal Vista machines, but I'm reluctant to do this ...
3
votes
6answers
6k views

Why can't I drag/drop a file for editing in notepad in Windows Server 2008?

When notepad is run, I can drag/drop a file to open it, but then it can't save the file. When I run notepad elevated to save the file, I can no longer drag/drop to open the file. I understand its a ...
3
votes
2answers
528 views

Is UAC Preventing write access to Programs Folder?

We have a legacy application on a number of client sites. In some cases clients need to have write access to a folder or two under the Program Files (x86) folder. As time goes on more and more of the ...
3
votes
1answer
4k views

How to disable UAC on a domain controller?

I need to disable UAC on a Windows Server 2008 R2 domain controller, but I can't access its settings through the usual path (Control Panel -> User Accounts -> User Accounts), because a DC doesn't have ...
3
votes
1answer
4k views

Silently install MSI without disabling UAC

I have an MSI file which I produce that I need to install on a number of Windows 2008 machines as part of automated deployment process in a test environment. When I install the MSI by hand I get a ...
3
votes
2answers
5k views

Can a batch run as admin launch another batch as limited user?

I have a batch that is being run with administrative privileges on a Windows 7 machine. That batch has to run another batch, which should access a mapped network drive. However, network drives are ...
3
votes
3answers
2k views

What can trigger a UAC prompt on an executable?

I have a workstation on a domain that's displaying the UAC (User Account Control) prompt for executing a program and I can't figure out why (I don't want it running with administrator privileges). ...
3
votes
2answers
607 views

IIS application pool and UAC

My system is Windows Server 2008 R2 with IIS 7.5. I need to run a site which is allowed to do some administrative tasks. I have created an AD user account and added it to all the required groups. The ...
2
votes
3answers
8k views

Windows Server 2008, “The requested operation requires elevation”

Sorry for the newbe question, but I'm a developer who hasn't touch a Windows Server in years. A recent project has required me to setup and configure a development VM running Windows Server 2008, IIS ...
2
votes
3answers
3k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
2
votes
4answers
4k views

Elevated command prompt as another user

I'm running Windows 7 (Enterprise, x64 if it makes any difference) My account has admin privileges on this PC, but is a regular user on the domain. I have another user account that is a member of ...
2
votes
4answers
627 views

Running Visual Studio 2010 in a University Campus

We have just installed Windows 7 Enterprise x64 in one of our computer labs being used by students for programming. However, when we installed Visual Studio 2010 Ultimate on the machines, we found ...
2
votes
1answer
179 views

Is there a correct way to turn off UAC, User Account Control, in Windows Server 2008?

Is there a correct way to turn off UAC, User Account Control, in Windows Server 2008? I have found an article at Microsoft explaining the various settings. It looks like it is just a matter of ...
2
votes
5answers
418 views

How would you run an application off a network share so you can update application?

We have an internal desktop application which we have deployed to a network share. In that directory are subdirectories for each version, ie, z:\Apps\ApplicationX\1.0 z:\Apps\ApplicationX\2.0 ...
2
votes
1answer
693 views

AD: Domain admin needs elevation

I'm trying to change settings on my freshly installed server. I've added it in my domain but I cannot figure out why I keep getting messages like this: "The requested action needs elevation". The ...
2
votes
2answers
2k views

How can I allow a limited user to change the system time in Windows 7 without disabling UAC?

I need to allow a couple specific users rights to change their local system time in Windows 7 x64. I have already assigned them the right through group policy using the "Change the system time" user ...
2
votes
1answer
245 views

Prevent Flash Updates - Win 7

I wish to prevent the Adobe Flash player from checking for updates on all domain computers. In principle it's as simple as creating a UTF-8 format file name mms.cfg in the ...
2
votes
2answers
951 views

Curious Interaction between User Account Control, Explorer, and local Users group

I have an example directory hosted on a data drive on a Windows Server 2008 installation ("MACHINE"). Only SYSTEM, Domain Admins, and Administrators (local) have full control permissions applied to ...
2
votes
1answer
877 views

Find out which account disabled UAC

Someone or something recently disabled UAC on a critical server and it is now asking for a reboot (which can not happen). Is there an event in the logs that will tell me which account disabled this? ...
2
votes
4answers
2k views

Why would my domain admins turn off UAC? [closed]

I'm a developer of internal software in our company, I've gotten used to UAC in Win7, I prefer to run with in enabled so that our software works correctly with it enabled. Sysadmins have recently ...
2
votes
2answers
907 views

How to run a program marked as requiring elevation via UAC without actual elevation on Windows 7?

I have a program, specifically an installer, which is marked is requiring elevation with highestAvailable approach. I am using an administrator account with UAC at the highest level. Is it possible ...
2
votes
1answer
939 views

Disable UAC And Windows Security Center alerts under Vista Business

We have a few Windows Vista Business with User Account Control turned off (the reason is because those machines need to run a series of programs that do not work with UAC, the boxes have no Internet ...
2
votes
1answer
105 views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
2
votes
1answer
1k views

Quickbooks 2011 now requires UAC logn, but the currently logged on user and password WORKS FINE?

I have a real strange one... I do IT work for an accounting firm, and because they have such a diverse group of clients, they have many different versions of Quickbooks installed at once. All ...
2
votes
4answers
3k views

Windows Server 2008 R2 elevated explorer

On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer 'as administrator' it doesnt appear to actually grant administrative rights to the ...
2
votes
1answer
382 views

Win7 UAC tokens

It is known that under win7 UAC you receive 2 tokens when you logon to the system: std user token and admin token. If I disable UAC, what should I get? only admin token? or still both with no ...