UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.
10
votes
1answer
151 views
Windows 7 UAC requests escalated to sysadmins?
Is there any way to have users UAC requests listed for admins (or a list of selected users)?
One alternative would be popups on the screen of logged on admins. Another would be listing requests on an ...
8
votes
7answers
15k views
Elevating UAC via .bat file?
Pretty straightforward one that I'm having trouble finding an answer to.
serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working ...
6
votes
6answers
26k views
How to use psexec to start installation or other task that requires UAC interaction?
I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks ...
6
votes
4answers
465 views
Does UAC kill the need to run as a regular user?
Professionally, I've run as a standard user for a decade, and had mastered all the little tips and tricks to administering an enterprise using nothing but runas. Now in trots UAC, and while it makes ...
6
votes
2answers
281 views
Can I modify a Windows 7 environment to allow a .NET program to always run as Administrator?
We are about to roll out several hundred new machines running Windows 7 x64, with the OS installed via WDS so at the moment we can make changes and sysprep them into the build.
The problem is a ...
5
votes
5answers
512 views
How important is UAC for developers?
Our small team of developers primarily uses Windows Vista. There has been some debate about the importance of Vista UAC (User Account Control).
How important is UAC for experienced users, ...
5
votes
1answer
171 views
Windows 7 Command Line Prompt
From a regular windows 7 command line, how do I launch the admin command prompt?
5
votes
3answers
251 views
On Windows Vista, is there a way to allow an application to always run with elevated permissions?
Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...
5
votes
1answer
802 views
Windows 2008 never run a program “as administrator”
I have an application that Windows 2008 would always run "as administrator" (i.e. the blue/yellow shield overlay icon is always visible).
However, the "run this program as an administrator" flag is ...
4
votes
6answers
401 views
Good reason for UAC on a server machine?
Given that accounts with login access to a server OS would usually be a systems administrator (or in general, has elevated privileges), is there a good reason to have User Access Control turned on? ...
4
votes
3answers
1k views
Are UAC prompts suppressed on Win7 over RDC?
I am testing an application on clean Win7 Enterprise VMs but I am seeing different UAC behavior between VMs reached over RDC than with physical machines running the same O/S. The VMs are hosted on ...
4
votes
2answers
3k views
Start ELEVATED script from within script
Hallo,
I'm playing around with Powershell (relative NewBie) and I'm looking for the easiest way to call a Powershell script with elevated rights from within another script.
I know of the runas verb ...
4
votes
4answers
2k views
How important is it to install on the program files folder?
In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users ...
4
votes
2answers
2k views
Why is using ntrights.exe in Windows Server 2008 R2 giving error openpolicy -1073741790
I am local admin on a windows server 2003 R2 machine in our domain. This machine was built about 3 years back and I am not sure what privilges I might have. If I use ntrights.exe (from resource kit ...
4
votes
1answer
555 views
Can UAC levels lower than max be turned off programatically?
I was recently told that if your UAC level is anything less than the maximum (always notify) then malicious programs can programatically lower your UAC settings, thereby rendering UAC useless.
Now, ...
4
votes
3answers
1k views
Why is my global security group being filtered out of my logon token?
While investigating the effects of filtered tokens on my file permissions, I noticed that one of my global security groups is being filtered in addition to the regular system-defined filtered groups.
...
3
votes
1answer
822 views
Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions
I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
3
votes
1answer
3k views
Silently install MSI without disabling UAC
I have an MSI file which I produce that I need to install on a number of Windows 2008 machines as part of automated deployment process in a test environment.
When I install the MSI by hand I get a ...
3
votes
5answers
1k views
Domain Admins group denied access to d: drive
I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01).
The member server has a C: and a D: drive.
Part ...
3
votes
3answers
481 views
Open Elevated “Administrator:” cmd prompt instead of “cmd prompt (Running as Administrator)”
If you open a command prompt with a runas command, you will see a window that shows
(Running as some_user)
In the title bar, but if you right click on cmd.exe and choose Run as Administrator you ...
3
votes
2answers
5k views
Can a batch run as admin launch another batch as limited user?
I have a batch that is being run with administrative privileges on a Windows 7 machine. That batch has to run another batch, which should access a mapped network drive. However, network drives are ...
3
votes
3answers
814 views
What can trigger a UAC prompt on an executable?
I have a workstation on a domain that's displaying the UAC (User Account Control) prompt for executing a program and I can't figure out why (I don't want it running with administrator privileges).
...
3
votes
2answers
441 views
IIS application pool and UAC
My system is Windows Server 2008 R2 with IIS 7.5. I need to run a site which is allowed to do some administrative tasks. I have created an AD user account and added it to all the required groups. The ...
2
votes
8answers
5k views
Is disabling UAC on a Windows 2008 server a bad idea?
We've just upgraded to Windows 2008 server, and I'm already getting really sick of approving dozens of UAC messages. I normally disable UAC on my personal Vista machines, but I'm reluctant to do this ...
2
votes
6answers
4k views
Why can't I drag/drop a file for editing in notepad in Windows Server 2008?
When notepad is run, I can drag/drop a file to open it, but then it can't save the file.
When I run notepad elevated to save the file, I can no longer drag/drop to open the file.
I understand its a ...
2
votes
3answers
6k views
Windows Server 2008, “The requested operation requires elevation”
Sorry for the newbe question, but I'm a developer who hasn't touch a Windows Server in years. A recent project has required me to setup and configure a development VM running Windows Server 2008, IIS ...
2
votes
4answers
493 views
Running Visual Studio 2010 in a University Campus
We have just installed Windows 7 Enterprise x64 in one of our computer labs being used by students for programming. However, when we installed Visual Studio 2010 Ultimate on the machines, we found ...
2
votes
1answer
152 views
Is there a correct way to turn off UAC, User Account Control, in Windows Server 2008?
Is there a correct way to turn off UAC, User Account Control, in Windows Server 2008?
I have found an article at Microsoft explaining the various settings. It looks like it is just a matter of ...
2
votes
2answers
757 views
NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group
As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
2
votes
1answer
250 views
AD: Domain admin needs elevation
I'm trying to change settings on my freshly installed server. I've added it in my domain but I cannot figure out why I keep getting messages like this: "The requested action needs elevation".
The ...
2
votes
1answer
2k views
How to disable UAC on a domain controller?
I need to disable UAC on a Windows Server 2008 R2 domain controller, but I can't access its settings through the usual path (Control Panel -> User Accounts -> User Accounts), because a DC doesn't have ...
2
votes
2answers
782 views
How can I allow a limited user to change the system time in Windows 7 without disabling UAC?
I need to allow a couple specific users rights to change their local system time in Windows 7 x64. I have already assigned them the right through group policy using the "Change the system time" user ...
2
votes
1answer
240 views
Prevent Flash Updates - Win 7
I wish to prevent the Adobe Flash player from checking for updates on all domain computers. In principle it's as simple as creating a UTF-8 format file name mms.cfg in the ...
2
votes
2answers
754 views
Curious Interaction between User Account Control, Explorer, and local Users group
I have an example directory hosted on a data drive on a Windows Server 2008 installation ("MACHINE"). Only SYSTEM, Domain Admins, and Administrators (local) have full control permissions applied to ...
2
votes
2answers
117 views
Is UAC Preventing write access to Programs Folder?
We have a legacy application on a number of client sites. In some cases clients need to have write access to a folder or two under the Program Files (x86) folder.
As time goes on more and more of the ...
2
votes
1answer
239 views
Find out which account disabled UAC
Someone or something recently disabled UAC on a critical server and it is now asking for a reboot (which can not happen). Is there an event in the logs that will tell me which account disabled this? ...
2
votes
4answers
1k views
Why would my domain admins turn off UAC? [closed]
I'm a developer of internal software in our company, I've gotten used to UAC in Win7, I prefer to run with in enabled so that our software works correctly with it enabled.
Sysadmins have recently ...
2
votes
1answer
869 views
Disable UAC And Windows Security Center alerts under Vista Business
We have a few Windows Vista Business with User Account Control turned off (the reason is because those machines need to run a series of programs that do not work with UAC, the boxes have no Internet ...
2
votes
1answer
495 views
Quickbooks 2011 now requires UAC logn, but the currently logged on user and password WORKS FINE?
I have a real strange one... I do IT work for an accounting firm, and because they have such a diverse group of clients, they have many different versions of Quickbooks installed at once. All ...
2
votes
2answers
665 views
How to run a program marked as requiring elevation via UAC without actual elevation on Windows 7?
I have a program, specifically an installer, which is marked is requiring elevation with highestAvailable approach. I am using an administrator account with UAC at the highest level.
Is it possible ...
2
votes
1answer
368 views
Win7 UAC tokens
It is known that under win7 UAC you receive 2 tokens when you logon to the system: std user token and admin token.
If I disable UAC, what should I get? only admin token? or still both with no ...
2
votes
1answer
1k views
How could I make a MsAccess Frontend and Mysql Backend more user aware?
I have a distributed MsAccess front-end database which uses a mysql backend.
It uses the Windows System DSN ODBC connections to connect to the server. All my Linked tables refer to that ODBC ...
2
votes
1answer
1k views
Automatically run a powershell script elevated
Is there a way to run a powershell script automatically in Elevated mode?
I am trying to automate some post-image tasks without user intervention, but am getting caught with the UAC. Is there a way ...
2
votes
2answers
359 views
Windows 7 Enterprise UAC dialog pops under all windows
I have a Windows 7 Enterprise x64 machine both at work and at home for some reason the UAC dialog windows like to pop UNDER all of my windows instead of on top of everything, is this a bug? It's not ...
2
votes
3answers
2k views
Windows Server 2008 R2 elevated explorer
On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer 'as administrator' it doesnt appear to actually grant administrative rights to the ...
2
votes
0answers
253 views
Giving Select Windows Domain Users Symbolic Link Privilege
I would like to setup select users on our domain to have the ability to create symbolic links on local NTFS drives and network shares without needing to run as Administrator, as part of an application ...
2
votes
1answer
243 views
logman command at startup requires elevation
I am trying to setup Performance Counters on a Windows Server 2008 R2 server and have successfully setup the counters. The problem is that I need to manually start the counters each time the server is ...
2
votes
1answer
1k views
Win 7 Privilege Level (Run as administrator) via GP or command line
Is there a way to set the Privilege Level for legacy software via group policy or on the command line?
I have some legacy software, which we unfortunately cannot move away from. This software ...
1
vote
3answers
440 views
UAC in an Active Directory environment
At work, we've recently received a recommendation to have two separate accounts for domain administrators. One account would be a standard user account with no admin privileges and one would be a ...
1
vote
1answer
561 views
Windows Server 2008 R2 mapped shares do not show up in command line
When I map a shared folder to a drive in Explorer in Windows Server 2008 R2 the new drive letter (say Z:) does not work in cmd.exe (started as administrator).
What am I doing wrong?
I believe this ...
