Questions tagged [uac]

UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

Filter by
Sorted by
Tagged with
0 votes
1 answer
36 views

How does Windows establish whether application makes changes to device

For applications that trigger the UAC ("Do you want to allow this app to make changes to your device" dialog), which are the characteristics that are detected by Windows in order to decide ...
user avatar
  • 300
-2 votes
1 answer
75 views

You don't currently have permission to access this folder. Windows 10 User Authentication Error Dialog Box [closed]

I recently was given Admin rights on my machine at work. Unfortunately, when I am going through the directory structure I kept getting this message box: If I hit continue, I need to change the ...
user avatar
0 votes
1 answer
787 views

Error 1332 while changing folder permissions with cacls

I want to change the user permissions of the folder C:\Program Files\MyProgram so that every user is allowed to write to that folder. I am able to set the corresponding user rights manually within the ...
user avatar
1 vote
1 answer
278 views

How do I start an elevated process with schtasks.exe?

GUI vs Command-Line The task scheduler GUI provides an option to run the scheduled task in an elevated context ("Run with highest privileges"), e.g. I cannot find a corresponding flag for ...
user avatar
  • 217
1 vote
1 answer
1k views

Permission issues with administrator account on Windows Server 2012 R2 -- cannot create new files and need elevated privileges to edit files

Have a domain account and a local account. Both are administrators -- they are part of the administrators group. For some odd reason, something must have gotten corrupted as accounts require elevated ...
user avatar
7 votes
1 answer
71 views

In what ways can access token update be triggered for administrator accounts on workstations?

This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
user avatar
  • 1,643
2 votes
0 answers
244 views

Almost every administrative action is prevented with "access denied" on a Windows Server 2008 R2

On a Server 2008 R2 (member of a domain but not a domain controller) we suddenly can't perform any administrative task. Every action (like net stop ..., whoami, ...) is denied with an access denied ...
user avatar
  • 2,066
2 votes
1 answer
645 views

smart card for UAC only

I'm in the process of configuring USB Yubikeys as a smart card for our company so that staff can elevate to an admin account (added to the computer's local administrators group) by simply inserting ...
user avatar
  • 548
1 vote
1 answer
840 views

Run application on any user sign in/log on with elevated privileges

I am trying to make an application run on any user sign in (or session connection, be it local or remote) having elevated privileges, but without UAC prompt. When new user is added, application should ...
user avatar
  • 123
4 votes
1 answer
2k views

How to make UAC ask for username and password every time?

if i start a CMD with elevated rights the UAC asks for the password of my current user, which is only a normal user. So i need to switch the user under "weitere Optionen" (more choices) If i start a ...
user avatar
  • 151
0 votes
0 answers
149 views

UAC with install automation: SCCM or Powershell Remoting

I am trying to get my head around the best approach for managing UAC. What I WANT: Regular users are not Local Admins and have somewhat elevated UAC. Special "Install" user is Local Admin but not ...
user avatar
  • 177
0 votes
0 answers
118 views

File Share files wont execute

I have a Windows Server 2016 which is hosting a small file share. I have full control of the fileshare (from the root drive to every file) and even the "everyone" group have permission to execute ...
user avatar
0 votes
0 answers
278 views

Initialize service on remote computer without LocalAccountTokenFilterPolicy

I'm trying to use PsTools to configure remote computers. When I tried to initialize a Ps service at the remote computer for the first time, I got an Access is denied. error, even when authenticated as ...
user avatar
  • 101
0 votes
1 answer
246 views

Windows - Fine-grained administrator permissions

Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer. Is there any way to limit what a program can do when run as administrator. Most ...
user avatar
1 vote
2 answers
265 views

Access Controls on Files, Folders, and Other System Objects in Windows Server

Why do other users have to Run as Administrator and I don't? I have an executable file, which I placed in a folder on the C drive of a server. We all remote desktop in to access this server. We are ...
user avatar
1 vote
1 answer
114 views

Automatically decline UAC prompt for specific binary and/or path

Is it possible to automatically decline UAC prompts from a specific binary or path ? (As if user clicked "no" or as if GPO was set to automatically decline)
user avatar
  • 353
1 vote
0 answers
1k views

windows 10 screen turns black on uac prompt and user gets signed off

I have an to me absolutely unknown behavior on one machine with windows 10. If the user wants to run a setup or another executable and windows wants to ask the user for really executing and/or for ...
user avatar
0 votes
0 answers
116 views

Installer file not launching with Administrative privileges in Windows 10

I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs. I joined them to my Domain, then logged in as the Domain ...
user avatar
  • 1,574
1 vote
0 answers
1k views

windows-10 How to permit application execution instead of error "This app has been blocked by your system administrator"?

When trying to run an EXE I'm getting the error "This app has been blocked by your system administrator". How can I configure the Software Restriction Policies to allow the user to install the ...
user avatar
  • 135
0 votes
0 answers
1k views

User account control Windows - Run as administrator broken

So far, this issue occurs on 3 different systems. Windows 10, Server 2012 and Server 2016 (I suspect this is also the case on windows 8 as server 2012 is basically the same thing but not used it). ...
user avatar
  • 171
3 votes
1 answer
2k views

Creating Separate GPOs for Win7 and Win10

(I should preface this by saying I recently shifted jobs and have come from a much smaller company with a mostly linux environment to a larger company with a very standard windows server environment, ...
user avatar
  • 506
1 vote
1 answer
592 views

Users get UAC when installing shared print drivers through web interface

I'm having a problem where users on Windows 7 (Only OS tried though) are getting the UAC prompt when attempting to install printer drivers from a Windows print server. However, they are only receiving ...
user avatar
4 votes
2 answers
13k views

Task manager requiring elevation for regular users in Windows 10

Run into a little bit of a snag with Windows 10, and it's a fairly well known one - the problem is that I'm struggling to find a Windows 10 compatible fix that actually works! It's the old "regular ...
user avatar
0 votes
1 answer
3k views

Elevate to administrator privileges in CMD/Powershell without UAC?

I managed to change the port or remote desktop on my Windows Server 2016, using REGEDIT. But the problem began when I forgot to open that port in the firewall, so therefor I can no longer access ...
user avatar
8 votes
1 answer
862 views

Entering local admin username and password in a script

I have alot of clients on my network and I want my script to do the following: [1] Open an elevated command prompt using the local admin details. Note: I do not want to have to enter a username ...
user avatar
0 votes
1 answer
4k views

On RDS, an application is asking for admin rights everytime

I have a 2012 R2 server with some RDS users. One of the applications, that is locally installed, is asking them for administrative permissions everythime it runs. This annoys my users and the only ...
user avatar
  • 475
0 votes
1 answer
418 views

Run specific program as administrator without UAC for specific group

I need to run program as administrator for all users in some group. Say that there is software name soft.exe and three users (ad-admin,user1-regular,user2-regular) in group userGroup. I need that in ...
user avatar
  • 11
0 votes
1 answer
1k views

Windows Administrators cannot write files

I need two accounts on a Windows 2012 Server which can act as equally as administrators via Remote Desktop. Let's say I have created accounts Alice and Bob and they are both members of the the Group ...
user avatar
  • 101
6 votes
1 answer
107 views

WMI permissions for changing local IP without elevated privileges

I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
user avatar
0 votes
1 answer
1k views

How can we run a logon script to mount drives UAC?

We have a small environment where we are setting up mountable drives using a login.bat file, reason why we are doing this because our script first tests whether the folder is created for that user, ...
user avatar
2 votes
1 answer
212 views

UAC - When set to "Never notify" do I still have a dual token?

UAC can be set to never notify, but that's not the same as not having UAC at all. What I mean is, does the OS still create a dual token for admin users but just auto-elevate everything? The ...
user avatar
-1 votes
1 answer
1k views

UAC turns off on Windows 10 when log in to the AD domain

When my Windows 10 logs in to the AD domain of our company, UAC are turned off. Which is annoying and prevent apps from Windows Store to run. This happens to everyone in our company. This is not ...
user avatar
-6 votes
2 answers
303 views

How can I block the group policy from disabling uac? [closed]

Where I work, our group policy disables UAC for the handful of users that don't know how to make certain applications work with UAC enabled. I don't need UAC to be disabled. Is there a way I can set ...
user avatar
1 vote
0 answers
36 views

UAC never asks for admin password, denies access on admin-related tasks, on client computer. How to fix UAC?

I have a client computer, Windows 7 64 bit, connected to our network. The user who signs on is not an admin (according to our active directory). It's having credential issues which I'm trying to fix ...
user avatar
  • 11
4 votes
1 answer
2k views

windows 10 "run as administrator" not starting [closed]

Under Windows 10, I'm logging as an user supposed to have local machine administrator rights. Unfortunately, when I try to launch some application by right-click-ing "Run as administrator", the ...
user avatar
3 votes
1 answer
268 views

List of Privileges Considered for Standard User As "Additional Privileges" for Windows UAC

I am trying to understand some behavior I am seeing with Windows User Account Control (UAC). We have an application that is being run with the manifest requestedExecutionLevel highestAvailable. &...
user avatar
0 votes
0 answers
2k views

“WindowsError: [Error 5] Access is denied” when running a python script

I'm getting a "WindowsError: [Error 5] Access is denied" message when running a python script which attempts to make an https connection. The following error message is produced by python: Traceback ...
user avatar
  • 111
0 votes
0 answers
606 views

IBM Domino 9.0.1 on Windows Server 2008: How to get rid of UAC when starting console

We are installing Domino Servers Version 9.0.1 64Bit on Windows Server 2008 R2 at the moment. Despite the servers in the past with the same operating system on these servers the UAC fires when ...
user avatar
  • 993
1 vote
0 answers
107 views

Windows 10 UAC changing for one specific user

I have one user who was recently upgraded to Windows 10 on a laptop that re-enters our domain every day. I have checked on the AD side and notice nothing restrictive about his permissions or which OUs ...
user avatar
0 votes
1 answer
26 views

Make usergroups able to authorize User Account Control Prompt

I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator? Windows server ...
user avatar
2 votes
1 answer
2k views

Run php exec function to stop windows services

I have written a web program in php that needs to stop a windows service and start's it when run like this: exec('net stop spooler'); //to stop printer spooler exec('net start spooler'); //to start ...
user avatar
0 votes
0 answers
995 views

EnableLinkedConnections for standard users

I've been having some difficulties with seeing local network maps using logon scripts on Server 2008 R2. For the sake of this conversation, I have two users, one is the domain administrator account ...
user avatar
  • 319
5 votes
4 answers
19k views

Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
user avatar
  • 2,645
2 votes
1 answer
404 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
user avatar
2 votes
2 answers
7k views

Windows UAC disabled but I'm still getting the elevation pop-up

I have UAC disabled on my Windows 2008R2. Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder? My user is a member of the ...
user avatar
  • 63
0 votes
1 answer
821 views

Exe is requiring elevated privileges unless it is renammed

Running windows 7 sp1. I have an application that when installed via MSI requires the program's exe to run with elevated credentials. When I rename the exe it no longer runs with elevated privileges....
user avatar
  • 3,979
3 votes
1 answer
9k views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
user avatar
5 votes
2 answers
13k views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
user avatar
  • 2,924
1 vote
0 answers
302 views

How do I allow pass through access to a new shared drive on a Windows Server 2008 R2 box?

I am trying to allow access to a shared drive on our server (running windows server 2008 R2) so that users (running windows 7) can access the files on it. However, whenever they try to connect, it ...
user avatar
  • 11
2 votes
1 answer
7k views

Running Visual Studio and IIS without Administrator rights on Windows

I find it hard to believe that Microsoft didn't forsee a possibility where a company would need a developer to be able to use IIS and Visual Studio with full rights but NOT want to just haphazardly ...
user avatar