Questions tagged [uac]
UAC stands for User Account Control and is a security system present and enabled by default in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.
156
questions
0
votes
1
answer
33
views
best practice of UAC: Behavior of the elevation prompt for administrators in Admin Approval Mode
I found the follwing regarding UAC Behavior of the elevation prompt for administrators in Admin Approval Mode:
Malware can present an imitation of the secure desktop, but when the User Account ...
- 111
0
votes
0
answers
33
views
0x80004005 when performing administrative tasks
We have an AD network, and a group of users has higher privileges than the standard, configured via GPO in Computer Configuration > Policies > Windows Settings > Security Settings > ...
- 302
-1
votes
1
answer
146
views
Create a local Windows user with high integrity level
A Windows user which is member of Administrators groups has 2 Access tokens:
One with medium integrity level.
One with high integrity level.
The first one is used by default. When an application ...
- 339
0
votes
1
answer
120
views
How does Windows establish whether application makes changes to device
For applications that trigger the UAC ("Do you want to allow this app to make changes to your device" dialog), which are the characteristics that are detected by Windows in order to decide ...
- 350
-2
votes
1
answer
198
views
You don't currently have permission to access this folder. Windows 10 User Authentication Error Dialog Box [closed]
I recently was given Admin rights on my machine at work.
Unfortunately, when I am going through the directory structure I kept getting this message box:
If I hit continue, I need to change the ...
0
votes
1
answer
2k
views
Error 1332 while changing folder permissions with cacls
I want to change the user permissions of the folder C:\Program Files\MyProgram so that every user is allowed to write to that folder.
I am able to set the corresponding user rights manually within the ...
- 176
1
vote
1
answer
669
views
How do I start an elevated process with schtasks.exe?
GUI vs Command-Line
The task scheduler GUI provides an option to run the scheduled task in an elevated context ("Run with highest privileges"), e.g.
I cannot find a corresponding flag for ...
- 237
1
vote
1
answer
2k
views
Permission issues with administrator account on Windows Server 2012 R2 -- cannot create new files and need elevated privileges to edit files
Have a domain account and a local account. Both are administrators -- they are part of the administrators group. For some odd reason, something must have gotten corrupted as accounts require elevated ...
- 161
7
votes
1
answer
119
views
In what ways can access token update be triggered for administrator accounts on workstations?
This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
- 1,653
2
votes
0
answers
396
views
Almost every administrative action is prevented with "access denied" on a Windows Server 2008 R2
On a Server 2008 R2 (member of a domain but not a domain controller) we suddenly can't perform any administrative task. Every action (like net stop ..., whoami, ...) is denied with an access denied ...
- 2,175
2
votes
1
answer
1k
views
smart card for UAC only
I'm in the process of configuring USB Yubikeys as a smart card for our company so that staff can elevate to an admin account (added to the computer's local administrators group) by simply inserting ...
- 578
1
vote
1
answer
1k
views
Run application on any user sign in/log on with elevated privileges
I am trying to make an application run on any user sign in (or session connection, be it local or remote) having elevated privileges, but without UAC prompt. When new user is added, application should ...
- 123
5
votes
1
answer
3k
views
How to make UAC ask for username and password every time?
if i start a CMD with elevated rights the UAC asks for the password of my current user, which is only a normal user. So i need to switch the user under "weitere Optionen" (more choices)
If i start a ...
- 161
0
votes
0
answers
218
views
UAC with install automation: SCCM or Powershell Remoting
I am trying to get my head around the best approach for managing UAC. What I WANT:
Regular users are not Local Admins and have somewhat elevated UAC.
Special "Install" user is Local Admin but not ...
- 175
0
votes
0
answers
171
views
File Share files wont execute
I have a Windows Server 2016 which is hosting a small file share. I have full control of the fileshare (from the root drive to every file) and even the "everyone" group have permission to execute ...
0
votes
0
answers
330
views
Initialize service on remote computer without LocalAccountTokenFilterPolicy
I'm trying to use PsTools to configure remote computers. When I tried to initialize a Ps service at the remote computer for the first time, I got an Access is denied. error, even when authenticated as ...
- 101
0
votes
1
answer
293
views
Windows - Fine-grained administrator permissions
Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer.
Is there any way to limit what a program can do when run as administrator.
Most ...
- 235
1
vote
2
answers
270
views
Access Controls on Files, Folders, and Other System Objects in Windows Server
Why do other users have to Run as Administrator and I don't?
I have an executable file, which I placed in a folder on the C drive of a server.
We all remote desktop in to access this server. We are ...
- 185
1
vote
1
answer
137
views
Automatically decline UAC prompt for specific binary and/or path
Is it possible to automatically decline UAC prompts from a specific binary or path ? (As if user clicked "no" or as if GPO was set to automatically decline)
- 351
1
vote
0
answers
1k
views
windows 10 screen turns black on uac prompt and user gets signed off
I have an to me absolutely unknown behavior on one machine with windows 10. If the user wants to run a setup or another executable and windows wants to ask the user for really executing and/or for ...
- 113
0
votes
0
answers
169
views
Installer file not launching with Administrative privileges in Windows 10
I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs.
I joined them to my Domain, then logged in as the Domain ...
- 1,614
1
vote
0
answers
1k
views
windows-10 How to permit application execution instead of error "This app has been blocked by your system administrator"?
When trying to run an EXE I'm getting the error "This app has been blocked by your system administrator". How can I configure the Software Restriction Policies to allow the user to install the ...
- 135
0
votes
0
answers
2k
views
User account control Windows - Run as administrator broken
So far, this issue occurs on 3 different systems. Windows 10, Server 2012 and Server 2016 (I suspect this is also the case on windows 8 as server 2012 is basically the same thing but not used it).
...
- 171
3
votes
1
answer
2k
views
Creating Separate GPOs for Win7 and Win10
(I should preface this by saying I recently shifted jobs and have come from a much smaller company with a mostly linux environment to a larger company with a very standard windows server environment, ...
- 506
1
vote
1
answer
700
views
Users get UAC when installing shared print drivers through web interface
I'm having a problem where users on Windows 7 (Only OS tried though) are getting the UAC prompt when attempting to install printer drivers from a Windows print server. However, they are only receiving ...
- 11
4
votes
3
answers
17k
views
Task manager requiring elevation for regular users in Windows 10
Run into a little bit of a snag with Windows 10, and it's a fairly well known one - the problem is that I'm struggling to find a Windows 10 compatible fix that actually works!
It's the old "regular ...
- 51
0
votes
1
answer
3k
views
Elevate to administrator privileges in CMD/Powershell without UAC?
I managed to change the port or remote desktop on my Windows Server 2016, using REGEDIT. But the problem began when I forgot to open that port in the firewall, so therefor I can no longer access ...
- 3
8
votes
1
answer
1k
views
Entering local admin username and password in a script
I have alot of clients on my network and I want my script to do the following:
[1] Open an elevated command prompt using the local admin details.
Note: I do not want to have to enter a username ...
- 107
0
votes
1
answer
5k
views
On RDS, an application is asking for admin rights everytime
I have a 2012 R2 server with some RDS users. One of the applications, that is locally installed, is asking them for administrative permissions everythime it runs. This annoys my users and the only ...
- 487
0
votes
1
answer
514
views
Run specific program as administrator without UAC for specific group
I need to run program as administrator for all users in some group.
Say that there is software name soft.exe and three users (ad-admin,user1-regular,user2-regular) in group userGroup.
I need that in ...
- 11
0
votes
1
answer
1k
views
Windows Administrators cannot write files
I need two accounts on a Windows 2012 Server which can act as equally as administrators via Remote Desktop. Let's say I have created accounts Alice and Bob and they are both members of the the Group ...
- 101
6
votes
1
answer
130
views
WMI permissions for changing local IP without elevated privileges
I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
0
votes
1
answer
1k
views
How can we run a logon script to mount drives UAC?
We have a small environment where we are setting up mountable drives using a login.bat file, reason why we are doing this because our script first tests whether the folder is created for that user, ...
2
votes
1
answer
257
views
UAC - When set to "Never notify" do I still have a dual token?
UAC can be set to never notify, but that's not the same as not having UAC at all.
What I mean is, does the OS still create a dual token for admin users but just auto-elevate everything?
The ...
- 949
-1
votes
1
answer
1k
views
UAC turns off on Windows 10 when log in to the AD domain
When my Windows 10 logs in to the AD domain of our company, UAC are turned off. Which is annoying and prevent apps from Windows Store to run.
This happens to everyone in our company. This is not ...
-6
votes
2
answers
317
views
How can I block the group policy from disabling uac? [closed]
Where I work, our group policy disables UAC for the handful of users that don't know how to make certain applications work with UAC enabled. I don't need UAC to be disabled. Is there a way I can set ...
- 101
1
vote
0
answers
72
views
UAC never asks for admin password, denies access on admin-related tasks, on client computer. How to fix UAC?
I have a client computer, Windows 7 64 bit, connected to our network. The user who signs on is not an admin (according to our active directory). It's having credential issues which I'm trying to fix ...
- 11
4
votes
1
answer
2k
views
windows 10 "run as administrator" not starting [closed]
Under Windows 10, I'm logging as an user supposed to have local machine administrator rights. Unfortunately, when I try to launch some application by right-click-ing "Run as administrator", the ...
- 143
3
votes
1
answer
326
views
List of Privileges Considered for Standard User As "Additional Privileges" for Windows UAC
I am trying to understand some behavior I am seeing with Windows User Account Control (UAC). We have an application that is being run with the manifest requestedExecutionLevel highestAvailable.
&...
- 324
0
votes
0
answers
2k
views
“WindowsError: [Error 5] Access is denied” when running a python script
I'm getting a "WindowsError: [Error 5] Access is denied" message when running a python script which attempts to make an https connection. The following error message is produced by python:
Traceback ...
- 111
0
votes
0
answers
636
views
IBM Domino 9.0.1 on Windows Server 2008: How to get rid of UAC when starting console
We are installing Domino Servers Version 9.0.1 64Bit on Windows Server 2008 R2 at the moment.
Despite the servers in the past with the same operating system on these servers the UAC fires when ...
- 1,013
1
vote
0
answers
112
views
Windows 10 UAC changing for one specific user
I have one user who was recently upgraded to Windows 10 on a laptop that re-enters our domain every day. I have checked on the AD side and notice nothing restrictive about his permissions or which OUs ...
- 11
0
votes
1
answer
90
views
Make usergroups able to authorize User Account Control Prompt
I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator?
Windows server ...
2
votes
1
answer
2k
views
Run php exec function to stop windows services
I have written a web program in php that needs to stop a windows service and start's it when run like this:
exec('net stop spooler'); //to stop printer spooler
exec('net start spooler'); //to start ...
- 21
0
votes
0
answers
1k
views
EnableLinkedConnections for standard users
I've been having some difficulties with seeing local network maps using logon scripts on Server 2008 R2.
For the sake of this conversation, I have two users, one is the domain administrator account ...
- 319
6
votes
4
answers
22k
views
Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)
http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
- 2,685
2
votes
1
answer
488
views
Restricted Groups not working with UAC
I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers.
The restricted group is My_domain\Workstation Admins
Has ...
- 188
2
votes
2
answers
8k
views
Windows UAC disabled but I'm still getting the elevation pop-up
I have UAC disabled on my Windows 2008R2.
Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder?
My user is a member of the ...
- 63
0
votes
1
answer
860
views
Exe is requiring elevated privileges unless it is renammed
Running windows 7 sp1.
I have an application that when installed via MSI requires the program's exe to run with elevated credentials.
When I rename the exe it no longer runs with elevated privileges....
- 4,233
3
votes
1
answer
9k
views
Windows 7: Having Underprivileged User Install and Alter Fonts
I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
- 31