Questions tagged [uac]

UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

Filter by
Sorted by
Tagged with
-1
votes
0answers
55 views

UAC Bypass ‑ Trusted Folder Abuse (WID 4688: credwiz.exe) [closed]

I have received the following info about my active directory server 2016: Detected potentially malicious process activity ('UAC Bypass ‑ Trusted Folder Abuse ') on your host #ADservername# by ...
0
votes
0answers
24 views

Remote support for end users with no local administrator permissions on their machines

In our organization, we are running a local active directory infrastructure where we have around 600-700 active users. During recent threats, we have decided to revoke all local administrator ...
0
votes
1answer
272 views

Error 1332 while changing folder permissions with cacls

I want to change the user permissions of the folder C:\Program Files\MyProgram so that every user is allowed to write to that folder. I am able to set the corresponding user rights manually within the ...
1
vote
1answer
120 views

How do I start an elevated process with schtasks.exe?

GUI vs Command-Line The task scheduler GUI provides an option to run the scheduled task in an elevated context ("Run with highest privileges"), e.g. I cannot find a corresponding flag for ...
0
votes
0answers
107 views

run taskmanager as unprivileged from a user with administrator privileges

Is there a way of running windows 10 task manager without it being elevated to administrator from a user that is in the administrators group? Opening most applications from a administrator account ...
1
vote
1answer
576 views

Permission issues with administrator account on Windows Server 2012 R2 — cannot create new files and need elevated privileges to edit files

Have a domain account and a local account. Both are administrators -- they are part of the administrators group. For some odd reason, something must have gotten corrupted as accounts require elevated ...
7
votes
1answer
65 views

In what ways can access token update be triggered for administrator accounts on workstations?

This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
2
votes
0answers
162 views

Almost every administrative action is prevented with “access denied” on a Windows Server 2008 R2

On a Server 2008 R2 (member of a domain but not a domain controller) we suddenly can't perform any administrative task. Every action (like net stop ..., whoami, ...) is denied with an access denied ...
2
votes
1answer
411 views

smart card for UAC only

I'm in the process of configuring USB Yubikeys as a smart card for our company so that staff can elevate to an admin account (added to the computer's local administrators group) by simply inserting ...
1
vote
1answer
644 views

Run application on any user sign in/log on with elevated privileges

I am trying to make an application run on any user sign in (or session connection, be it local or remote) having elevated privileges, but without UAC prompt. When new user is added, application should ...
4
votes
1answer
1k views

How to make UAC ask for username and password every time?

if i start a CMD with elevated rights the UAC asks for the password of my current user, which is only a normal user. So i need to switch the user under "weitere Optionen" (more choices) If i start a ...
0
votes
0answers
126 views

UAC with install automation: SCCM or Powershell Remoting

I am trying to get my head around the best approach for managing UAC. What I WANT: Regular users are not Local Admins and have somewhat elevated UAC. Special "Install" user is Local Admin but not ...
0
votes
0answers
92 views

File Share files wont execute

I have a Windows Server 2016 which is hosting a small file share. I have full control of the fileshare (from the root drive to every file) and even the "everyone" group have permission to execute ...
0
votes
0answers
256 views

Initialize service on remote computer without LocalAccountTokenFilterPolicy

I'm trying to use PsTools to configure remote computers. When I tried to initialize a Ps service at the remote computer for the first time, I got an Access is denied. error, even when authenticated as ...
0
votes
1answer
223 views

Windows - Fine-grained administrator permissions

Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer. Is there any way to limit what a program can do when run as administrator. Most ...
1
vote
2answers
260 views

Access Controls on Files, Folders, and Other System Objects in Windows Server

Why do other users have to Run as Administrator and I don't? I have an executable file, which I placed in a folder on the C drive of a server. We all remote desktop in to access this server. We are ...
1
vote
1answer
98 views

Automatically decline UAC prompt for specific binary and/or path

Is it possible to automatically decline UAC prompts from a specific binary or path ? (As if user clicked "no" or as if GPO was set to automatically decline)
1
vote
0answers
1k views

windows 10 screen turns black on uac prompt and user gets signed off

I have an to me absolutely unknown behavior on one machine with windows 10. If the user wants to run a setup or another executable and windows wants to ask the user for really executing and/or for ...
0
votes
0answers
91 views

Installer file not launching with Administrative privileges in Windows 10

I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs. I joined them to my Domain, then logged in as the Domain ...
1
vote
0answers
1k views

windows-10 How to permit application execution instead of error “This app has been blocked by your system administrator”?

When trying to run an EXE I'm getting the error "This app has been blocked by your system administrator". How can I configure the Software Restriction Policies to allow the user to install the ...
0
votes
0answers
1k views

User account control Windows - Run as administrator broken

So far, this issue occurs on 3 different systems. Windows 10, Server 2012 and Server 2016 (I suspect this is also the case on windows 8 as server 2012 is basically the same thing but not used it). ...
3
votes
1answer
2k views

Creating Separate GPOs for Win7 and Win10

(I should preface this by saying I recently shifted jobs and have come from a much smaller company with a mostly linux environment to a larger company with a very standard windows server environment, ...
1
vote
1answer
442 views

Users get UAC when installing shared print drivers through web interface

I'm having a problem where users on Windows 7 (Only OS tried though) are getting the UAC prompt when attempting to install printer drivers from a Windows print server. However, they are only receiving ...
3
votes
2answers
11k views

Task manager requiring elevation for regular users in Windows 10

Run into a little bit of a snag with Windows 10, and it's a fairly well known one - the problem is that I'm struggling to find a Windows 10 compatible fix that actually works! It's the old "regular ...
0
votes
1answer
2k views

Elevate to administrator privileges in CMD/Powershell without UAC?

I managed to change the port or remote desktop on my Windows Server 2016, using REGEDIT. But the problem began when I forgot to open that port in the firewall, so therefor I can no longer access ...
8
votes
1answer
644 views

Entering local admin username and password in a script

I have alot of clients on my network and I want my script to do the following: [1] Open an elevated command prompt using the local admin details. Note: I do not want to have to enter a username ...
0
votes
1answer
4k views

On RDS, an application is asking for admin rights everytime

I have a 2012 R2 server with some RDS users. One of the applications, that is locally installed, is asking them for administrative permissions everythime it runs. This annoys my users and the only ...
0
votes
1answer
410 views

Run specific program as administrator without UAC for specific group

I need to run program as administrator for all users in some group. Say that there is software name soft.exe and three users (ad-admin,user1-regular,user2-regular) in group userGroup. I need that in ...
0
votes
1answer
857 views

Windows Administrators cannot write files

I need two accounts on a Windows 2012 Server which can act as equally as administrators via Remote Desktop. Let's say I have created accounts Alice and Bob and they are both members of the the Group ...
6
votes
1answer
98 views

WMI permissions for changing local IP without elevated privileges

I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
0
votes
1answer
922 views

How can we run a logon script to mount drives UAC?

We have a small environment where we are setting up mountable drives using a login.bat file, reason why we are doing this because our script first tests whether the folder is created for that user, ...
2
votes
1answer
186 views

UAC - When set to “Never notify” do I still have a dual token?

UAC can be set to never notify, but that's not the same as not having UAC at all. What I mean is, does the OS still create a dual token for admin users but just auto-elevate everything? The ...
-1
votes
1answer
1k views

UAC turns off on Windows 10 when log in to the AD domain

When my Windows 10 logs in to the AD domain of our company, UAC are turned off. Which is annoying and prevent apps from Windows Store to run. This happens to everyone in our company. This is not ...
-6
votes
2answers
300 views

How can I block the group policy from disabling uac? [closed]

Where I work, our group policy disables UAC for the handful of users that don't know how to make certain applications work with UAC enabled. I don't need UAC to be disabled. Is there a way I can set ...
1
vote
0answers
34 views

UAC never asks for admin password, denies access on admin-related tasks, on client computer. How to fix UAC?

I have a client computer, Windows 7 64 bit, connected to our network. The user who signs on is not an admin (according to our active directory). It's having credential issues which I'm trying to fix ...
4
votes
1answer
2k views

windows 10 “run as administrator” not starting [closed]

Under Windows 10, I'm logging as an user supposed to have local machine administrator rights. Unfortunately, when I try to launch some application by right-click-ing "Run as administrator", the ...
3
votes
1answer
247 views

List of Privileges Considered for Standard User As “Additional Privileges” for Windows UAC

I am trying to understand some behavior I am seeing with Windows User Account Control (UAC). We have an application that is being run with the manifest requestedExecutionLevel highestAvailable. &...
0
votes
0answers
2k views

“WindowsError: [Error 5] Access is denied” when running a python script

I'm getting a "WindowsError: [Error 5] Access is denied" message when running a python script which attempts to make an https connection. The following error message is produced by python: Traceback ...
0
votes
0answers
567 views

IBM Domino 9.0.1 on Windows Server 2008: How to get rid of UAC when starting console

We are installing Domino Servers Version 9.0.1 64Bit on Windows Server 2008 R2 at the moment. Despite the servers in the past with the same operating system on these servers the UAC fires when ...
1
vote
0answers
105 views

Windows 10 UAC changing for one specific user

I have one user who was recently upgraded to Windows 10 on a laptop that re-enters our domain every day. I have checked on the AD side and notice nothing restrictive about his permissions or which OUs ...
0
votes
1answer
25 views

Make usergroups able to authorize User Account Control Prompt

I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator? Windows server ...
2
votes
1answer
2k views

Run php exec function to stop windows services

I have written a web program in php that needs to stop a windows service and start's it when run like this: exec('net stop spooler'); //to stop printer spooler exec('net start spooler'); //to start ...
0
votes
0answers
898 views

EnableLinkedConnections for standard users

I've been having some difficulties with seeing local network maps using logon scripts on Server 2008 R2. For the sake of this conversation, I have two users, one is the domain administrator account ...
5
votes
4answers
17k views

Disabling the prompt to “Click Continue to permanently get access to this folder” (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
2
votes
1answer
370 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
2
votes
2answers
6k views

Windows UAC disabled but I'm still getting the elevation pop-up

I have UAC disabled on my Windows 2008R2. Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder? My user is a member of the ...
0
votes
1answer
778 views

Exe is requiring elevated privileges unless it is renammed

Running windows 7 sp1. I have an application that when installed via MSI requires the program's exe to run with elevated credentials. When I rename the exe it no longer runs with elevated privileges....
3
votes
1answer
9k views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
5
votes
2answers
10k views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
1
vote
0answers
264 views

How do I allow pass through access to a new shared drive on a Windows Server 2008 R2 box?

I am trying to allow access to a shared drive on our server (running windows server 2008 R2) so that users (running windows 7) can access the files on it. However, whenever they try to connect, it ...